ServiceMeshCon Europe 2021
2021-05-04
-- online --
[ServiceMeshCon Europe 2020, ServiceMeshCon Europe 2021, ServiceMeshCon Europe 2022]
as the organisers put it
register VIEW SCHEDULE join the event That’s a wrap on ServiceMeshCon at KubeCon + CloudNativeCon EU 2021! Thank you to all the attendees, sponsors and speakers that joined us virtually this year.
who it's for
service mesh operators, platform engineers, cloud architects, Kubernetes administrators, site reliability engineers, observability engineers, security engineers
topics
multi-cluster Istio deployment; Kuma control plane architecture; Linkerd observability workflows; Envoy performance benchmarking; automatic mTLS certificate rotation; VM and Kubernetes hybrid connectivity; service mesh chaos testing; service identity for zero trust; sidecar injection and canary rollouts; Prometheus and Grafana telemetry; istio-coredns east-west gateway patterns
| title | author | length |
|---|---|---|
| Opening Remarks | Chris Campbell | 10m |
A personal origin story shows how Docker linking seeded the claim that infrastructure can adapt to applications so developers don’t mutate config; service mesh… | ||
| Keynote: Multi-Cloud and Multi-Cluster with CNCF’s Kuma on Kubernetes and VMs | Marco Palladino | 10m |
Kuma is a control plane using Envoy that runs a single deployment spanning multi-zone deployment across AWS and GCP with three Kubernetes clusters plus EC2… | ||
| Multi-Cluster Service Mesh With Istio | Zhonghu Xu | 28m |
Shows how Istio implements multi-cluster service discovery and routing using Kubernetes plus Istio features: DNS proxy introduced in Istio 1.8, the… | ||
| Scheduling 68k COVID Tests with Linkerd | Dom DePasquale, Shawn Smith | 25m |
Penn State builds a microservice scheduling system, sends 68,000 invites and hits a real load spike; observability from Linkerd plus Grafana and Prometheus… | ||
| Are You Sure About Your Mesh Performance? | Otto van der Schaaf, Sunku Ranganath, Mrittika Ganguli | 26m |
Benchmarks on Envoy use bare metal tuned boxes, VMs with DPDK, and sandboxes; Fortio, wrk and Nighthawk report wildly different latencies because of connection… | ||
| Crawl, Walk, Run, Fly: Introduction to Adopting a Service Mesh in Your Organization | Christian Posta | 27m |
Explains a concrete adoption path: start at the edge with an ingress gateway, install Istio and Envoy, then roll sidecar proxies out by canarying each… | ||
| Observability with Consul Connect | Bram Vogelaar | 22m |
Sets up Consul Connect sidecars (via consul connect proxy) to terminate mTLS with Envoy and expose an Envoy prometheus endpoint bound to a local port so… | ||
| How MS3 Supports 10,000+ Transactions Per Second with Kuma Service Mesh Across VMs a... | Jose Montoya | 24m |
MS3’s Tavros platform uses Kuma (Envoy data plane) as a language-agnostic service mesh to deliver 10,000+ transactions per second across VMs and Kubernetes by… | ||
| Kubernetes and Service Mesh Upgrade Automobile Company’s IT Infrastructure | Chaomeng Zhang | 23m |
Large Chinese auto manufacturer moves from VM + self-built DNS/ELB + per-VM nginx to Kubernetes + service mesh in production, replacing manual service… | ||
| Administering Multi Cluster Service Meshes Securely | Eric Murphy, Eitan Yarmush | 25m |
Explains that copying kubeconfigs creates n squared connections and exposes cluster API credentials, then proposes a management-cluster server with remote… | ||
| Rapid Experimentation Simplified with Linkerd | Alexander Simon Jones | 16m |
A financial‑services cloud team uses Linkerd traffic‑splitting plus CRDs to run simultaneous A/B/candidate experiments across versions, feeding metrics into… | ||
| Virtual Machines and Service Mesh in the Enterprise: 5 Things You Need to Know | Petr McAllister | 22m |
Claims that VM onboarding works with Istio 1.9 beta and shows a concrete bootstrap path: create workload entry, sidecar and service entry, then use tctl… | ||
| Virtual Machines as First Class Citizens in Service Mesh | Denis Jannot | 26m |
Shows how Istio adds noncontainer workloads by generating a short lived token and X509 certs, running an Envoy-based istio-agent inside a Docker container that… | ||
| Lightning Talk: Introduction to Media Service Mesh | Giles Heron | 10m |
Media Service Mesh claims to make UDP real‑time apps run inside Kubernetes by intercepting RTSP/RTCP and RTP flows, creating dynamic pinholes for paired ports… | ||
| Multicluster Service Mesh | Adam Sayah | 24m |
Describes using Envoy sidecars and an Istio control plane across two Kubernetes clusters and shows that a central glue mesh management plane can replace dozens… | ||
| Lightning Talk: Use SkyWalking Satellite to Process Tracing, Logging and Metrics in Serv... | Ming Wen | 10m |
SkyWalking 8.4 and SkyWalking Satellite provide a unified pipeline for tracing, logging and metrics (three data types) by running a lightweight collector next… | ||
| Service Mesh Extensibility Explained | Lin Sun | 27m |
Shows concrete extensions for Istio: replacing the iptables init container with a CNI plugin to avoid NET_ADMIN, swapping the Envoy image or patching its… | ||
| Tap Tap, Debugging an App with your Service Mesh | Jason Morgan | 21m |
Linkerd is used to inspect live traffic with tap and to add route metadata with service profile so debugging requires no app changes. Tap yields JSON with… | ||
| Creating Chaos in the University with Linkerd and Chaos Mesh | J. B. C. Fajardo, S. A. M. Aguilar | 20m |
A university project builds a Kubernetes demo that deliberately injects failure: Linkerd traffic-split 50/50 sends half the requests to a working Apache podset… | ||
| Istio Cookbook: Kiali Recipe | Lucas Ponce | 27m |
Kiali demonstrates concrete Istio operations on a travel-demo app: automatic namespace sidecar injection via namespace annotation, generating a Gateway +… | ||
| Lightning Talk: The Hardest Part of Operating a Service Mesh: Envoy Proxy | Christian Posta | 09m |
Covers concrete operational practices for Envoy in meshes and at the edge: use the admin HTTP interface for certs, clusters, profile dumps and request tapping… | ||
| Panel: The State Of Service Mesh | I. Levine, M. Palladino, L. Ryan, L. Sun, W. Morgan, N Jackson | 23m |
Panelists summarize that service mesh delivers observability, security and routing/policy from the platform so application teams stop reimplementing… | ||
| Service Identity - The Key to Zero Trust with Service Mesh | Matthew Bates, Joshua Van Leeuwen | 28m |
Service mesh implements per-workload cryptographic identities and uses sidecar proxies to enforce mTLS between proxies so every service authenticates each… | ||
| Istio Beyond Kubernetes | Zack Butcher, Sven Mawson, Pratima Nambiar | 28m |
Istio is used in production to join Kubernetes, VMs and bare metal by combining Envoy gateways, a shared internal CA, and Istio CRDs to represent… | ||
| Closing Remarks | Nic Jackson, Marco Palladino | 03m |
Conference closes with gratitude to contributors and a clear call for submissions: the CFP closes on the 23rd and the next ServiceMeshCon runs co-located with… | ||
| nothing matches | ||