Istio

Istio 1.23 (https://lnkd.in/eCBp7fsp) went out last week ?? A big?SHOUTOUT?to all contributors of Istio that helped directly or directly with the project.?The success of Istio could not happen without all of you! Would appreciate you show your support on Linkedin in addition to Slack!! ??

?? Have you ever wondered why only Linkerd and Istio show the same node throughput numbers? ?? It’s because both provide mutual TLS (mTLS)—including encryption in transit—even for traffic on the same node, while others do not. ?? This showcases one of the key features of service mesh—mTLS: it secures traffic effortlessly, whether the client and server pods run on the same node or different nodes. Not to mention, it delivers significantly higher throughput, especially with Istio Ambient! ???? #ServiceMesh #Istio #Linkerd #CloudNative From John Howard's blog: https://lnkd.in/eRiUfXfw

I recently caught up with Raymond Wong on his journey running Istio Ambient in production at Forbes ??. When we designed Ambient, our top goal was simplified operations—which Raymond also highlighted as its biggest benefit ??. Raymond is a true innovator in the cloud-native ecosystem ??. Not only is he running Ambient in production, but he's also leveraging the Kubernetes Gateway API ??. ?? Join us for our talk at #KubeConEU on Thursday, April 3rd, with Raymond Wong and Louis Ryan! If you're an Istio user at KubeCon, let’s connect! ????

Sharing my thoughts on how Istio Ambient Mode, brings a shift in how service meshes can operate, offering the same L4/L7 traffic routing benefits but with a leaner, more efficient approach. cc: Satyendra Karn #servicemesh #kubernetes #oracle #oke #oci #istio

??’?? ???????????????????? ???????????????? ???? ???????????????? ???????? ???? ?????????? LinkedIn for Learning ???????????? - ????????????????????: ?????????????? ???????? ???????? ?????????? ???? ?????? ????????! ??? This has been an incredible journey, and I’m so excited to share it with you??. In this course, I dive into ??????????'?? ?????????????? ???????? ???? ????????????????????, showing how to simplify microservices management. You'll ??????????, ?????? ???? ?????????????? ??????????????, ???????????? ???????????????? ???????? ???????????? ??????, ???????????????? ?????????????????????????? ?????????? ?????? ???????? ???????? ???? ???????????????? ???????? ??????????????????????????. Check out this course to become more adept at deploying a robust service mesh (without using sidecar ?? ), ensuring the reliability, security, and efficiency of your microservices. This wouldn’t have been possible without the incredible support I received??. A huge thank you to: ??? Ibukun Itimi for introducing me to LinkedIn Learning as an instructor. ???Dianne Starke, for being an amazing producer. I cant thank you enough for your guidance??? ???Courtney Allen, for your support throughout the process?. And the entire LinkedIn crew! I’m also grateful to my spouse, Kunle Johnson for your unwavering support and encouragement??. And to Lateef Koshemani and Abhishek Saurav, for your technical insights and brainstorming sessions — thank you for being there! And to all my friends, family, colleagues and connections—?????????? ???????? ?????????? ?????? ?????? ???????????? ?????? ???????? ??????!???????https://lnkd.in/eGzmKgBY Happy Meshing with Istio????? #istio #servicemesh #kubernetes #LinkedInLearning #learninganddevelopment #learning #ambientmesh #istio

Istio Ambient: Istio on a Diet—But More Than That Why It’s Like "Istio on a Diet": ? No More Sidecars – Eliminates per-pod Envoy sidecars, reducing overhead. ? Lower Resource Usage – Improves efficiency by sharing proxies. ? Easier Adoption – Works without modifying workloads. Why It’s More Than Just "Diet Istio": ?? New Architecture: ?? Layer 4 lightweight ztunnel disappears into the infrastructure (hence the name Ambient). ?? Layer 7 waypoint proxy is pluggable—for example, kgateway can act as the waypoint proxy. A reflection from a conversation with Ofir Cohen on LinkedIn around Istio and kgateway.

Istio ztunnel does a pretty impressive job at encrypting TCP at high-bandwidth https://lnkd.in/gpVcnamX The fact that it outpaces IPSEC and Wireguard for high-bandwidth TCP isn't really all that surprising. The effects of packets vs. streams, algorithm choice & hardware acceleration, threading, library evolution and optimization etc. can often outweigh the kernels inline advantage. Here's an example from Wireguard itself https://lnkd.in/gGPkjFQi

Love to see the progress! For those who aren’t familiar, Ztunnel is written entirely in Rust and represents the L3/L4 layer component of Istio’s Ambient Mesh -> github.com/istio/ztunnel

Istio Ambient mode provides more encrypted throughput than any other project in the Kubernetes ecosystem. #kubernetes #istio #servicemesh #ambient

Pretty impressive within 4 releases. Ambient is looking more and more appealing