Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination

Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination

hearts, we strive to provide be�er tooling for troubleshoo�ng. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and des�na�on external access using AWS metadata Advanced Networking Using kube-router to run BGP Se�ng up Cluster Mesh Cilium integra�on with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryp�on (beta) performed for kube-dns $ kubectl delete pods -n kube-system $(kubectl get pods -n kube-system -o pod "event-exporter-v0.2.3-f9c896d75-cbvcz" deleted pod "fluentd-gcp-scaler-69d79984cb-nfwwk" deleted pod "heapster-v1

hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (beta) at all, the following is a list of reasons when to use a kvstore: If you want to use the Cluster Mesh functionality. If you are running in an environment with more than 250 nodes, 5k pods, or if you observe

hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta) --no-headers=true | grep '' | awk '{print "-n "$1" "$2}' | xargs -L 1 -r kubectl delete pod pod "event-exporter-v0.2.3-f9c896d75-cbvcz" deleted pod "fluentd-gcp-scaler-69d79984cb-nfwwk" deleted pod "heapster-v1

Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta)

Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution hearts, we strive to provide better tooling for troubleshooting. This includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta)

Compared to native NFS, eNFS boasts three key innovations. • It enables second-level failover in the event of software or hardware faults on I/O paths. It also ensures multiple links between the client and active-active path failover on a three-layer network. It enables cross-site active-active failover in the event of storage faults or host-side I/O timeouts, effectively resolving cross-engine failures and host management Memory FSC memory algorithm Context switch Assembly instruction optimization SMP Event communication UniProton Compact Security and reliability Maintainability and testability Feature

2021 is the inaugural community conference for the industry's most popular service mesh. IstioCon is a community-led event, showcasing the lessons learned from running Istio in production, hands-on experiences roadmap sessions. Fun and games are also included with two social hours to take the load off and mesh with the Istio community, vendors, and maintainers! #IstioCon Agenda ● Introduction ● Target Audience Some service outside of cluster Version 1 Version 2 Extended Mesh Defines endpoints outside of cluster as a part of Service Mesh #IstioCon Brush up on Istio resources (cont’d) Target Audience

Tools to help with network troubleshooting and policies ❏ Additional features like IPSec, Cluster Mesh, and more 12 Reduced iptables Complexity 13 CiliumNetworkPolicies Layer 7 HTTP Filtering Outbound image > Replace image > Select file ❏ Durable log storage and enterprise Security Information and Event Management (SIEM) integration ❏ hubble observe command to help with troubleshooting ❏ Features