R6 Security has created Phoenix PP to help our customers mitigate risks coming from routing. Mainly to avoid configuration issues, predictability and attacks through layer 2-3. Works on Nginx and Envoy.
Why Proxy Plugin?
Proxies, by design, handle big workloads, with resiliency and stability in mind. That is their main goal; security comes later. Traditionally proxies - if not configured properly - are prone to man-in-the-middle attacks. That is where Phoenix PP helps.
Moving Target Defense - Enabled
R6 Security presents Phoenix PP - an Envoy proxy plugin that enables system architects to add Moving Target Defense to confuse attackers trying to hijack proxies.
The next step will feature Moving Target Defense Service Mesh.