Istio Adoption Journeys
summary
Shows concrete ops wins: dashboards that pinpoint failing services and SLO alerts, mTLS across HTTP gRPC TCP for encrypting east‑west traffic, and Citadel auto rotation of certificates without downtime. Demonstrates ingress RBAC that blocks paths like /admin, Envoy filters that mitigate CVEs (path traversal and injection), multi‑cluster failover, VM support via Envoy sidecars, canary traffic splits, and WASM in Envoy for microsecond custom checks; 1.3/1.4 focus on ease‑of‑use and performance.
AI-written summary · about
chapters (13)
- 0:00Intro
- 1:11Service to Service Communication
- 1:33March: Execs say to encrypt everything
- 1:59April: CSO audits key management systems
- 3:12June: CVE
- 3:35Advanced Filters
- 3:56August: The East Coast data center had an outage
- 4:49VMs are equal members of meshes (beyond K8s)
- 5:10Canary Deployments
- 5:25November: Intrusion detection!
- 6:04Ecosystem
- 6:42Apologies to Larry Wall...
- 7:25Key takeaways
related talks
26mIstio - The Weather Company's Journey
37mStretching the Mesh
42mIstio Multi-Cluster Mesh Expansion BOF
22mDon't Ship the Org Chart: Rebuilding Istio for User Maintainability
27mEnvoy Gateway: An in-Depth Guide of Its Benefits, Use Ca...
10mOpening Remarks
36mPanel Discussion: Leveraging Cloud Native Technology to Transform Your Enterprise
06mLightning Talk: Optimizing Multi-Cluster Communication and Cost Efficiency with A...