Secure Multicluster Istio Configuration Using GitOps Patterns
Explore secure multicluster Istio configuration using GitOps patterns. Learn to manage production Istio deployments, enforce security policies, and enable developer self-service with Argo CD and Argo Rollouts.
How Not to Scale Your Prometheus in Production
Insights on scaling Prometheus in production, covering challenges, strategies, and cost-effective solutions for managing observability in a rapidly growing microservices environment.
Sidecarless Mesh Monitoring with eBPF and Grafana
Explore eBPF-based monitoring for service meshes, comparing it to sidecar approaches. Learn about eBPF technology, its advantages, and how it can coexist with Envoy metrics for meaningful Grafana dashboards.
A Packet Eye View of the Istio Ambient Mesh
Explore Istio's new sidecarless architecture for service meshes, addressing concerns about sidecars while maintaining key functions. Learn through demos and architectural insights.
Istio Today and Tomorrow: Sidecars and Beyond
Explore Istio's impact on Cloud Native development, covering current efforts and future innovations like the ambient sidecarless topology for improved resource management and CVE control.
Hands-on Workshop: A Guided Tour of Istio Ambient Mesh
Explore Istio Ambient Mesh: Learn challenges solved by service mesh, compare sidecar and sidecarless architectures, and gain hands-on experience migrating workloads to ambient mesh for reduced complexity and overhead.
Create Istio Filters with Any Programming Language
Learn to create custom Istio filters using WebAssembly and ProxyWasm, enabling development in various programming languages, including interpreted ones, for extended service mesh functionality.
Developing a Mental Model of Istio: From Kubernetes to Sidecars to Ambient Mesh
Explore Istio's evolution from Kubernetes abstractions to sidecar model and Ambient Mesh, understanding key concepts and mental shifts for effective implementation and management.
Istio 2023 Roadmap Update - Future Directions and Improvements
Discover Istio's future direction, including improvements in usability, debuggability, and scalability, as well as the transition from sidecar to sidecar-less to GAMMA.
Istio for Controls Compliance
Explore Istio's role in regulatory compliance beyond mTLS, covering PCI DSS, FedRAMP, and GDPR. Learn how to implement controls and transition to identity-based security models.
Life Without Sidecars - Is eBPF's Promise Too Good to Be True?
Explore eBPF's potential to revolutionize service mesh technology, examining its promises, limitations, and impact on cloud-native infrastructure security, resilience, and operational complexity.
Future of Istio - Sidecar, Sidecarless or Both?
Explore Istio's future with maintainers, focusing on performance and security improvements through new deployment options like Ambient architecture. Learn about ongoing efforts and roadmap.
Connecting and Securing Services for Hybrid and Multi-Cloud Kubernetes
Explore cross-cloud connectivity challenges and solutions for Kubernetes in hybrid and multi-cloud environments, focusing on service communication, security, and performance monitoring.
Using Cert-Manager for Safer Private PKI
Explore private PKI deployment using cert-manager for cloud-native environments. Learn best practices for safe implementation and rotation to avoid outages and enhance security.
K8s Multi-Cluster Multi-Protocol Security with Aeraki - Session 7
Explore multi-cluster and multi-protocol security in Kubernetes with Aeraki, focusing on advanced techniques for robust and scalable cloud-native environments.
Is Istio Ambient Mesh Secure - Exploring Service-to-Service Security
Explore Istio Ambient Mesh's security features, including mTLS, workload identity, and infrastructure-application boundaries in a sidecarless data plane architecture for zero-trust service mesh.
Running Istio in Production as a Small Team
Discover how a small team implemented Istio for efficient traffic management during a Kubernetes migration, overcoming challenges and enabling seamless transition of 300+ microservices.
Zero Trust Workload Identity in Kubernetes
Explore Zero Trust principles in Kubernetes using SIFFE and Spire for workload identity-based authorization, eliminating the need for secrets and enhancing security across service meshes.
Improving Secure Pod-to-Pod Communication Within Kubernetes Using Trust Bundles
Explore advanced techniques for enhancing secure pod-to-pod communication in Kubernetes using trust bundles, leveraging cert-manager, SPIFFE, and KEP-3257 for automated TLS certificate creation and mTLS patterns.
Hello eBPF! Goodbye Sidecars? - Revolutionizing Kubernetes Deployments
Explore eBPF's potential to revolutionize Kubernetes deployments by replacing sidecar containers, offering enhanced observability, security, and networking capabilities with reduced resource usage and improved performance.
The Future of eBPF in Cloud Native
Explore eBPF's impact on cloud native technologies, covering networking, security, observability, and more. Learn its power, unique features, and future evolution in the ecosystem.