of access required, availability of exploitation information, requirements relating to social engineering, race conditions, brute forcing, etc, and other impediments to exploitation. High Attackers can moderate hurdles in order to exploit the finding. Low Exploitation requires implausible social engineering, a difficult race condition, guessing difficult-to- guess data, or is otherwise unlikely. 38 | identification of users. Configuration Related to security configurations of servers, devices, or software. Cryptography Related to mathematical protections for data. Data Exposure Related to unintended

Stateful applications ○ Data store ● Legacy software ○ Financial services ○ Enterprise/Workshop applications ○ Hard to lift and shift ● Packaged software ○ Non-Linux ○ unikernels ● Domain specific support ○ Multi-Gbps bandwidth ○ Ultra low latency #IstioCon Performance Limitations: Solutions ● Software techniques ○ (eBPF-based) TCP/IP stack bypass ○ HTTP/3 & QUIC ● Hardware acceleration technologies Yes #IstioCon QUIC & HTTP/3 Support in Istio ● Should take Gateway as the 1st step ○ Less engineering effort ○ Particularly valuable for some VM user scenarios ● Limitations ○ Envoy QUIC support

partners Where did people join from? Participant demographics 28% of attendees were CxO / Engineering manager / Tech Lead 57% of attendees were either evaluating Istio for production use, through the various istiocon sessions, really informative!" "This is the best conference software i've used, and i've been to so many virtual conferences in the past two years. Super simple (Google) Member Rose Sawvel (Solo.io) Member Alex Bush (Google) The team (3/3) Event Production (Software Guru) Event manager Mara Ruvalcaba Content coordination Pedro Galván Streaming and website Alberto

South America 1.5% from Oceania Participant demographics 20.4% of attendees were CxO / Engineering manager / Tech Lead 43.8% of attendees were either evaluating Istio for production use, (Intel) Member Jimmy Song (Tetrate) Member Zhonghu Xu (Huawei) The team (3/3) Event Production (Software Guru) Event Manager Mara Ruvalcaba Content Coordination Pedro Galván Streaming and website Alberto

David@adalogics.com Istio maintainers involved in the audit Name Title Email Anand Jayaraman Engineering Leader ajayaram@google.com Andrea Ma So�ware Engineer ayma@us.ibm.com Craig Box VP of Open Source jdpettit@google.com Lei Tang Technical Lead leitang@google.com Neelima Balakrishnan So�ware Engineering Manager neelimabk@google.com Shankar Ganesan So�ware Engineer shankgan@google.com OSTIF 4

CONFIDENTIAL 3 API-driven applications exploding Service Testing Component Testing E2E API Tests Engineering effort grows superlinearly as #APIs grow Customer services Order services Catalog Customer

scale consumer e-commerce Infrastructure to Mesh Rajath Ramesh Principal Software Engineer @Carousell Harshad Rotithor Software Architect @Carousell #IstioCon About Carousell ● C2C Marketplace in SEA

Istio Release Brian Avery / twitter: @briansvgs / Red Hat Senior Software Engineer Eric Van Norman / twitter: @kf0s / IBM Senior Software Engineer #IstioCon First a Quick Note This talk focuses on producing

Access Point specs ● Standardization provides flexibility to switch backend implementations to software Region R1 AZ 1 AZ 2 AZ n Data Center DC1 K8s Cluster K8s Cluster K8s Cluster K8s Sync to clusters in AZ K8s Cluster K8s Cluster #IstioCon Step 2: Replace Hardware LBs with Software K8s API Server NLB Controllers Istiod Network Load Balancer (NLB) Network Load Balancer

zhanggbj@cn.ibm.com, twitter.com/gracezhang1110, www.linkedin.com/in/gong-zhang-75560670/ Advisory Software Engineer of IBM Cloud Code Engine team focusing on Knative Serving and Istio, contributor of the Zhuang, yuzcdl@cn.ibm.com, https://www.linkedin.com/in/yu-zhuang- 51915287/ Architect and Senior Software Engineer in IBM Cloud. Working on IBM Cloud Code Engine (Serverless platform), focusing on Knative