Cross-Cluster Calls Made Easy with Istio 1.1
summary
Istio 1.1 adds first‑class support for secure, resilient cross‑cluster calls by installing an istio-core-dns resolver, enabling traffic to tunnel through an egress/ingress gateway pair and encoding routing metadata into the SNI auto passthrough header so only a single ServiceEntry per remote name is needed after install. Demo uses two GKE clusters with shared root CA for mutual TLS, the example app spans clusters and successfully returns cross‑cluster responses.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 9:20Recap
- 18:22Cody Wonpil
- 19:30Istio Overview
- 20:28Service Discovery
- 21:57DNS Resolution
- 22:55Egress Gateway
- 25:27Empty LS
- 26:18Hello World
- 27:42Cluster Setup
- 35:22Summary
related talks
28mMulti-Cluster Service Mesh With Istio
37mUsing Istio to Manage the Cross-Regional & Cross-Cluster...
21mAnother Choice for Istio Multi-Cluster & Multi-Network Deployment Model
27mIstio's Multicluster Networking Modes: Connecting Clusters Beyond Borders
23mIstio and DNS
28mIstio in Action: Taking Kubernetes Traffic Control to the Next Level
37mStretching the Mesh
23mDemystifying Load Balancing in Istio