Lin Sun
where else to find them
no profile links on file
what they talk about
all 14 in the filters
where they keep going back
- KubeCon + CloudNativeCon Europe3 editions2019–2025
- ServiceMeshCon North America3 editions2020–2022
- ServiceMeshCon Europe3 editions2020–2022
all 35 in the filters
on a stage with
all 37 in the filters
who talks about the same things
- Nina Polshakova7 talks
- Denis Jannot13 talks
- John Howard20 talks
- Marino Wijay24 talks
- Louis Ryan9 talks
- Jim Barton9 talks
| title | conference | date |
|---|---|---|
| Lightning Talk: Effortlessly Integrating Keycloak Authentication To Your MCP Servers | KeycloakCon Europe 2026 | 2026-03-23 |
Shows adding Keycloak OpenID Connect auth the hard way by editing a Python MCP server, rebuilding and redeploying, then demonstrates an alternative: place an… | ||
| Secure Your MCP Servers With OAuth, JWT, SPIFFE and More | Open Source SecurityCon Europe 2026 | 2026-03-23 |
Demo builds a simple echo MCP server (runs on port 8000) and first adds OAuth by wiring Keycloak into the server, getting a JWT via the MCP Inspector and… | ||
| Secure Your MCP Servers with OAuth, JWT, SPIFFE and More | apidays Paris 2025 | 2025-12-09 |
A working MCP setup shows OAuth2 via Keycloak, JWT claims checked for issuer/audience, and SPIFFE mTLS handled at the gateway so no server code changes are… | ||
| Integrating Agentic AI Into Internal Developer Platforms To Minimize Errors and Downtime | Platform Engineering Day North America 2025 | 2025-11-10 |
A GitOps pipeline enhancement that uses kagent agents and an LLM to run semantic validation on PRs, invoked by a GitHub Action, that pulls and does Helm… | ||
| Is Zero-Downtime Migration Possible? Moving From Ingress & Sidecars To Gateway API | Istio Day North America 2025 | 2025-11-10 |
Harri migrates production from AWS App Mesh (Envoy sidecars) to Istio Ambient and Gateway API in-place on the same EKS cluster, finishing by Feb 2025 after… | ||
| In AI We Trust? Securing the Future, One Agent at a Time | Open Source SecurityCon North America 2025 | 2025-11-10 |
Core cloud‑native controls apply but require extension: examples include using workload identity and JWT delegation (an RFC exists), enforcing zero trust is… | ||
| Sponsored Session: Lightning Talk: Efficient Inference Serving with Kubernetes Gateway... | PyTorch Conference 2025 | 2025-10-22 |
Demonstrates a working stack: vLLM simulator plus the Kubernetes Gateway API Inference Extension and an agent gateway implementation that routes by header and… | ||
| Effortless Secure and Control Traffic Using Kubernetes Gateway API for Ingress, Egress an... | Open Source Summit North America 2025 | 2025-06-23 |
Live demo uses Kubernetes Gateway API + Istio Ambient Mesh, Kgateway, Argo CD, Kiali and Prometheus to manage ingress, egress and service-to-service traffic… | ||
| Effortlessly Build, Run, Secure, and Manage Traffic for a Generative AI Application From... | Open Source Summit North America 2025 | 2025-06-23 |
A runnable GenAI demo is built: a Streamlit web app that chats with local LLaMA models (Nama 3.2 and Nava for images) and uses RAG with ChromaDB; it deploys to… | ||
| Keynote: Key Cloud Native Technologies in its Next Decade | KubeCon + CloudNativeCon China 2025 | 2025-06-10 |
Claims that AI agents will reshape cloud native primitives, arguing pods may not fit agent workloads and pod identity needs rethinking for security, citing the… | ||
| Ask the Experts: CNCF CTO and TOC Members Open Q&A | KubeCon + CloudNativeCon China 2025 | 2025-06-10 |
CNCF outlines concrete governance and community changes: 11 TOC seats with maintainer seats elected by project maintainers, regular TOC meetings that fall at… | ||
| Progressive Delivery With Argo Rollouts and Kubernetes Gateway API for Multi-Directional... | ArgoCon Europe 2025 | 2025-04-01 |
Shows Argo Rollouts wired to the Kubernetes Gateway API and Istio Ambient Mesh to do progressive delivery for both east-west and north-south traffic using… | ||
| Istio: The Past, Present and Future of the Project and Communi... | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Istio announces GA ambient mode with a two‑layer ambient sidecar-less data plane (zero‑trust layer 4 tunnel plus layer‑7 waypoint proxy), claiming highest TCP… | ||
