Deep Dive: Linkerd
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 16:25· Room 14AB - San Diego Convention Center, Mezzanine Level·
summary
A pragmatic history of Linkerd explains decisions and the current architecture: a small Rust proxy sidecar per pod, a Go control plane with Kubernetes controllers, a mutating-webhook proxy injector, and bundled Prometheus metrics. It does automatic mTLS tied to service accounts, uses HTTP/2 multiplexing to keep one connection per proxy pair, and implements request-aware gRPC/HTTP load balancing for higher success rates. Roadmap items: mandatory TLS by default, cross-cluster identity, a 10% code reduction, and contribution to the Service Mesh Interface.
AI-written summary · about
chapters (14)
- 0:00Intro
- 1:56Twitter Observability (2010-2013)
- 5:43Twitter Observability Lessons
- 8:43Twitter Traffic (2013-2015)
- 11:34Twitter Traffic Lessons
- 13:19Linkerd 1.x (2015-2020)
- 16:46Linkerd 1.x Lessons
- 18:34Linkerd 2.x (2017-)
- 24:07Linkerd 2.x Lessons
- 27:19Proxy Goals
- 28:19Proxy Requirements
- 28:54Proxy sidecar specialization
- 31:50Cure53 Security Audit
- 32:25Big Bets for 2020
related talks
36mOverview and State of Linkerd
28mOverview and State of Linkerd
32mLinkerd and the Service Mesh
01h 10mService Mesh Introduction
37mLinkerd End User Panel: Case Studies from Production
30mLinkerd Update: Gateway API, Client-Specific Policy, Federated Services, Multicluster, Rust, & More!
06mKeynote: Linkerd Project Update
12mService Mesh & Kubernetes Multicluster Communication With Linkerd