Istio Day North America 2023
who it's for
platform engineers, site reliability engineers, platform architects, cloud infrastructure engineers, security engineers, observability engineers
topics
ambient mesh pattern; Envoy sidecar replacement (Z tunnel); Waypoint namespace proxies; federated Prometheus and Thanos; gRPC load balancing and transcoding; Istio as API gateway; Argo automated rollouts and workflows; multicluster trust with SPIRE; identity options: cacerts and kubernetes CSR; sidecar overhead profiling and prediction; Kiali troubleshooting and trace replay; canary control-plane upgrades and istioctl precheck
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks, Program Committee Members | Faseela K, Zack Butcher | 22m |
Opening remarks list concrete milestones and itinerary: growth from a half‑day event to a full‑day CNCF collocated Istio Day, Istio’s CNCF graduation and the… | ||
| Unraveling Istio: A Tale of Scale, Challenges and Triumphs at DevRev | Khushboo Mittal, Kush Trivedi | 24m |
DevRev replaces a central gateway with edge gateways per service (Envoy sidecars) to remove a single point of failure, enable gRPC load balancing and circuit… | ||
| Architecting Ambient Mesh for Scale | John Howard | 24m |
Istio replaces sidecars with a per-node Z tunnel and per-namespace Waypoint, trading full proxy features for a tiny, purpose-built data plane. Z tunnel is… | ||
| Lessons from Scaling AI Powered Translation Services Using Istio | Tim Gallant, Malini Bhandaru | 18m |
Lilt migrates a monolithic translation server onto Kubernetes and uses Istio as API gateway to enable self-serve routing, External Authorization, observability… | ||
| Running an API Gateway on Istio - Pitfalls and Learnings | Karim Lakhani | 25m |
Runs Intuit’s API Gateway on Istio at scale: front door for billions of requests and 1.1 million RPS across thousands of pods in 40 namespaces and 13 clusters… | ||
| Ambient Operations: Automating Istio Orchestration with Argo | Mitch Connors, Christian Hernandez | 30m |
Ambient Mode removes sidecars so Istio upgrades become fully declarative and automatable with Argo; a live reference architecture and three demos show platform… | ||
| Lightning Talk: Dissecting Service Mesh Overheads | Xiangfeng Zhu | 09m |
MeshInsight analyzes Istio sidecar overheads by decomposing per-request work into independent components (syscalls, parsing, proxy processing, IPC), builds… | ||
| Lightning Talk: Running Arbitrary Code Safely with Istio | Kush Mansingh | 07m |
Demo shows Istio enforcing network isolation so user-submitted code can reach the public internet but not cluster services. Creates a namespace and a… | ||
| Identity, Istio, And You | Jackie Elliott | 19m |
Compares four practical identity paths for Istio with concrete tradeoffs: self-signed Istio CA gives immediate mTLS by generating a root stored as the istiod… | ||
| Kiali Beyond the Graph – Troubleshooting Istio | Jay Shaughnessy, Nick Fox | 27m |
Kiali pulls Istio metrics, logs and traces plus the Kubernetes API to locate real faults: a trace scatter plot finds a handful of outliers up to 4.5s, drilling… | ||
| Challenges and Best Practices While Upgrading Istio in a Production... | Ekansh Gupta, Nirupama Singh | 28m |
Upgrading Istio in production requires concrete steps: export all CRDs and configs as YAML snapshots for fast rollback, run istioctl x precheck and collect… | ||
| Bridging Trust Between Multi-Cluster Meshes | Lukonde Mwila, Ovidiu Valeanu | 27m |
Hands-on recipe for cross-cluster identity: a Terraform-built demo with two EKS clusters, Istio installed via Helm, and SPIRE issuing SPIFFE X.509 identities… | ||
| Panel: Ask Me Anything About Istio Service Mesh | Lin Sun, Neeraj Poddar, John Howard, Mitch Connors, Eric Van Norman | 32m |
Istio ambient reaches alpha in Istio 1.18 and the community targets beta by fixing reliability and integrations rather than rushing GA, claiming sidecar-less… | ||
| Workshop: Getting Started with Ambient Mesh: An Interactive Tutorial | Christian Posta, Jim Barton | 50m |
Hands-on workshop walks through installing Istio Ambient Mesh 1.9.3 on a Kind cluster via Solo.io’s Instruqt sandbox, provisions a 5-service fake-app, and… | ||
| Closing Remarks | Faseela K, Zack Butcher | 01m |
Brief wrap announces a reception at W190 foyer, an Expo booth F5 (Istio’s booth), and ongoing presence of “yio at cucon” for followup; volunteers are needed to… | ||
| nothing matches | ||