| Journey at the New York Times: Is Sidecar-Less Service Mesh Disappearing Into Infrastructure? | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
The New York Times migrates from sidecars to Istio ambient mode, running a node-level Rust Z tunnel for mTLS and an Envoy-based waypoint per namespace for… | ||
| "Izzy Saves the Birthday" - A Story-Driven Live Demo Exploring the Magic of Service Mesh | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Storybook characters map to concrete service-mesh actions: a demo deploys Kubernetes with Istio ambient mode, Prometheus, SPIFFE identities, waypoint proxies… | ||
| Keynote: Welc... | CNCF Maintainer Summit Europe 2025 | 2025-03-31 |
Quick orientation to the TOC structure and concrete changes: staggered 2024/2025 terms, a new two shadow TOC members program that lasts one year, and a push… | ||
| Unlock the Full Potential of Generative AI via Microservices and Istio Service Mesh | Istio Day NA 2024 | 2024-11-12 |
A Python Streamlit demo runs local Llama models (Alama with Nama 3.2) and OpenAI on a single-node Kubernetes cluster and shows GenAI microservices enrolled… | ||
| Progressive Application Delivery: Istio Ambient Mesh and Argo Rollout in Action | ContainerCon @ Open Source Summit Europe 2024 | 2024-09-16 |
Live demo shows a sidecar-less path: Istio Ambient runs a node z tunnel and shared Waypoint proxies while ArgoCD drives an Argo Rollout Canary that advances… | ||
| Demystifying Secure Application Communication with Zero Trust and Istio Without Sidecars | CloudOpen at Open Source Summit Europe 2024 | 2024-09-16 |
Demonstrates that Istio ambient mesh gives mutual TLS without sidecars by simply label the namespace — no pod restarts. Uses k3s local clusters with flannel… | ||
| Demystifying Secure Application Communication with Zero Trust and Istio Without Sidecars | Open Source Summit Europe 2024 | 2024-09-16 |
Demonstrates that mutual TLS provides identity, confidentiality and integrity and that Istio ambient mesh can deliver mTLS without sidecars by simply label the… | ||
| Progressive Application Delivery: Istio Ambient Mesh and Argo Rollout in Action | Open Source Summit Europe 2024 | 2024-09-16 |
Deploys a real K3s demo that uses Istio Ambient (node agent z tunnel and waypoint proxy) with ArgoCD and Argo Rollouts to shift traffic via Kubernetes Gateway… | ||
| Embracing the Future: The Effortless Mutual TLS and Rich Layer 7 Authz Policy Without Sid... | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
Istio implements a two-layer, sidecar-less mesh: a per-node zero-trust tunnel daemonset that handles layer‑4 mTLS and TCP routing, plus an Envoy-based waypoint… | ||
| Keynote: Demystifying Secure Application Communication with Zero Trust: Identity, Integri... | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
Demo builds a Node.js server and curl client in k3d, shows a full manual OpenSSL mTLS flow with generated keys, CSRs and certs, then flips a label to enroll… | ||
| Embracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars | KCD Zürich 2024 | 2024-06-13 |
Istio Ambient mode replaces per-pod sidecars with a node-level ztrust tunnel in Rust that upgrades pod-to-pod connections to mTLS and a Waypoint per-namespace… | ||
| Embracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars | KCD New York 2024 | 2024-05-22 |
Ambient mode for Istio delivers sidecar-less mTLS and Layer‑7 controls by running a per‑node Rust Z tunnel plus optional per‑tenant Waypoint proxies, avoiding… | ||
| Lightning Talk: A Practical Guide on How to Monitor and Compare Service Mesh... | Observability Day Europe 2024 | 2024-03-19 |
Demo compares sidecar, sidecar-less (Istio Ambient) and a baseline using Kubernetes running the Online Boutique app with Prometheus, node-exporter, cAdvisor… | ||
| Panel: Ask Me Anything About Istio Service Mesh | Istio Day Europe 2024 | 2024-03-19 |
Istio ambient hits alpha in Istio 1.18 and aims for beta in 1.22 with a focus on reducing sidecar overhead and infrastructure cost, plus ambient L7… | ||
| Welcome + Opening Remarks, Program Committee Members | Cloud Native Wasm Day NA 2023 | 2023-11-06 |
Google Trends shows WASM search volume rising in the US and worldwide, and a recent CNCF State of WASM report ranks troubleshooting as the number one concern… | ||
| Extending Sidecarless Applications with Wasm in Istio Ambient Mesh | Cloud Native Wasm Day NA 2023 | 2023-11-06 |
