ServiceMeshCon Europe 2022
as the organisers put it
ServiceMeshCon is a vendor-neutral conference on service mesh technologies. Topics include getting started with and adopting a mesh, lessons learned from production deployments, and technical sessions from service mesh maintainers.
who it's for
service mesh maintainers, platform engineers, site reliability engineers, kubernetes operators, cloud architects, security engineers, network engineers
topics
Linkerd zero-config protocol detection; Kuma and Envoy multi-region mesh; workload certificate without persisted keys; Istio multi-cluster automation; Envoy with GraphQL gateway; mesh value measurement (MeshMark); eBPF integration with service mesh; Cilium service mesh; GitOps plus controllers for mesh; retries and circuit breaker tuning; multi-tenant service mesh operations; Nomad and Firecracker edge deployment
| title | author | length |
|---|---|---|
| Opening + Welcome | Craig Box | 11m |
Program committee explains session selection rules, pleads with the community to stop calling it "service mess", and riffs through staged karaoke parodies for… | ||
| Keynote: An update on the extremely boring and uninteresting world of Linkerd | William Morgan | 05m |
Adoption doubles in Europe and grows globally since 2021, Linkerd adds fuzz testing and ships authorization policy and cross-cluster failover, and becomes the… | ||
| Keynote: Expanding the 80/20 Rule for Creating Service Mesh Value | Idit Levine | 09m |
Company presents Glue platform: Envoy with GraphQL built into the gateway so Envoy accepts a schema, runs declarative resolvers or Wasm resolvers, and handles… | ||
| Keynote: Service Mesh Everywhere | Zack Butcher | 05m |
Argues for pushing Istio/Envoy beyond Kubernetes into VMs, bare metal and the edge, including ARM builds of Istio and Envoy to run on new hardware; describes… | ||
| Multi-region Service Mesh: How Koyeb Built and Operates One Using Kuma and Envoy | Yann Léger | 19m |
Koyeb describes a production multi-region mesh built with Kuma + Envoy running on Nomad + Firecracker, with 250 edge locations and 25 core regions, terminating… | ||
| Shh, It is A Secret: Manage Your Workload Certs in Service Mesh without Persisting any Secrets- Lin Sun, Solo.io | Lin Sun | 26m |
Istio’s default uses a self‑signed root secret that stores a private key in a Kubernetes Secret (root CA lives 10 years, workload certs 24 hours with a 12‑hour… | ||
| Lightning Talk: Move Over API Gateway.... into Your Service Mesh | Marino Wijay | 08m |
Claim: consolidate API gateway and service mesh into one abstraction so north‑south and east‑west traffic use the same control plane. Uses Envoy plus Istio… | ||
| Protocol Detection: A Deep Dive into How Linkerd Achieves Zero-Config | Kevin Leimkuhler | 30m |
Linkerd achieves zero-config by peeking connection bytes, using a control-plane Destination service and a 10s detection timeout fallback; older workarounds… | ||
| Lightning Talk: Multi-cluster Istio Mesh – Complex or Piece of Cake? | Laszlo Bence Nagy | 11m |
Claims full automation of a single-mesh, multi-primary Istio across separate networks by combining the open-source Cisco st operator (formerly Banzai Cloud)… | ||
| Lightning Talk: MeshMark: Service Mesh Value Measurement | Lee Calcote, Mrittika Ganguli | 10m |
MeshMark defines a single-index value metric that converts performance and resource overhead into business-aligned insight, built on the CNCF Service Mesh… | ||
| Lightning Talk: GitOps and Controllers: It’s Not That Simple for Multi-cluster | Alex Ly | 08m |
Argues that GitOps alone breaks at scale for Istio across tens or hundreds of clusters and that pairing GitOps with a controller/operator solves it by… | ||
| Tune Your Service Mesh | Mohammad Reza Saleh Sedghpour | 20m |
Benchmarks run on Istio with the Online Boutique app show how retries and circuit breakers interact: a complete user request triggers six internal calls and… | ||
| Unleash Declarative Data Access with GraphQL | Kevin Dorosh, Sai Ekbote | 31m |
Built GraphQL into Envoy so the proxy and gateway are one component, eliminating a separate GraphQL deployment and removing an extra network hop. Sidecars… | ||
| Tidy Up Microservices Connectivity with Apache Kafka® and Kuma | Danica Fine, Viktor Gamov | 31m |
Deploys a vanilla Kafka cluster as a three-node cluster on Kubernetes using statefulsets and KIP-500 (zookeeperless) and exposes brokers via Kuma virtual… | ||
| Organize Your Mesh - How to Run a Multi-Tenant Service Mesh in Production | Christian Posta | 30m |
Shows how to run a multi-tenant mesh using Istio primitives: use gateway + virtualservice split and the delegation API to control who owns host matching vs… | ||
| Panel Discussion - The Future of Service Mesh: Is eBPF a Silver Lining or a Silver Bullet | Craig Box, Thomas Graf, Idit Levine, Viktor Gamov, William Morgan | 41m |
Panelists debate concrete tradeoffs: eBPF gives in-kernel HTTP visibility with single-digit percent overhead and almost zero added latency versus a layer‑7… | ||
| Lightning Talk: Clearing the confusion about eBPF and service mesh | Yuval Kohavi | 11m |
eBPF is not Turing-complete at runtime so it excels where work is stateless and early in the stack: L4 packet filtering (IP and Kubernetes pod-label network… | ||
| Cilium Service Mesh | Thomas Graf | 11m |
Cilium uses eBPF in kernel plus Envoy to implement a sidecar-free data path, claiming massive performance gains and simpler architecture while remaining… | ||
| nothing matches | ||