service mesh

Stitching a Service Mesh Across Hundreds of Discrete Networks

Stitching a Service Mesh Across Hundreds of Discrete Networks

December 9, 2019

Intuit has experienced large growth in its microservices ecosystem over the last few years, which was primarily using a hub and spoke API Gateway for service communication. As the ecosystem expanded, …
From Brownfield to Greenfield: Istio Service Mesh Journey at Freddie Mac

From Brownfield to Greenfield: Istio Service Mesh Journey at Freddie Mac

December 6, 2019

Freddie Mac is one of the two mortgage loan corporations in the United States managing trillions of dollars of assets across the country. Our infrastructure is spread across different Kubernetes provi …
There's a Bug in My Service Mesh! What Do You Do When the Mesh is At Fault?

There's a Bug in My Service Mesh! What Do You Do When the Mesh is At Fault?

December 4, 2019

A service mesh is an increasingly necessary tool when running and debugging modern applications. But what do you do when theres a bug in the mesh itself?Paybase offers the most flexible, developer-na …
OpenFaaS Cloud + Linkerd: A Secure, Multi-Tenant Serverless Platform

OpenFaaS Cloud + Linkerd: A Secure, Multi-Tenant Serverless Platform

December 2, 2019

In this talk, maintainers of the OSS projects OpenFaaS and Linkerd discuss and demonstrate combining the features of each to build a scalable and secure multitenant serverless platform.OpenFaaS is a l …
Keynote: Seamless Customer Experience at Walmart Stores Powered by Kubernetes@Edge

Keynote: Seamless Customer Experience at Walmart Stores Powered by Kubernetes@Edge

November 28, 2019

At Walmart, while major application software can and does operate in the cloud, stores or any client edge compute cannot avoid the intermittent network events that can create less than ideal availabil …
How Yelp Moved Security From the App to the Mesh with Envoy and OPA

How Yelp Moved Security From the App to the Mesh with Envoy and OPA

November 26, 2019

From its inception, Yelp's service infrastructure has treated security as a fundamental component. For many years, developers carried the burden of building security features directly into their servi …
Life Outside the Cluster: Adding Virtual Machines to an Envoy Service Mesh

Life Outside the Cluster: Adding Virtual Machines to an Envoy Service Mesh

November 26, 2019

Service mesh tools add lots of functionality for Kubernetes-based applications, including policy automation and telemetry. But what if you're halfway through a migration to Kubernetes, and you still h …
Security Beyond Buzzwords: How to Secure Kubernetes with Empathy?

Security Beyond Buzzwords: How to Secure Kubernetes with Empathy?

November 25, 2019

Your developers are excited about containerizing their apps for elastic scaling. Your operations team is busy drooling over resource optimizations and cost savings that are predicted with a move away …
Bringing the Envoy Service Mesh to Mobile

Bringing the Envoy Service Mesh to Mobile

November 23, 2019

99.999% reliability on the server is meaningless if mobile apps are only able to complete the desired product flows a fraction of the time. Learn how Lyft built, and deployed Envoy Mobile (envoy-mobil …
Five Cool Things You Can Do with Network Service Mesh

Five Cool Things You Can Do with Network Service Mesh

November 23, 2019

Network Service Mesh enables hybrid/multi-cloud IP Service Mesh at the granularity of individual workloads. This expands the realm of connectivity options to include things never before possible. Afte …
Supercharge Your Microservices CI/CD with Service Mesh and Kubernetes

Supercharge Your Microservices CI/CD with Service Mesh and Kubernetes

November 22, 2019

We all know by now that Service Mesh provides many benefits to containers on Kubernetes. Linkerd, Istio, and Consul are some great examples. With Service Mesh Interface (SMI), adoption is becoming muc …
Enforcing Service Mesh Structure using OPA Gatekeeper

Enforcing Service Mesh Structure using OPA Gatekeeper

November 21, 2019

Organizations need the ability to apply rules to their workloads and services, at scale and distinct from the development of those services. Policies and policy enablement provide those governance cap …
Fine Grained Mesh Metrics for Better Visibility With Native Performance

Fine Grained Mesh Metrics for Better Visibility With Native Performance

November 20, 2019

Knowing granular traffic patterns is crucial in understanding the functioning and health of a service mesh. The existing Envoy extensions collecting metrics are either not granular enough or can consu …
Intro + Deep Dive: Cloud Native Network Function (CNF) Testbed