Istio Ambient (alpha in Istio 1.18) shows applying Envoy Wasm extensions to running apps without sidecars or pod restarts, using the WasmPlugin resource to… | ||
| Panel: Ask Me Anything About Istio Service Mesh | Istio Day North America 2023 | 2023-11-06 |
Istio ambient reaches alpha in Istio 1.18 and the community targets beta by fixing reliability and integrations rather than rushing GA, claiming sidecar-less… | ||
| Closing Remarks, Program Committee Members | Cloud Native Wasm Day NA 2023 | 2023-11-06 |
Huge thanks go to the CNCF program team, audio and production crew and the volunteer program committee that reviewed over 65 talks; community members like… | ||
| Ambient Q+A | IstioCon 2023 | 2023-09-25 |
Ambient mode replaces per-pod sidecars with a node-local proxy plus shared Waypoint Envoys and claims orders‑of‑magnitude resource savings; early tests report… | ||
| Istio Ambient Service Mesh Made Simple | IstioCon 2023 | 2023-09-25 |
Ambient is a sidecar-less Istio data plane that replaces the Envoy ztunnel with a Rust-based ztunnel, moves to a much smaller xDS payload, and makes Waypoint… | ||
| Tutorial: Developing Portable eBPF Applications Workshop | Open Source Summit Europe 2023 | 2023-09-19 |
Hands-on workshop shows how to build libbpf CO-RE eBPF programs, package them as BumbleBee as OCI images, push to a registry (demo uses localhost:5000) and run… | ||
| Istio and Cilium: Pushing the Boundaries of the Possible on Zero-Trust | Open Source Summit Europe 2023 | 2023-09-19 |
Shows how Cilium and Istio actually enforce zero‑trust: installs a kind cluster, deploys Cilium 1.14 (with Hubble) and Istio 1.19, applies Cilium network… | ||
| Istio 2023 RoadMap Update | Istio Day Europe 2023 | 2023-04-18 |
Istio announces CNCF incubation and a new ambient mesh that aims to enable cluster‑wide mTLS with a few admin steps, shipping as Alpha in 1.18, Beta in 1.19… | ||
| ⚡ Lightning Talk: Operate Sidecar and Sidecar-Less Applications with Istio and ArgoCD Rollouts | ArgoCon Europe 2023 | 2023-04-18 |
Demo of Istio ambient mesh plus Argo shows a working pipeline: Argo Rollouts operated via ArgoCD updates a HelloWorld service by editing Istio VirtualService… | ||
| A Guided Tour of ISTIO Ambient Mesh | Open Source 101 2023 | 2023-03-23 |
Claims a sidecar-less data plane that uses a ztunnel per-node zero‑trust tunnel plus optional Waypoint proxies for layer‑7, demonstrated on Istio 1.18 alpha… | ||
| Welcome + Opening Remarks | ServiceMeshCon North America 2022 | 2022-10-25 |
Conference opens with concrete signals: project count doubled since 2019, session list highlights real case studies and new standards work. Announcements… | ||
| A Packet Eye View of the Istio Ambient Mesh | ServiceMeshCon North America 2022 | 2022-10-25 |
Sidecarless Istio splits proxy work: a z-tunnel daemonset on each node handles L4 (mTLS tunnels, XDS and CA client) while optional waypoint proxy per namespace… | ||
| Istio Today and Tomorrow: Sidecars and Beyond | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Istio now offers an ambient sidecarless topology that runs a per-node ztunnel for multi-tenant L4 mTLS and optional per-service-account Waypoint proxy for L7… | ||
| The Current and Future State of Istio | ContainerCon @ Open Source Summit Europe 2022 | 2022-09-13 |
Istio introduces an ambient mode that removes mandatory sidecars by running a z-tunnel per node for L4 mutual TLS and optional Waypoint proxy per service… | ||
| Powering Observability with Simple, Sharable, EBPF Programs | ContainerCon @ Open Source Summit North America 2022 | 2022-06-21 |
Bumblebee provides a containerized build environment (LLVM/clang + BPF headers on Debian) that compiles C eBPF into bytecode, packages it as an OCI image, and… | ||
| Shh, It is A Secret: Manage Your Workload Certs in Service Mesh without Persisting any Secrets- Lin Sun, Solo.io | ServiceMeshCon Europe 2022 | 2022-05-17 |
Istio’s default uses a self‑signed root secret that stores a private key in a Kubernetes Secret (root CA lives 10 years, workload certs 24 hours with a 12‑hour… | ||
| Step by Step Kubernetes Observability with eBPF | Cloud Native eBPF Day Europe 2022 | 2022-05-16 |
Shows a concrete pipeline that writes a kernel eBPF probe (tcp connect), compiles it with libbpf or packages only the kernel object into an OCI image via the… | ||
