istio

Walk-through: Debugging an RBAC Problem in Istio (But Without the Swearing)

Walk-through: Debugging an RBAC Problem in Istio (But Without the Swearing)

November 24, 2019

A few months ago, I lost a whole day to debugging a problem with RBAC in Istio. I swore a lot, but I also learned a lot. I learned new tools, new interfaces, and the rabbit hole took me past most majo …
Building a Medical AI with Kubernetes and Kubeflow

Building a Medical AI with Kubernetes and Kubeflow

November 22, 2019

Engineering AI systems at scale can be difficult, especially in highly regulated environments like healthcare. Many challenges arise, such as ensuring reproducibility, controlling data access policies …
Supercharge Your Microservices CI/CD with Service Mesh and Kubernetes

Supercharge Your Microservices CI/CD with Service Mesh and Kubernetes

November 22, 2019

We all know by now that Service Mesh provides many benefits to containers on Kubernetes. Linkerd, Istio, and Consul are some great examples. With Service Mesh Interface (SMI), adoption is becoming muc …
Fine Grained Mesh Metrics for Better Visibility With Native Performance

Fine Grained Mesh Metrics for Better Visibility With Native Performance

November 20, 2019

Knowing granular traffic patterns is crucial in understanding the functioning and health of a service mesh. The existing Envoy extensions collecting metrics are either not granular enough or can consu …
Ready to Serve! Speeding-Up Startup Time of Istio-Powered Workloads

Ready to Serve! Speeding-Up Startup Time of Istio-Powered Workloads

November 20, 2019

Pod startup time has long been a focus area for cloud-native platforms. Optimizing startup time is critical to support use cases such as autoscaling, upgrades, and failure recovery. The recent rise of …
Solving Multi-Cluster Network Connectivity With Submariner

Solving Multi-Cluster Network Connectivity With Submariner

November 19, 2019

Today companies face the need to spread workloads across several clusters, leverage the capabilities of specific clouds, create more resilient services, or comply with GDPR by locating and securing sp …
Lightning Talk: Back to the Future with eBPF

Lightning Talk: Back to the Future with eBPF

November 18, 2019

Is it possible that the future of networking and security in Microservices will be based on technology from the past? Several open-source Kubernetes tools are already using eBPF. Mainly related to ne …
Lightning Talk: Using Istio's Mixer for Network Request Caching

Lightning Talk: Using Istio's Mixer for Network Request Caching

November 17, 2019

Service Meshes (and Istio in particular,) have helped application developers off-load a good chunk of logic surrounding network requests. Our microservices should be as close to pure business logic as …
Envoy SDS: Fortifying Istio Security

Envoy SDS: Fortifying Istio Security

November 15, 2019

In Istio 1.1, Citadel Agent is introduced to dynamically provision x.509 certificates and private keys to workloads through the Envoy Secret Discovery Service (SDS) API. Running on Kubernetes nodes as …
Ingress V2 and Multicluster Services

Ingress V2 and Multicluster Services

November 15, 2019

With app modernization, weve entered a new phase of structuring services. Services have evolved over time to span multiple clusters as well as hybrid deployments that encompass both on-prem and multi …
Istio New Workload Identity Provision Pipeline Based on Envoy SDS

Istio New Workload Identity Provision Pipeline Based on Envoy SDS

November 13, 2019

Istio introduces a new workload identity provision system based on envoy SDS (secret discovery service) from release-1.1; as the main developer who works on this project, my talk covers:1. Background …
Kanary - Automated and Integrated Canary Testing Using CRD and an Operator

Kanary - Automated and Integrated Canary Testing Using CRD and an Operator

November 13, 2019

The Kubernetes ecosystem provides primitives to easily deploy applications. Now, how might we simplify validation of a new application version before triggering its complete rollout? Canary testing is …
Istio Multi-Cluster Service Mesh Patterns Explained

Istio Multi-Cluster Service Mesh Patterns Explained

November 10, 2019

This session will review the various multi-cluster service mesh deployment patterns that are available with Istio. We will explain the pros and cons of each approach to ensure that you have the inform …
Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

November 1, 2019

Having Kubernetes for your service landscape is great. Having a service mesh technology inside is even better - but there are legacy services, too. Leveraging the benefits of a service mesh is possibl …
Strategies to "Kubernetify" Legacy Applications

