BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//open-source-conference-luxembourg-2026//ta
 lk//9NBSTY
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251007T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Leaving the appliances: what seven years of open-source migration 
 taught us - Christophe Boulanger
DTSTART;TZID=Europe/Luxembourg:20261007T113000
DTEND;TZID=Europe/Luxembourg:20261007T130000
DTSTAMP:20260916T160759Z
UID:pretalx-open-source-conference-luxembourg-2026-9NBSTY@pretalx.com
DESCRIPTION:API Gateway\, ESB\, Web Access Management and WAF - from propr
 ietary products to Tyk\, Keycloak\, Traefik and CrowdSec.\n\nReplacing a s
 ecurity appliance with open source is almost never a like-for-like swap. W
 e set out to move our entire web middleware security stack - API Gateway\,
  ESB\, Web Access Management\, application WAF - onto Tyk\, Keycloak\, Tra
 efik and CrowdSec. The first component has been in production since 2019\;
  other workstreams are still under way.\n\nWe will share what that journey
  actually cost and taught us: how to escape XSLT transformations hardcoded
  inside a product\, by turning real traffic captures into unit tests\; why
  moving from Web Access Management to Keycloak is a change of security mod
 el rather than a change of tool\; what you learn when an open-source ingre
 ss controller stops being maintained and you have to migrate under time pr
 essure\; and why a load balancer's custom traffic rules remain the hard pa
 rt\, with no mechanical translation available.\n\nWe will be honest about 
 what we are leaving behind - our WAF appliance is robust\, well-tooled and
  trusted by auditors - and about the real trade: every workstream swapped 
 a licence cost for code we now maintain ourselves.\n\nThis is a workshop\,
  not a lecture. Five questions go to the room\, including the ones we have
  not settled - particularly around PKI\, as public certificate lifetimes h
 ead towards a few tens of days.
LOCATION:Decentralisation in practice
URL:https://pretalx.com/open-source-conference-luxembourg-2026/talk/9NBSTY
 /
END:VEVENT
END:VCALENDAR