| Get Started With Istio Service Mesh Workshop - Lin Sun, Solo.io (Part 1) | ServiceMeshCon North America 2021 | 2021-10-12 |
Hands-on workshop installs Istio (demo profile, add-ons: Grafana, Kiali, Zipkin) onto instructor-provided VMs, creates namespace istio-in-action, deploys… | ||
| Get Started With Istio Service Mesh Workshop - Lin Sun, Solo.io (Part 2) | ServiceMeshCon North America 2021 | 2021-10-12 |
Hands-on steps show how Istio injects an init container sets iptables and runs an Envoy sidecar that receives keys via SDS so the proxy can enforce Envoy… | ||
| Tutorial: Istio Service Mesh Get Started Workshop | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
Hands-on workshop provisions a k3s cluster and installs Istio with istioctl demo profile, deploying Envoy sidecars, ingress/egress gateways, Grafana, Jaeger… | ||
| Service Mesh Extensibility Explained | ServiceMeshCon Europe 2021 | 2021-05-04 |
Shows concrete extensions for Istio: replacing the iptables init container with a CNI plugin to avoid NET_ADMIN, swapping the Envoy image or patching its… | ||
| Panel Discussion: Cloud Native Networking State of the Union | KubeCon + CloudNativeCon Europe 2021 | 2021-05-04 |
Kubernetes networking hits real limits as users scale to thousands of nodes, so the panel cites concrete shifts: dual-stack is beta for IPv6/IPv4, service… | ||
| Istio Service Mesh Simplified Beyond a Single Cluster | ServiceMeshCon North America 2020 | 2020-11-17 |
Istio now unifies the replicated and shared control‑plane models so operators choose primary vs remote control planes or even external control planes by… | ||
| IstioD - from microservices to monolithic | DevOpsDays Raleigh 2020 | 2020-10-19 |
Istio consolidates multiple control-plane services into an istiod single binary, moving Mixer logic into Envoy, merging citadel injector node agent and pilot… | ||
| Virtual Book Signing – Lin Sun | All Things Open 2020 | 2020-10-19 |
Short O’Reilly booklet Istio Explained plus a live bookinfo app demo that is deployed into a development cluster with Istio sidecars and an Envoy filter… | ||
| IstioD - from microservices to monolithic | All Things Open 2020 | 2020-10-19 |
Claim: the Istio control plane consolidates seven microservices into one istiod monolith, removing Mixer, Citadel, injector, node agent and others and… | ||
| Service Mesh Is Still Hard. The Things we all Did Wrong & Tales of Woe | ServiceMeshCon Europe 2020 | 2020-08-17 |
Linkerd migrates from a JVM/Finagle stack to a Go control plane and adds zero config onboarding via namespace annotations, automatic sidecar injection, a… | ||
| Opening | ServiceMeshCon 2019 | 2019-11-18 |
Opening remarks set the day and logistics then hit three concrete points: community focus on real service meshes like Istio Linkerd Consul Connect and interest… | ||
| Ask Me Anything About Service Mesh | ServiceMeshCon 2019 | 2019-11-18 |
Explains why teams moved from host daemons to sidecars: Linkerd v2 rebuilt off the JVM to be small and fast so thousands of per-pod proxies are practical… | ||
| The Crazy Service Mesh Ecosystem | All Things Open 2019 | 2019-10-13 |
Overview enumerates actual implementations and tradeoffs and names concrete numbers and behaviors rather than vague benefits. Istio 1.x: ~300 companies ~400… | ||
| Panel Discussion: Ask Us Anything: Microservices and Service Mesh | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
Panel covers why service mesh exists and concrete trade-offs: solves routing, retries, mTLS and observability but adds CPU/latency cost; examples include an… | ||
| Istio: Weaving, Securing and Observing microservices | Container Camp UK 2018 | 2018-09-06 |
Istio wires microservices with Envoy sidecars that intercept traffic, Pilot pushes configs and Citadel issues certificates, Mixer splits into telemetry and… | ||
| Reliable Application Roll Out and Operations with Istio [B] | KubeCon + CloudNativeCon North America 2017 | 2017-12-06 |
Istio shows concrete rollout primitives: Envoy sidecar plus Pilot and Mixer enforce routing, telemetry and policy without app code changes; route rules do… | ||
| Leverage LXD/LXC with Kubernetes | CloudNativeCon + KubeCon Europe 2017 | 2017-03-29 |
Experiment runs Kubernetes worker nodes inside LXD/LXC containers to raise free‑tier density on a 1‑core, 8GB host, starting workers in under a minute versus… | ||
| nothing matches | ||