HP set up secure and wise platform with Istio John Zheng/ john.zheng@hp.com #IstioCon Agenda ➢ HP Horizon platform design with Istio ➢ Secure Platform ➢ Wise Platform ➢ Excellent Observability Observability ➢ Q & A #IstioCon HP Horizon Platform design with Istio #IstioCon HP Horizon Platform HP has lots of projects, deployed on cloud. They have common features, also have project specified feature feature. We provide a common platform includes all common features, connect all projects with istio. #IstioCon Common services are in core cluster Projects shared solution cluster • Different namespace

Using Istio to Build the Next 5G Platform David Lenrow Open Source Service Mesh Evangelist Neeraj Poddar Co-founder & Chief Architect, Aspen Mesh February 22, 2021 2 ©2021 Aspen Mesh. All rights reserved rchitecture-sba-47900b0ded0a 5G Architecture 4 ©2021 Aspen Mesh. All rights reserved. Key Platform Requirements Multi-Vendor Real-Time (RAN) Workload Mobility Networking outside CNF Encryption

#IstioCon Performance tuning and best practices in a Knative based, large-scale serverless platform with Istio 张龚, Gong Zhang, IBM China Development Lab 庄宇, Yu Zhuang, IBM China Development Lab #IstioCon Architect and Senior Software Engineer in IBM Cloud. Working on IBM Cloud Code Engine (Serverless platform), focusing on Knative, Istio, and Tekton, community, leading team to develop and offer serverless Kubernetes in IBM Cloud. #IstioCon ● Knative and Istio ● How Istio is leveraged in a Knative based platform ● Performance bottleneck analysis and tuning ○ Istio scalability optimization during Knative Service

with strong requirements ● For Istio ○ What is Istio? A service mesh. But more: an open service platform! ○ More use cases! ○ (Consul, Kuma…) #IstioCon Emerging Use Cases #IstioCon Legacy Scenarios process ○ Automate provisioning a VM's mesh identity (certificate) ■ based on a platform-specific identity ■ w/o a platform-specific identity ● using a short-lived K8s service account token ● Automatic Limitations: Solutions ● Software techniques ○ (eBPF-based) TCP/IP stack bypass ○ HTTP/3 & QUIC ● Hardware acceleration technologies ○ SRIOV/DPDK ○ Networking/Security offloading ● Hybrid solutions using

RabbitMQ, etc. ○ Programming Languages - Java, Python, Go lang, Scala, etc. ● Running on variety of Hardware ○ General-purpose x86 servers ○ GPUs #IstioCon Application Deployment: Cloud Layout ● Region: Global Control Plane Region Rn Delegate #IstioCon Load balancing & Traffic Flow ● Two tiers of hardware Load-Balancers (LB) ● Application-Tier LB ○ K8s service realized on Application-Tier LBs ● Web-Tier LB to control - ○ Percentage of traffic sent to an AZ, region, etc. ○ L7 routing ○ Hardware Firewalls (not shown) in front of Application-Tier LBs ● Client connects to closest Web-Tier

Expectations ● Reliability ● Maintainability ● Usability #IstioCon Platform One #IstioCon Big Bang https://repo1.dso.mil/platform-one/big-bang/bigbang https://p1.dso.mil/#/products/big-bang #IstioCon Toy @adam_toy1 github.com/atoy3731 https://p1.dso.mil/#/products/big-bang https://repo1.dso.mil/platform-one/big-bang/bigbang https://github.com/atoy3731/istiocon-demo (WIP)

popular sessions in English Session Welcome Keynote Using Istio to build the next generation 5G platform I want to sketch a mesh for you Istio service mesh at enterprise scale Improving security within Istio Performance tuning and best practices in a Knative based, large-scale serverless platform with Istio Company presenting Intel and Tetrate Tetrate, HP and others Intel Huawei Huawei the speakers and presentations, to the hosts, community, activities, gifts, online gathering platform, and even the amazing artists for the caricatures! Great job!” Social hour fun! Impact for the

25 Service Mesh Meetup #3 深圳站 Agenda • Istio & Kubernetes • Istio & Kubernetes上的灰度发布 An open platform to connect, manage, and secure microservices. Istio项目 微服务角度看Istio: 治理形态的演变 Node 1 svc1 自身业务 即可使用Istio服务治 理功能 Istio在华为云： 灰度发布流程 Y N Y N Istio在华为云： 灰度发布 Istio & Kubernetes 在Google Cloud Services Platform: bringing the best of the cloud to you Copyright©2018 Huawei Technologies Co., Ltd. All Rights API Management complements Istio with the robust features of Google Cloud's Apigee API management platform, Apigee Edge, by extending API management natively into the microservices stack Istio & Kubernetes

samples/bookinfo/platform/kube/b ookinfo.yaml and samples/bookinfo/networking/bookinfo-gateway.yaml configu- rations 4. Using the restricted user, kubectl -n restrict-test apply -f samples/bookinfo/ platform/kube/bookinfo "darwin": err = exec.Command("open", url).Start() default: fmt.Fprintf(writer, "Unsupported platform %q; open %s in your browser.\n", runtime.GOOS, url) } if err != nil { fmt.Fprintf(writer, "Failed 20https://kubernetes.io/docs/tasks/tools/install-minikube/ 21https://istio.io/latest/docs/setup/platform-setup/minikube/ 22https://istio.io/latest/docs/setup/install/standalone-operator/ 23https://istio

2.7 mn corporates The leader in digital services and sales New IT Platform Reliability 99.99% 0 loses, 0 downtime AI Platform launched and gives significant additional revenues and cost savings