[TALK]@Telematika

envoy

Moving to a Service Mesh

February 25, 2020

Historically, Indeed has used Boxcar (Indeeds proprietary framework) to build distributed systems. Over the last year, we have been shifting several of our systems to use gRPC over anEnvoy service m …

Service Mesh in a Nutshell

February 25, 2020

Software applications have evolved from monoliths to microservices in a move towards becoming Cloud Native. The Cloud provides numerous benefits over traditional platforms. However, transitioning towa …

Comparison of Current Service Mesh Architectures

February 22, 2020

A service mesh provides visibility, traffic management, resiliency and security control for distributed application services. This presentation focuses on the differences between service meshes and se …

K8s-based API Gateway

February 21, 2020

Looking for an open-source, Cloud Native, API gateway designed specifically for Kubernetes? In this talk, you will learn about Ambassador, which does exactly this and is based on Lyft's Envoy proxy. Y …

Lightning Talk: Observability for Containerized NW Slice with OSS vEPC

January 1, 2020

Cloud Native network is one of the innovation for Telecoms because improving the agility and flexibility of a 5G network make our life better. CNFs are core functions of 5G and Observability for CNFs …

Low Latency Multi-cluster Kubernetes Networking in AWS

December 21, 2019

Lyft is migrating their entire service stack of hundreds of microservices to Kubernetes on AWS. A critical component to Lyfts successful migration is their open source set of CNI plugins which implem …

How the Department of Defense Moved to Kubernetes and Istio

December 18, 2019

This session will showcase the DoD Enterprise DevSecOps initiative and its architecture. It describes how the Department of Defense is securing OCI compliant containers, moving to Kubernetes and Istio …

Running Istio and Kubernetes On-prem at Yahoo Scale

December 18, 2019

At Yahoo!, there are 18+ production grade Kubernetes(K8s) clusters and my team operates one of the largest on-prem K8s clusters handling 150K+ containers, 500+ applications and serving 1Million+ reque …

Take Envoy Beyond a K8s Service Mesh - to Legacy Bare Metal and VMs + More

December 18, 2019

Envoys mission is to extract network and communication security code from applications in a way that developers and users can deploy components that just work no matter where they run or what hosts t …

Porting Envoy to Windows; A Progress Report

December 16, 2019

Envoy is a high-performance open source edge and service proxy that makes the network transparent to applications. As of now Envoy is only available on Linux, and thats a big blocker for Windows team …

Airbnb Service Discovery: Past, Present, Future (Challenges of Change)

December 13, 2019

In 2013, Airbnb released an open source service discovery solution (SmartStack) and has functioned on the same framework for years. Historically our infrastructure ran on AWS EC2 instances and utilize …

Panel: Is Service Mesh Ready for Edge-Native Applications?

December 12, 2019

Edge deployments, in contrast to large public clouds, pose interesting demands since they are physically insecure & capacity constrained. Also, Edge Computing Apps such as AR-VR, have low-latency char …

How Spotify Migrated Ingress HTTP Systems to Envoy

December 10, 2019

Erica and Vladimir are on the team responsible for perimeter systems that sit between Spotifys clients and its backend services. They started unifying those systems from a range of different technolo …

From Brownfield to Greenfield: Istio Service Mesh Journey at Freddie Mac

December 6, 2019

Freddie Mac is one of the two mortgage loan corporations in the United States managing trillions of dollars of assets across the country. Our infrastructure is spread across different Kubernetes provi …

Flyte: Cloud Native Machine Learning & Data Processing Platform

November 29, 2019

Flyte is the backbone for large-scale Machine Learning and Data Processing (ETL) pipelines at Lyft. It is used across business critical applications ranging from ETA, Pricing, Mapping, Autonomous, etc …

How Yelp Moved Security From the App to the Mesh with Envoy and OPA

November 26, 2019

From its inception, Yelp's service infrastructure has treated security as a fundamental component. For many years, developers carried the burden of building security features directly into their servi …

Life Outside the Cluster: Adding Virtual Machines to an Envoy Service Mesh

November 26, 2019

Service mesh tools add lots of functionality for Kubernetes-based applications, including policy automation and telemetry. But what if you're halfway through a migration to Kubernetes, and you still h …

Bringing the Envoy Service Mesh to Mobile

November 23, 2019

99.999% reliability on the server is meaningless if mobile apps are only able to complete the desired product flows a fraction of the time. Learn how Lyft built, and deployed Envoy Mobile (envoy-mobil …

Fine Grained Mesh Metrics for Better Visibility With Native Performance

November 20, 2019

Knowing granular traffic patterns is crucial in understanding the functioning and health of a service mesh. The existing Envoy extensions collecting metrics are either not granular enough or can consu …

Envoy SDS: Fortifying Istio Security

November 15, 2019

In Istio 1.1, Citadel Agent is introduced to dynamically provision x.509 certificates and private keys to workloads through the Envoy Secret Discovery Service (SDS) API. Running on Kubernetes nodes as …

Extending Envoy with WebAssembly

November 14, 2019

Envoy is a high-performance proxy in the cloud-native landscape designed to be extensible at its core. There are several possible extension points in Envoy as outlined in https://github.com/envoypro …

Istio New Workload Identity Provision Pipeline Based on Envoy SDS

November 13, 2019

Istio introduces a new workload identity provision system based on envoy SDS (secret discovery service) from release-1.1; as the main developer who works on this project, my talk covers:1. Background …

Tutorial: A Day in the Life of a Cloud Native Developer

November 11, 2019

In this 90 minute, hands on tutorial, attendees will get a chance to work with a comprehensive set of modern cloud native tools from the CNCF software stack. The tutorial will take users on an end to …

Intro: Envoy

November 7, 2019

Zero Trust Service Mesh with Calico, SPIRE, and Envoy

November 6, 2019

The promise of a service mesh is to be able to delegate the hard networking problems to a uniform set of proxies and controllers. An extremely important networking problem is securing traffic within t …

Inside the CNCF Project Security Reviews

November 2, 2019

Last year the CNCF started funding security reviews for its projects. This talk examines the review process from the inside and looks at the outcomes and lessons from the reviews that have been perfor …

Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

October 31, 2019

Service mesh software is challenging the current networking state of the art. With Istios gateways technology, it is possible to connect large numbers of Kubernetes clusters. Connectivity between clo …

Transparent Chaos Testing with Envoy , Cilium and BPF

October 31, 2019

Chaos testing has become a prerequisite for successful operations by testing chaotic, unexpected situations before they occur in production. Chaos testing is still done manually to a large extent. Thi …