IstioCon 2023
as the organisers put it
IstioCon is a VIRTUAL community event for the industry’s most popular service mesh.
who it's for
platform engineers, site reliability engineers, security engineers, kubernetes operators, cloud architects, observability engineers, networking engineers, devops engineers
topics
Istio Ambient Mesh architecture; z-tunnel node dataplane; Envoy waypoint proxy; Gateway API integration; multicluster Istio networking; Istio load balancing strategies; egress gateway TLS origination; Istio with Prometheus and Jaeger; OpenTelemetry tracing for CI/CD; Argo Rollouts with Thanos metrics; fine-grained RBAC with NGAC; collaborative WASM plugins
| title | author | length |
|---|---|---|
| Istio Ambient Mesh as Managed Infrastructure | Justin Pettit | 05m |
Ambient mesh replaces per-pod sidecars with a node-level L4 dataplane that claims 90% or more cost savings, uses less CPU and memory, and removes pod restarts… | ||
| Day 1 - Closing Remarks | Mitch Connors | 01m |
Day one closes and the conference thanks Google Cloud sponsor and announces a full day tomorrow starting 7:30 a.m. Pacific. Sessions slated include a practical… | ||
| Day 2 - Closing Remarks | Mitch Connors | 01m |
IstioCon 2023 wraps today with a shoutout to Diamond sponsor Google Cloud for making the event possible, a QR code to Slack that links to community channels… | ||
| Multiplayer Istio: Collaborative WASM Plugins with Intel and Layer5 | Lee Calcote, Xin Huang | 30m |
Shows how Meshery plus Istio actually deploy and manage Envoy WASM filters: a live demo uploads filters to a Meshery catalog, composes a visual design, deploys… | ||
| Identity Theft Is Not a Joke, Jim! How Istio Ambient Mesh Safeguards Our Pod... | Marino Wijay | 25m |
Claims that Istio Ambient Mesh prevents impersonation by moving mTLS and identity handling out of per-pod sidecars into a network-level proxy layer, with… | ||
| Untangling Your Istio Mesh with Feature Gates | Niranjan Shankar | 32m |
Explains how to shrink Istio’s configuration surface by combining Kubernetes admission controllers (validate PeerAuthentication and DestinationRule to enforce… | ||
| Ambient Q+A | Eric VanNorman, Louis Ryan, Neeraj Poddar, Lin Sun, John Howard, Mitch Connors | 30m |
Ambient mode replaces per-pod sidecars with a node-local proxy plus shared Waypoint Envoys and claims orders‑of‑magnitude resource savings; early tests report… | ||
| Pre-Sail Checks: Do You Need a Checklist Before Sailing to Production with Istio? | Simon Green, Ram Vennam | 30m |
Checklist-style prescriptive steps and measurable checks for running Istio in production: verify no orphan sidecars after revisioned upgrades by alerting on… | ||
| Istio Roadmap Updates | John Howard, Eric Van Norman | 24m |
Istio announces CNCF graduation in July 2023 and moves ambient mode from experimental toward alpha in 1.8.0 while targeting production readiness next year… | ||
| Fine-Grained Policies RBAC with NGAC | José Carlos Chávez | 32m |
NGAC (NIST) models access as a directed acyclic graph that overlays multiple policy classes (RBAC, location, topology) so a single decision can combine rules —… | ||
| Istio Ambient Service Mesh Made Simple | Lin Sun | 31m |
Ambient is a sidecar-less Istio data plane that replaces the Envoy ztunnel with a Rust-based ztunnel, moves to a much smaller xDS payload, and makes Waypoint… | ||
| Welcome + Opening Remarks | Mitch Connors, Faseela K | 21m |
Istio announces CNCF graduation and a new Istio Certified Associate course, highlights a 32% uptick in first-time contributors for 2023, and promotes the… | ||
| Achieving Fault Tolerance in Istio with Observability-Driven Load Management | Tanveer Gill | 27m |
Aperture is an open-source flow-control layer that integrates with Istio via Envoy’s External Authorization API and runs as Aperture Agent as sidecar or… | ||
