SoloCon

Lin Sun and Louis Ryan from the Istio technical oversight committee, lead an update on the development of the project and the roadmap for 2021.

Learn about T-Mobile’s journey of adopting Istio across 100+ clusters to support microservices for fraud detection, billing, sales and APIs across many teams. The talk will cover things such as tenancy, install/upgrade, feature adoption, CI/CD integration, and architecture tradeoffs.

In this talk, we dig deeply into Istio's security policies including Authentication/Authorizations and how it works under the covers with Envoy proxy

Collecting telemetry and logging in a service mesh across multiple clusters can be complex. In this session, we look at common multi-cluster observability patterns and how to solve problems like large-scale collection, querying, and aggregation.

Istio has many powerful security features for protecting your applications from malicious actors inside and outside of your network. Users rely on Istio features to meet various compliance standards designed for protection of sensitive data environments. These include encryption, authentication, authorization, monitoring tools, and control of ingress and egress traffic. Unfortunately, enabling and using these features is not as simple as clicking a checkbox. Configuring these policies correctly requires a deeper understanding of default behaviors, installation settings and the Istio CRDs. Failure to configure properly can result in data breaches or unintended behaviors.  In this session, you will get an overview of the basics, out of the box functionality, and relevant Istio CRDs. In addition, you learn best practice guidelines for incrementally adopting these features and tools you can use to validate your security posture.

In this talk, I'll share the lessons I learned while deploying Istio on multiple Kubernetes clusters with more than 1000 Pods.
I decided to run everything on KinD clusters and I had to tune many parameters at different levels (Linux kernel, Kubernetes, Istio, ...).
After that, I'll explain how multi cluster communication can be configured using either the native Istio discovery service (EDS) or Gloo Mesh. I'll compare both solutions and how they scale.
Finally, I'll demonstrate how Gloo Mesh can be used to provide high-availability of applications across clusters, zones, and regions.

This workshop series is for those looking to learn more about how Istio works and how to operationalize it for their organization.The lessons from this workshop have been cultivated by working with large and small organizations across the world adopting Istio.