David@adalogics.com Istio maintainers involved in the audit Name Title Email Anand Jayaraman Engineering Leader ajayaram@google.com Andrea Ma So�ware Engineer ayma@us.ibm.com Craig Box VP of Open Source jdpettit@google.com Lei Tang Technical Lead leitang@google.com Neelima Balakrishnan So�ware Engineering Manager neelimabk@google.com Shankar Ganesan So�ware Engineer shankgan@google.com OSTIF 4

of access required, availability of exploitation information, requirements relating to social engineering, race conditions, brute forcing, etc, and other impediments to exploitation. High Attackers can moderate hurdles in order to exploit the finding. Low Exploitation requires implausible social engineering, a difficult race condition, guessing difficult-to- guess data, or is otherwise unlikely. 38 |

South America 1.5% from Oceania Participant demographics 20.4% of attendees were CxO / Engineering manager / Tech Lead 43.8% of attendees were either evaluating Istio for production use,

partners Where did people join from? Participant demographics 28% of attendees were CxO / Engineering manager / Tech Lead 57% of attendees were either evaluating Istio for production use,

CONFIDENTIAL 3 API-driven applications exploding Service Testing Component Testing E2E API Tests Engineering effort grows superlinearly as #APIs grow Customer services Order services Catalog Customer

Yes #IstioCon QUIC & HTTP/3 Support in Istio ● Should take Gateway as the 1st step ○ Less engineering effort ○ Particularly valuable for some VM user scenarios ● Limitations ○ Envoy QUIC support