Idit Levine & Yuval Kohavi 2 | Copyright © 2020 Idit Levine | Founder & CEO, Solo.io Yuval Kohavi | Chief Architect, Solo.io 3 | Copyright © 2020 Istio Adoption with Gloo Mesh Crawl Walk Run Mesh 4 | Copyright © 2020 Orders Citadel Pilot Galley User Account Istiod Understanding Istio: Control and data planes data plane control plane 5 | Copyright © 2020 Extend Envoy Proxy with TRANSCODER Build Custom Envoy Filter 6 | Copyright © 2020 Portable Secure Fast Any Language Outside the Web Web Assembly 7 | Copyright © 2020 Extend Envoy Proxy with Web Assembly (Wasm) Polyglot:

& Chief Architect, Aspen Mesh) Louis Ryan (Principal Engineer, Google) #IstioCon Highlights of 2020 ● Better life cycle management ○ Istioctl install & Operator support ● Architectural simplification Networking/Security APIs ○ Virtual Machine expansion/Multi cluster mesh https://istio.io/latest/blog/2020/tradewinds-2020/ #IstioCon Impact on users https://thenewstack.io/when-service-meshes-can-emerge-from- Listening to our users UX Working Group - Upgrade Survey 2020 #IstioCon Listening to our users ... UX Working Group - Upgrade Survey 2020 Do users on old versions understand their security and support

1 | Copyright © 2020 2 | Copyright © 2020 CHRISTIAN POSTA Global Field CTO, Solo.io @christianposta christian@solo.io https://blog.christianposta.com https://slideshare.net/ceposta 3 | Copyright Copyright © 2020 4 | Copyright © 2020 5 | Copyright © 2020 6 | Copyright © 2020 7 | Copyright © 2020 8 | Copyright © 2020 9 | Copyright © 2020 10 | Copyright © 2020 11 | Copyright Copyright © 2020 12 | Copyright © 2020 13 | Copyright © 2020 • https://solo.io • https://solo.io/blog • https://slack.solo.io • https://gloo.solo.io • https://envoyproxy.io • https://istio.io •

Istio Security Assessment Google August 6, 2020 – Version 1.1 Prepared for Arun Kumar R Prepared by Mark Manning Jeff Dileo Divya Natesan Andy Olsen Feedback on this project? https://my.nccgroup nccgroup.com/feedback/67b627f7-a0a2-43b7-ad68-af515a9ed2e0 Executive Summary Synopsis In the summer of 2020, Google enlisted NCC Group to perform an assessment on the open-source version of Istio and all of Dates 2020-07-06 to 2020-07-31 Environment Local Test Environment Consultants 4 Level of Effort 50 person days Targets istio/istio Istio Source code in the master branch up to July 15th, 2020. Commit:

Retail loans Corporate deposits Retail deposits Sberbank standalone, RAS As of December 1, 2020 In non-financial services by 2023 10+ mn SberPrime subscribers ~500+ bn RUB e-commerce GMV In Egress Other External Services Tracing Store Logging Store LB January 2019 PROD PoC March 2020 Innovation trigger Peak of inflated Expectations Though of Disillusionment Slope of Enlightenment Egress Istio Ingress OCP 4.1 LB LB LB TROUBLE SHOOTING January 2019 PROD PoC March 2020 December 2020 Innovation trigger Peak of inflated Expectations Though of Disillusionment Slope of Enlightenment

a manual code audit for security issues. 3. Review the fixes for the issues found in an audit from 2020. 4. Review and improve Istio's fuzzing suite. 5. Perform a SLSA review of Istio. The audit was started io/latest/blog/2021/ncc-security-assessment/NCC_Group_Google_GOIST2005 _Report_2020-08-06_v1.1.pdf. These issues were found in an audit performed in 2020 that found a total of 18 issues: 4 High severity issues 5 Medium been done a�er the final audit report had been handed over to the Istio team, which is 6th August 2020, and until the audit was announced with the blog post on July 13th 2021. Since then, we believe Istio

contributors Istio Community #IstioCon Service Mesh Surveys Using service mesh in production, from CNCF 2020 Survey What I like most about Istio Continuous INNOVATION and transformation with users in mind Live! https://github.com/instana/robot-shop #IstioCon 2018-2019: Year of Service Mesh #IstioCon 2020: Year of Istio Innovation Simplified installation Simplified control plane New extension Model

Tetrate.io, 2021-Present Istio Developer(Security SIG), Istio Community, 2020-Present Anthos Service Mesh, Google Inc, 2020 Envoy is an edge and service proxy that allows traffic in an infrastructure

Artifact镜像规范参考 ■ https://github.com/solo-io/wasm/blob/master/spec/README.md ■ https://istio.io/latest/blog/2020/wasmhub-istio/ ● Wasm filter被推送到ACR EE注册库中 12 阿里云服务网格ASM架构 13 在阿里云服务网格ASM中使用WASM ● 进行统一的代理扩展插件的生命周期管理

Buyers worldwide 19M Number of Sellers worldwide 1.7B Number of Live Listings $26.6B GMV in Q4 2020 #IstioCon eBay Applications eBay is powered by ● More than 5,000 Microservices ranging from