Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

on YouTube ↗33m

" summary

Claims that Istio lets Kubernetes talk to legacy hosts are tested using Istio 1.0→1.1 with Envoy sidecars on VMs and control plane in-cluster; problems include nonroutable pod CIDRs (CGNAT), DNS tweaks, init-container iptables needing privileged net_admin, and telemetry failing because proxies try pod IPs — inbound expansion doesn’t work in 1.1. Built a short-term service mesh light (Apache TLS offload + host proxy) that helps migrations; Envoy sidecar on VMs and mutual TLS work outbound, but multi‑tenancy, performance and inbound expansion still need fixes.

AI-written summary · about

" chapters (10)

1. 0:00Intro
2. 2:53About United Internet
3. 6:28About Kubernetes
4. 13:36Benefits of a Service Mesh
5. 17:09How a Service Mesh works
6. 20:01Master Expansion
7. 22:08Security Concerns
8. 25:05DNS Issues
9. 30:13Whats next
10. 32:28Summary

" related talks

• 26mAn Introduction to Service Mesh in ActionJason Dudash · Conf42 Cloud Native 2022
• 34mService Mesh for DevelopersAbdellfetah Sghiouar · DevDays Europe 2022
• 28mService Mesh: Demystifying IstioJeferson Fernando · DevOpsDays Vitória 2020
• 58mUsing Service Meshes and Kubernetes to Solve Service-to-Service Communications...Ben Hall · NDC Porto 2019
• 01h 03mJust what is a "service mesh", and if I get one will it make everything OK?Elton Stoneman · NDC London 2019
• 41mService Mesh beyond single clustersStephan Fudeus, David Meder-Marouelli · ContainerDays 2022
• 39mThe Future of Service MeshJim Barton · Craft Conference 2023
• 19mService Mesh and Your Legacy Apps: Connecting to Kubernetes with ConsulMarc LeBlanc · HashiTalks 2022