Next 5G Platform David Lenrow Open Source Service Mesh Evangelist Neeraj Poddar Co-founder & Chief Architect, Aspen Mesh February 22, 2021 2 ©2021 Aspen Mesh. All rights reserved. What Is 5G and and Why Does It Matter? 5G wireless technology is meant to deliver higher multi-Gbps peak data speeds, ultra low latency, more reliability, massive network capacity, increased availability, and a more -Qualcomm 3 ©2021 Aspen Mesh. All rights reserved. https://medium.com/5g-nr/5g-service-based-architecture-sba-47900b0ded0a 5G Architecture 4 ©2021 Aspen Mesh. All rights reserved. Key Platform

#IstioCon 5 tips for your first Istio.io Contribution Albert Sun | @albertsun0 #IstioCon About Me I’m a high schooler who loves learning about everything related to computers, especially interface

the fixes for the issues found in an audit from 2020. 4. Review and improve Istio's fuzzing suite. 5. Perform a SLSA review of Istio. The audit was started with a kickoff meeting, and following that, found in Golang 1 vulnerability found that affected Googles managed Istio offering 11 issues found ● 5 system resource exhaustion ● 1 arbitrary file write ● 1 missing file close ● 1 certificate skipping Status meeting #3 October 17 2022 Status meeting #4 December 15 2022 All issues have been fixed 5 Istio Security Audit, 2023 Audit scope The following assets were in scope of the audit. Istio main

com/istio/istio – 7353c84b560fd469123611476314e4aee553611d • github.com/istio/proxy – c51fe751a17441b5ab3f5487c37e129e44eec823 • github.com/istio/istio.io – 26dacdde40968a37ba9eaa864d40e45051ec5448 Key istio/proxy Istio Envoy Proxy code in the master branch up to July 15th, 2020. Commit: c51fe751a17441b5ab3f5487c37e129e44eec823 istio/istio.io Istio documentation and security guidelines from the master Critical issues 0 High issues 4 Medium issues 5 Low issues 7 Informational issues 2 Total issues 18 Category Breakdown Access Controls 7 Configuration 5 Cryptography 1 Data Exposure 3 Data Validation

reserved. Page 3 目录 1. Envoy启动及配置文件 2. Envoy流量拦截原理、常用部署方式 3. Envoy可扩展过滤器架构、可观测性 4. Envoy线程模型 5. 生产环境问题分析及解决方法 6. 针对Envoy做的一些优化及效果 7. 常用性能分析测试工具及使用方法 8. 华为ASM产品介绍 Copyright © Huawei Technologies 的TOP 10开源 项目之一。目前最新为1.10版本。 Copyright © Huawei Technologies Co., Ltd. All rights reserved. Page 5 Envoy介绍 • Envoy采用C++实现，本身为四层及七层代理，可以根据用户应用请求内的数据进行高级服务治理 能力，包括服务发现、路由、高级负载均衡、动态配置、链路安全及证书更新、目标健康检查、 SO_ORIG INAL_DS T 路 由 上 游 连 接 池 12.localhost app2 15.lo 1 2 3.非本 POD、 非 Envoy 自身 4.DNAT 5 6 7. UID=1337 8 9 10.跳 过普 通端 口 11.DNAT 1 3 14.lo 网络发送 • outbound方向：本POD内发起对外调用流量 • outbound方向增加ISTIO_OUTPUT、

environment that uses the payments Mercari holds in escrow, and simple and affordable shipping options. 5 6 ● 200+ microservices (200+ namespaces) ● 100K RPS at peak on API Gateway ● 1 main production Google preStop hooks. ➔ If the pod is terminated too early, connection draining may not complete, leading to 5xx errors Example: for sleep 30 + sleep 45 in the application container, we set terminationGracePeriodSeconds load-balancing capabilities out-of-the-box ● We tried it as-is, with existing gRPC services ● Result: Weird 5XXs on upstream service pod rollout ● No matter how well our services handled graceful termination,

#IstioCon Key metrics 3,994 Registered 92 Countries 883 Viewers on Bilibili (China) 4.5/5 Satisfaction score 2,467 Unique live viewers 219 Unique recording viewers #IstioCon New presenting Tetrate Red Hat Google Soloio Participants 73 53 46 40 Satisfaction score 4.44/5 4.28/5 4.65/5 4.58/5 Making Istio accessible 12 Sessions presented in Chinese, transmitted also on Bilibili

Cruz and Aizhamal Nurmamat kyzy #IstioCon Key metrics 4,021 Registrants 84 Countries 4.4/5 Satisfaction score 2,836 Unique livestream viewers 1,517 Unique recording viewers 25+ End people join from? 0.5% from Africa 43.5% from North America 26.5% from Europe 23% from Asia 5% from South America 1.5% from Oceania Participant demographics 20.4% of attendees were CxO / popular sessions in English Session Welcome Keynote Using Istio to build the next generation 5G platform I want to sketch a mesh for you Istio service mesh at enterprise scale Improving

Mesh 实现。 2018 年 5 月至今 #IstioCon ServiceMesher 大事记 • 2017 年 12 月，由数人云发起的 meetup，下一代微服务： Service Mesh is Coming • 2018 年 5 月，servicemesher.com 上线及 ServiceMesher 公众号开通 • 2018 年 5 月，ServiceMesher 发起了