Macro Security for your Microservices

on YouTube ↗01h 41m

" summary

Hands-on demo of Istio on OpenShift with Envoy sidecars shows service identity, mutual TLS, fine-grained ACLs and rate limiting enforced at the proxy, not in app code. Lab runs on a 35-node AWS OpenShift cluster for ~100 users and uses Kiali + Jaeger tracing and Prometheus for observability. Exercises include weighted and header-based routing (flipping an 80/20 canary routing), circuit-breaker style controls, and JWT RBAC — most features work live, with occasional lab startup hiccups.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 0:47Agenda
3. 4:56Myths Regarding Distributed Computing
4. 6:33Micro Services Are Hard To Do
5. 18:37Types of Service Mesh Deployments
6. 22:44Monitoring
7. 40:30Workshop Overview
8. 1:32:37Rate Limiting and Policy

" related talks

• 50mDeveloping Microservices with IstioKevin Conner · DevConf.CZ 2019
• 58mService Mesh and Sidecars with Istio and EnvoyRafael Benevides · Voxxed Days Cluj-Napoca 2018
• 55mEmpower Your Microservices with Istio Service MeshHossam Barakat · NDC Sydney 2019
• 35mAdvanced Microservices ArchitecturesChin Hong Hua · FOSSASIA Summit 2020
• 52mEmpower Your Microservices with Istio Service MeshHossam Barakat · NDC Oslo 2019
• 52mMaking microservices micro with Istio Service Mesh & KubernetesRay Tsang · Spring I/O 2018
• 01h 01mIstio Service Mesh & pragmatic microservices architectureAlex Soto · Software Crafters Barcelona 2018
• 33mMircoservices the right way: an introduction to IstioLaurent Grangeau · ContainerDays Hamburg 2018