Intro + Deep Dive: Cloud Native Network Function (CNF) Testbed

November 20, 2019

The Cloud Native Network Function (CNF) Testbed is a CNCF initiative to provide a neutral space for exploring and evaluating open source networking technologies and their interoperability. The initiat …
Ready to Serve! Speeding-Up Startup Time of Istio-Powered Workloads

Ready to Serve! Speeding-Up Startup Time of Istio-Powered Workloads

November 20, 2019

Pod startup time has long been a focus area for cloud-native platforms. Optimizing startup time is critical to support use cases such as autoscaling, upgrades, and failure recovery. The recent rise of …
Intro + Deep Dive: Specialized Network Protocols for IoT+Edge with Kubernetes

Intro + Deep Dive: Specialized Network Protocols for IoT+Edge with Kubernetes

November 19, 2019

This session will survey communication protocols and technologies used in the edge and IoT space. These use cases can call for specialized protocols and transports: -publish subscribe, multicast -prot …
Solving Multi-Cluster Network Connectivity With Submariner

Solving Multi-Cluster Network Connectivity With Submariner

November 19, 2019

Today companies face the need to spread workloads across several clusters, leverage the capabilities of specific clouds, create more resilient services, or comply with GDPR by locating and securing sp …
Lightning Talk: Using Istio's Mixer for Network Request Caching

Lightning Talk: Using Istio's Mixer for Network Request Caching

November 17, 2019

Service Meshes (and Istio in particular,) have helped application developers off-load a good chunk of logic surrounding network requests. Our microservices should be as close to pure business logic as …
Intro: Linkerd

Intro: Linkerd

November 14, 2019

In this session, William Morgan and Linkerd maintainers, will provide an introduction to Linkerd and the service mesh model. We'll hear some lightning talks from current Linkerd production users, and …
Istio New Workload Identity Provision Pipeline Based on Envoy SDS

Istio New Workload Identity Provision Pipeline Based on Envoy SDS

November 13, 2019

Istio introduces a new workload identity provision system based on envoy SDS (secret discovery service) from release-1.1; as the main developer who works on this project, my talk covers:1. Background …
What WePay Learned From Processing Billions of Dollars on GKE Using Linkerd

What WePay Learned From Processing Billions of Dollars on GKE Using Linkerd

November 11, 2019

WePay processes billions of dollars worth of payments each year. As the number of services that process payment requests grow in WePays infrastructure, so does the challenge of monitoring, debugging, …
Istio Multi-Cluster Service Mesh Patterns Explained

Istio Multi-Cluster Service Mesh Patterns Explained

November 10, 2019

This session will review the various multi-cluster service mesh deployment patterns that are available with Istio. We will explain the pros and cons of each approach to ensure that you have the inform …
Zero Trust Service Mesh with Calico, SPIRE, and Envoy

Zero Trust Service Mesh with Calico, SPIRE, and Envoy

November 6, 2019

The promise of a service mesh is to be able to delegate the hard networking problems to a uniform set of proxies and controllers. An extremely important networking problem is securing traffic within t …
Deep Dive: Network Service Mesh (NSM)

Deep Dive: Network Service Mesh (NSM)

November 4, 2019

Network Service Mesh (NSM) is a young and ambitious project, offering solutions to many current problems around Cloud-Native Networking Connectivity in the L2/L3 layers. In this talk, we walk the audi …
gRPC Load Balancing and Service Mesh

gRPC Load Balancing and Service Mesh

November 2, 2019

Service mesh architecture proposes a unique approach for control plane management (including load balancing). This talk goes over the options available for gRPC load-balancing in the context of a gRPC …
Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

November 1, 2019

Having Kubernetes for your service landscape is great. Having a service mesh technology inside is even better - but there are legacy services, too. Leveraging the benefits of a service mesh is possibl …
Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

October 31, 2019

Service mesh software is challenging the current networking state of the art. With Istios gateways technology, it is possible to connect large numbers of Kubernetes clusters. Connectivity between clo …
Co-Evolution of Kubernetes and GCP Networking

Co-Evolution of Kubernetes and GCP Networking

October 29, 2019

This talk will explore the trials and tribulations behind the evolution of GCP Networking for Kubernetes and evolution of Kubernetes to meet provider requirements. Our key guiding principle is to pro …