#IstioCon Local Istio Development John Howard / @howardjohn / Google #IstioCon Fully Cloud docker push kubectl apply docker pull #IstioCon Fully Cloud docker push kubectl apply docker pull + No local resource utilization + Closely resembles production environments + Can test large scales - Slow, especially without fast upload speeds - Expensive #IstioCon Local Machine Local Cluster kubectl apply docker pull Local Kubernetes Local Registry #IstioCon Local Machine Local Cluster + Registry docker push kubectl apply docker pull Local Kubernetes Local Registry + Fast! Image

#IstioCon Istio Project Update Lin Sun @linsun_unc #IstioCon Speaker Intro #IstioCon Istio Community Number of contributors last 12 months: 350+ contributing companies 500+ PR authors 1900+ 1900+ contributors Istio Community #IstioCon Service Mesh Surveys Using service mesh in production, from CNCF 2020 Survey What I like most about Istio Continuous INNOVATION and transformation with verify-install upgrade Istio simplify install helm3 #IstioCon Pilot Mixer Citadel Node Agent Injector Galley istio-system Node Pod Sidecar Pilot Agent Ingress Egress Istio Single Cluster Simplified

Experiences from running Istio in a k8s production environment Line Moseng @linemoseng Johnny Horvi Norwegian Labour and Welfare Administration 5,2 million nais.io github.com/nais CD CD metrics probes: { liveness: … } ingresses: - app.dev-gke.nais.io egresses: - svc-not-in-mesh.nav.local secrets: true accessPolicy: inbound: - name: consumer-a app apiVersion: probes: { liveness: … } ingresses: - app.dev-gke.nais.io egresses: - svc-not-in-mesh.nav.local secrets: true accessPolicy: inbound: - name: consumer-a nais.yaml cluster kubectl

Istio Meetup China Accelerate Service Mesh Network with ebpf Luyao Zhong Istio Meetup China Agenda ● TCP/IP stack overhead in service mesh ● Background knowledge of eBPF ● Independent solution to to bypass TCP/IP stack ● Performance Comparision Istio Meetup China TCP/IP stack overhead ● All the application data goes via sidecar (envoy) ● All the data passes TCP/IP stack 3 times ○ Inbound Envoy(same host) Istio Meetup China Dataflow After Acceleration(same host) Istio Meetup China ebpf Background Knowledge Loader & Verification Architecture https://ebpf.io/what-is-ebpf/ Istio Meetup China

Istio Security Assessment Google August 6, 2020 – Version 1.1 Prepared for Arun Kumar R Prepared by Mark Manning Jeff Dileo Divya Natesan Andy Olsen Feedback on this project? https://my.nccgroup Google enlisted NCC Group to perform an assessment on the open-source version of Istio and all of its components. Istio is a modern service mesh technology stack often used within Kubernetes clusters to facilitated by its control plane. The goal of the assessment was to identify security issues related to the Istio code base, highlight high risk configurations commonly used by administrators, and provide perspective

Istio As An API Gateway Discussion Flow ● What is an API Gateway? ● What is a Service Mesh? ● Common Features ● API Gateway + Service Mesh together! ● Istio as the API Gateway ● Advantages ● together! Limitations of This Approach ● Maintaining Two Tools ● Maintaining Two Expert Pools Istio as the API Gateway Advantages Advantages ● Same abstractions for all your traffic control needs

Observability And Istio Telemetry 吴 晟 Apache SkyWalking Creator Apache ShardingSphere Co-founder Microsoft MVP Tetrate founding Engineer Bitmain tech expert Service Mesh Meetup #4 上海海站 CoreIstio telemetry Attribute Vocabulary https://istio.io/docs/reference/config/policy-and- telemetry/attribute-vocabulary/Metric settings in Istio bypass adaptor• Service. Represent a set/group of are using instrument agents or SDKs. Or SkyWalking uses the name you defined in platform such as Istio. • Service Instance. Each one workload in the Service group is named as an instance. Like pods

Red Hat OpenShift Local 2.26 发行注记和已知问题 Red Hat OpenShift Local 2.26 中突出显示的功能和识别的问题 Last Updated: 2023-10-01 Red Hat OpenShift Local 2.26 发行注记和已知问题 Red Hat OpenShift Local 2.26 中突出显示的功能和识别的问题 Fabrice All other trademarks are the property of their respective owners. 摘要 摘要 本文档列出了 Red Hat OpenShift Local 2.26 的新功能和改进的功能。它还包含有关在使用软件时可 能会遇到的潜在问题的信息。在可能的情况下，会针对发现的问题进行临时解决方案。 . . . . . . . . . . . . . . MICROSOFT WINDOWS 上的问题 2.3. MACOS 的问题 3 4 4 4 5 5 6 6 7 7 8 9 目 目录 录 1 Red Hat OpenShift Local 2.26 发 发行注 行注记 记和已知 和已知问题 问题 2 使开源包含更多 红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。我们从这四个术语开始：master、 slav

Tetrate ⼯程师/Istio 社区 Release Manager 服务⽹格安全—— 理解 Istio CNI Istio Meetup China About me Istio 1.10 Release Manager, Istio Community, 2021-Present GetMesh(GetIstio) core contributor, Istio Community, 2021-Present Tetrate Service Bridge developer, Tetrate.io, 2021-Present Istio Developer(Security SIG), Istio Community, 2020-Present Anthos Service Mesh, Google Inc, 2020 Envoy is an edge and service in a mesh, allowing you to visualize problem areas, tune performance, and add substrate features. Istio is the industry-standard service mesh control plane that makes it easier to connect, observe, and

#IstioCon Taming Istio Configuration with Helm Ryan Michela / @ryanmichela / Salesforce #IstioCon In this talk This is a talk about using Helm with Istio ● Look at helm from a new perspective ● Helm helps automate Istio day-2 tasks ● Helm gitops #IstioCon HELM The package manager for Kubernetes It’s not just for installation anymore! #IstioCon What is Helm? ● Installer for Charts Helm to get the most from Helm! #IstioCon Managing Istio with Helm #IstioCon How does Helm relate to Istio? ● Istio install built on Helm ● Istio runs on YAML ● Our services are installed with YAML