So you think you can mesh? Scaling ING's service mesh

on YouTube ↗29m

" summary

ING scales a service mesh from 1 to 10,000 running instances over eight years, supporting 2,000 microservices across containers and VMs; operational pieces include a control plane for API endpoint discovery, an API marketplace with JWT subscriptions enforcing fine‑grained authorization, mutual TLS for authentication, and a choice of library vs sidecar for heterogeneous runtimes. A regression test suite verifies Envoy rollouts and TLS behavior, disaster‑recovery steering between regions is automated, and the approach reports clear production success.

AI-written summary · about

" chapters (14)

1. 0:00Introduction
2. 1:05What is a service mesh
3. 3:13Monolith to microservices
4. 7:53Service mesh architecture
5. 10:42ING governance and API marketplace
6. 15:13Auth, authorization, subscriptions
7. 17:41Control plane runtime config
8. 18:45Data plane security observability
9. 20:54Library vs sidecar choices
10. 21:34Adoption with docs and community
11. 23:37Automating certificates
12. 25:03Evolving service mesh
13. 27:08Service mesh abstraction
14. 27:51Lessons learned and closing

" related talks

• 45mSo you think you can mesh? Scaling ING's service meshJens Kat · Devoxx Belgium 2024
• 33mHow ING Accelerated Kubernetes Deployments Across 500+ AppsWouter Ligtenberg · KCD Austria 2023
• 41mService Mesh beyond single clustersStephan Fudeus, David Meder-Marouelli · ContainerDays 2022
• 34mService Mesh for DevelopersAbdellfetah Sghiouar · DevDays Europe 2022
• 34mContainer Hosting JourneyRobbin Siepman · KCD Amsterdam 2023
• 43mService Mesh and the future of networkingIgnasi Barrera · Software Crafters Barcelona 2019
• 11mWelcome & Opening RemarksChristian Posta · ServiceMeshCon Europe 2020
• 01h 03mJust what is a "service mesh", and if I get one will it make everything OK?Elton Stoneman · NDC London 2019