| Using Istio to Build Better Service Level Objectives | Chris Dutra | 25m |
Uses the Istio mesh plus Istio + Prometheus, Grafana, Jaeger, Kiali to generate mesh-to-mesh metrics and traces from a running bookinfo demo on EKS (Kubernetes… | ||
| Expanding Horizons: Advanced Deployment Strategies in Multi-Cluster Kubernetes Environments | Fran Rodríguez, Eduardo Bonilla | 23m |
Three-cluster setup—one hub and two workload clusters—uses Istio for multi-primary, multi-network mesh with east‑west gateways and mTLS, Argo CD for… | ||
| Tracing CI/CD with OpenTelemetry | John Howard | 11m |
Istio uses OpenTelemetry to trace CI/CD pipelines end to end and reveals concrete bottlenecks: an e2e job emits 10,000 spans and runs five to six minutes with… | ||
| Life of a Request in Istio Ambient Mesh | Gregory Hanson | 06m |
Ambient replaces sidecars with a node-local ztunnel and optional Envoy waypoints; a typical call hits one or two ztunnels — the client’s collocated ztunnel… | ||
| Best-Practices for Securing Egress Traffic with Istio | Niranjan Shankar | 10m |
Shows a concrete AKS setup: Istio installed with registry-only outbound policy, an egress gateway on a dedicated egress node pool, Azure Firewall rules… | ||
| The Security Evolution of GRPC Services in the Mesh | Amim Moises Salum Knabben | 29m |
Shows concrete changes: Istio supports three gRPC east‑west options — gRPC xDS proxy (app links directly to Istio control plane), Z Tunnel (ambient L4 overlay)… | ||
| A Look at Istio's Journey with the Gateway API | Keith Mattix II, John Howard | 28m |
Istio reports Beta support for the Gateway API and shows 24 implementations across the ecosystem; Gateway API v0.8.0 adds experimental mesh support and allows… | ||
| Istio's Multicluster Networking Modes: Connecting Clusters Beyond Borders | Abdul Basit | 27m |
Compares single/flat network and gateway/multi-network modes with concrete tradeoffs: three demo environments (six clusters total), multi‑primary control… | ||
| Demystifying Load Balancing in Istio | Shivanshu Raj Shrivastava, Jimmy Song | 23m |
Explains concrete Istio configs and a live demo: config uses Envoy APIs via Istio to show random, round robin, and least request simple LB plus consistent… | ||
| Build Reliable Applications with Kubernetes and Istio Using Application Archetypes | Ameer Abbas, Steve McGhee | 33m |
Introduces Application Archetypes and shows concrete Kubernetes + Istio implementations (GKE clusters, Global Load Balancer, Cloud DNS, Spanner/Cloud SQL) for… | ||
| Bridging the Gap: Gradual Istio Implementation for Your Platform | John Keates | 31m |
Shows a stepwise recipe: install the Istio control plane, add an IngressGateway and create VirtualServices to map Gateway -> Service, then add a wildcard… | ||
| Traffic Dialling | Venkata Krishna Murthy Vadrevu, Nandan B N | 26m |
Intuit runs a centralized traffic-dialing control plane that programs Istio VirtualServices into client clusters so each client can get per-client weighted… | ||
| SLATE: Globally Optimizing Request Routing | Aditya S Prerepa, Gangmuk Lim | 12m |
SLATE builds a global controller plus per-cluster controllers and a proxy-wasm HTTP filter that reports per-service RPS and trace latencies, then runs a linear… | ||
| Debunking the Istio Is Complex Meme | Christian Posta | 28m |
Istio is now stable and production-ready, with graduated CNCF status driving vendor support and real deployments that solved multi‑cluster, ingress/egress and… | ||
| Opening Remarks | Iris Ding | 06m |
Agenda highlights a shift to sidecar mode and practical guidance for landing Istio: how to pick features incrementally, expected adoption steps, and numbers or… | ||
| nothing matches | ||