Mish-Mesh: Abusing the Service Mesh to Compromise Kubernetes Environments
Discover critical security vulnerabilities in Kubernetes service mesh deployments and learn defensive strategies against unauthorized access, system compromises, and secret exposure.
Kubernetes Multi-Cluster Networking 101 - Understanding Cross-Cluster Communication
Discover essential concepts and tools for enabling cross-cluster Pod communication in Kubernetes, including networking topologies, service discovery, DNS management, and security considerations for multi-cluster setups.
Building a Private Cloud Platform with Kubernetes - From Air-Gapped Design to Implementation
Discover how Google engineered a private cloud platform using Kubernetes, exploring their innovative approach to cloud tenancy, isolation, networking, and integration of CNCF technologies for scalable infrastructure.
Powering Automatic Authorization in Envoy Through Live Traffic Inspection
Discover how to leverage live traffic inspection for automatic authorization in Envoy, using CNCF Pixie to generate OPA policies and implement effective service-to-service access controls.
What Istio Got Wrong - Learnings from the Last Seven Years of Service Mesh Development
Explore key mistakes and lessons learned from Istio's seven-year evolution, including architectural challenges, feature complexity, and the journey toward simplified service mesh solutions.
Leveraging Gateway API for Kubernetes Native API Management
Explore advanced Kubernetes networking with Gateway API, learning to optimize routing, security, and API management for scalable microservices architectures and service mesh integration.
From CNI to Service Mesh: Demystifying Kubernetes Networking
Dive into Kubernetes networking fundamentals, from container networking interfaces to service mesh architecture, covering pod communication, external access, and advanced routing capabilities.
IBAC for Developers - Automating Istio Authorization Policies Using Envoy Metrics With a Declarative Approach
Master Istio Authorization Policies automation through Envoy metrics, implementing identity-based access control with declarative methods for enhanced cloud security.
Gateway API Implementation and Performance in Kubernetes - A Knative Serving Case Study
Dive into Gateway API implementation challenges and solutions in Kubernetes, exploring real-world adoption experiences, performance metrics, and practical insights for Knative Serving integration.
AI and ML: The Critical Operational Side of Running Applications in Kubernetes
Discover how to effectively manage AI and ML operations using service mesh, focusing on GPU workloads, multitenancy, and scaling in Kubernetes environments for reliable and observable ML applications.
TLS and MTLS - Introduction to Modern Security
Discover the fundamentals of TLS and mTLS security protocols, their real-world applications, and implementation strategies for zero-trust environments using practical examples from Linkerd.
Understanding Multicluster Kubernetes Connectivity Options
Explore secure and scalable connectivity options for multi-cluster Kubernetes deployments, including CNI solutions like Cilium Cluster Mesh and service meshes such as Linkerd and Istio.
Demystifying Kubernetes Networking for Enterprise and Service Providers
Dive into Kubernetes networking fundamentals, exploring container connectivity, load balancing, and Gateway API for enterprise and service provider environments. Learn key concepts for managing modern cloud-native infrastructure.
Sail-Operator: Making Seamless Istio Upgrades Easy
Discover how to simplify Istio control plane upgrades using sail-operator, featuring both InPlace and RevisionBased strategies for safer, automated service mesh management in Kubernetes environments.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant architecture, and robust traffic monitoring for enhanced network security.
Confluent's Service Mesh Journey - Building Security and Reliability One Sidecar at a Time
Discover how Confluent Cloud implements Istio service mesh for enhanced security, observability, and traffic routing, featuring practical insights on SPIFFE/SPIRE integration and OpenTelemetry deployment.
Migrating a Monolith to Kubernetes with Istio: Our Journey at Adobe
Discover the challenges and solutions of migrating monolithic applications to Kubernetes with Istio, drawing from Adobe's experience in implementing service mesh for Document Cloud operations.
Insightful Traffic Monitoring: Harnessing Cilium for Comprehensive Network Observability
Discover how eBay leverages Cilium and eBPF to monitor network traffic, generate real-time events, and build comprehensive microservice dependency graphs across hundreds of Kubernetes clusters at scale.
Testing Kubernetes Without Kubernetes - A Networking Deep Dive
Dive into advanced Kubernetes networking testing strategies, exploring Linux primitives and efficient testing methods without cluster dependencies for CNIs, kube-proxy, and service meshes.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant capabilities, and robust traffic monitoring for enhanced network security.
Cloud Native Networking - Introduction and Deep Dive
Dive into cloud native networking fundamentals and advanced topics, exploring microservices architecture, distributed systems, and modern infrastructure design principles with TAG Network.