OBLV Init Container
Sets up all the iptables rules in the pod network space to ensure secure and efficient communication.
OBLV Confidential Pods
Overview
OBLV Deploy offers a Confidential Pod containing multiple containers designed for secure and scalable operations. The main container hosts the Enclave Image File (EIF) to initialize the enclave, while auxiliary containers manage secure communication and traffic routing. This setup, available via AWS Marketplace, ensures seamless integration and provides robust Confidential Computing solutions.
Pod Components
The Confidential Pod consists of the following components:
Enclave Image File
Contains all the default plugins required to run user applications seamlessly within the enclave.
OBLV Boot Script
Starts the enclave, attests it with default plugins, and uploads the manifest. After the manifest is uploaded, it attests the entire enclave with both user and OBLV plugins. Finally, it syncs the service account token to the enclave.
Traffic Management Container
Manages both ingress and egress traffic for the enclave. It performs TCP to VSOCK translations for ingress traffic and VSOCK to TCP translations for egress traffic.
UDP DNS Container
Facilitates DNS resolution inside the enclave by performing UDP to VSOCK translations.