Strategies to "Kubernetify" Legacy Applications

November 1, 2019

Microservice-based architectures have seen large-scale adoption and have become the industry standard for developing cloud-native applications. This growth is supplemented by key technologies like Doc …
Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

October 31, 2019

Service mesh software is challenging the current networking state of the art. With Istios gateways technology, it is possible to connect large numbers of Kubernetes clusters. Connectivity between clo …
Caller ID in Kubernetes

Caller ID in Kubernetes

October 26, 2019

Kubernetes lets every Pod have a Service Account identity, but previously, that identity has only really been usable to authenticate to the Kubernete API server. The newly-released pod proof of identi …
5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh

5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh

October 25, 2019

Building distributed systems is hard. Building distributed systems that are secure and compliant is even harder. A service mesh such as Istio can help solve engineering problems youll face when secur …
Moving People and Products with Machine Learning on Kubeflow

Moving People and Products with Machine Learning on Kubeflow

October 22, 2019

GOJEK, the Southeast Asian super app, has experienced a massive increase in customer growth by leveraging machine learning throughout its products. However, building production grade machine learning …
Unblocking the Release Train with Istio Traffic Management

Unblocking the Release Train with Istio Traffic Management

October 22, 2019

Wealth Wizards employs a microservice architecture, with each service being actively developed. As soon as a change is in the mainline its on the release train and any subsequent changes traditional …
Istio on Knative Lessons Learned: How Istio is Fit for Serverless Platform

Istio on Knative Lessons Learned: How Istio is Fit for Serverless Platform

October 17, 2019

Serverless is the emerging technology to support microservices. Istio is a popular service mesh platform. How Istio is fit for a serverless platform? It's a question that developers and users of both …
Networking the Service Mesh Proxy: Where We Are, Where Were Going

Networking the Service Mesh Proxy: Where We Are, Where Were Going

October 16, 2019

Redirecting application traffic to/from a proxy and lifecycle management of proxy instances are common requirements for service mesh implementations. The traffic and lifecycle problems are, to a large …
Cross-Cluster Calls Made Easy with Istio 1.1

Cross-Cluster Calls Made Easy with Istio 1.1

October 15, 2019

Despite the now-common practice of spinning up multiple clusters across multiple regions, cross-cluster communication between the services running in them is still a huge issue. We rarely bother, or w …
Lightning Talk: How We Use Istio and OPA for Authorization

Lightning Talk: How We Use Istio and OPA for Authorization

October 14, 2019

I'd like to introduce how we use istio + OPA to do authorization in HP's FitStation platform. Our project consists of 20+ micro-services which are written in Golang and running on Kubernetes with ist …
Intro: Network Service Mesh (NSM)

Intro: Network Service Mesh (NSM)

October 10, 2019

Network Service Mesh (NSM) is a novel approach solving L2/L3 network use cases in Kubernetes that are tricky to address with the existing Kubernetes Network Model. Inspired by Istio, Network Service M …
Using Istio to Manage the Cross-Regional & Cross-Cluster Microservices - Xi Ning Wang, Alibaba & Xiaozhong Liu, UniCareer

Using Istio to Manage the Cross-Regional & Cross-Cluster Microservices - Xi Ning Wang, Alibaba & Xiaozhong Liu, UniCareer

October 8, 2019

UniCareer is an E-Learning career development platform that targets various needs for global students and working professionals, and serving the users from several regions of the world. These applicat …
Service Governance in Production-ready Containerized Cloud Foundry with Istio

Service Governance in Production-ready Containerized Cloud Foundry with Istio

October 7, 2019

Containerized Cloud Foundry (CF) turns traditional CF components into micro-services in the Kubernetes (K8s). This approach embraces the benefits that K8s brings and opens up opportunities to manage C …
Istio Performance and Best Practices in Large Scale Kubernetes Cluster

Istio Performance and Best Practices in Large Scale Kubernetes Cluster

October 4, 2019

As many industry cloud solutions and frameworks are adopting Istio since its GA in 2018, it is important to understand its performance in large scale Kubernetes cluster (2000+ nodes). In this session, …