What Istio Got Wrong - Learnings from the Last Seven Years of Service Mesh Development
Explore key mistakes and lessons learned from Istio's seven-year evolution, including architectural challenges, feature complexity, and the journey toward simplified service mesh solutions.
IBAC for Developers - Automating Istio Authorization Policies Using Envoy Metrics With a Declarative Approach
Master Istio Authorization Policies automation through Envoy metrics, implementing identity-based access control with declarative methods for enhanced cloud security.
Understanding Multicluster Kubernetes Connectivity Options
Explore secure and scalable connectivity options for multi-cluster Kubernetes deployments, including CNI solutions like Cilium Cluster Mesh and service meshes such as Linkerd and Istio.
Realizing ZTNA with Open Source Projects - Building Secure Enterprise Access Solutions
Discover how to implement Zero Trust Network Access using open-source tools like ISTIO, Keycloak, and Kubernetes, with practical insights on automating secure enterprise application access.
Sail-Operator: Making Seamless Istio Upgrades Easy
Discover how to simplify Istio control plane upgrades using sail-operator, featuring both InPlace and RevisionBased strategies for safer, automated service mesh management in Kubernetes environments.
Enhancing Security with Istio - Realtime JWT Access Revocation
Discover how to implement real-time JWT token revocation in Istio systems through an event-based architecture, enabling enhanced security controls and immediate access management across multiple clusters.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant architecture, and robust traffic monitoring for enhanced network security.
Confluent's Service Mesh Journey - Building Security and Reliability One Sidecar at a Time
Discover how Confluent Cloud implements Istio service mesh for enhanced security, observability, and traffic routing, featuring practical insights on SPIFFE/SPIRE integration and OpenTelemetry deployment.
Migrating a Monolith to Kubernetes with Istio: Our Journey at Adobe
Discover the challenges and solutions of migrating monolithic applications to Kubernetes with Istio, drawing from Adobe's experience in implementing service mesh for Document Cloud operations.
Testing Kubernetes Without Kubernetes - A Networking Deep Dive
Dive into advanced Kubernetes networking testing strategies, exploring Linux primitives and efficient testing methods without cluster dependencies for CNIs, kube-proxy, and service meshes.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant capabilities, and robust traffic monitoring for enhanced network security.