Istio on Knative Lessons Learned: How Istio is Fit for Serverless Platform
summary
Knative uses Istio for routing, metrics and security and the evaluation shows clear tradeoffs: Istio provides mTLS end-to-end, automatic routing via VirtualService, Prometheus + Elastic/Kibana + Zipkin telemetry and fine-grained authorization, but it adds at least four containers per pod and extra control-plane calls that increase cold starts and request latency. Four deployment patterns are tested (full sidecar, injection plugin, ingress-only, custom), with the lightest reducing cold-start cost to about 2 seconds while the full install incurs noticeably higher startup and runtime overhead.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 1:00Presentation Outline
- 2:01Properties
- 4:52Kubernetes
- 6:00Service Mesh
- 7:10Each Tier
- 7:45The 4 Parts
- 9:02History of Architecture
- 12:38Istio Microservices
- 13:22Service
- 17:36Security
- 18:24Recap
- 19:05Cost
- 19:54Sidecar
- 22:06Sidecar Installation
- 23:10Vista Installation
- 23:43Penetration
- 24:31Options
- 26:38Cloudbased election
related talks
48mIstio An open platform to connect, manage, and secure microservices
38mStop Reinventing the Wheel with Istio
34mInside Knative Serving
01h 06mIstio on Kubernetes: Smart Canaries, Dark Launches and Chaos
40mIstio, your K8S cluster best friend
47mIstio, le meilleur ami de votre cluster K8S
29mAccelerate AppDev with KIK (Kubernetes-Istio-Knative)
53mStop reinventing the wheel with Istio