David@adalogics.com Istio maintainers involved in the audit Name Title Email Anand Jayaraman Engineering Leader ajayaram@google.com Andrea Ma So�ware Engineer ayma@us.ibm.com Craig Box VP of Open Source jdpettit@google.com Lei Tang Technical Lead leitang@google.com Neelima Balakrishnan So�ware Engineering Manager neelimabk@google.com Shankar Ganesan So�ware Engineer shankgan@google.com OSTIF 4 io/latest/blog/2021/ncc-security-assessment/. However, the blog post gives more of a qualitative discussion and does not give a clear overview of each issue identified in the audit. Ideally, there should

partners Where did people join from? Participant demographics 28% of attendees were CxO / Engineering manager / Tech Lead 57% of attendees were either evaluating Istio for production use, viewers 1196 926 847 754 636 #IstioCon Most popular sessions in Chinese Session China: Opening & Panel: Istio Istio Open Source Ecosystem Outlook From China The road to microservice for Database

of access required, availability of exploitation information, requirements relating to social engineering, race conditions, brute forcing, etc, and other impediments to exploitation. High Attackers can moderate hurdles in order to exploit the finding. Low Exploitation requires implausible social engineering, a difficult race condition, guessing difficult-to- guess data, or is otherwise unlikely. 38 |

South America 1.5% from Oceania Participant demographics 20.4% of attendees were CxO / Engineering manager / Tech Lead 43.8% of attendees were either evaluating Istio for production use,

CONFIDENTIAL 3 API-driven applications exploding Service Testing Component Testing E2E API Tests Engineering effort grows superlinearly as #APIs grow Customer services Order services Catalog Customer

Yes #IstioCon QUIC & HTTP/3 Support in Istio ● Should take Gateway as the 1st step ○ Less engineering effort ○ Particularly valuable for some VM user scenarios ● Limitations ○ Envoy QUIC support

Analysis scope • After you received the telemetry, either from Istio or Any other mesh data/control panel • Format the telemetry toObservability Analysis Language • A compile language • Scopes •

Istio As An API Gateway Discussion Flow ● What is an API Gateway? ● What is a Service Mesh? ● Common Features ● API Gateway + Service Mesh together! ● Istio as the API Gateway ● Advantages ●