#IstioCon Istio 2021 Roadmap A heartwarming work of staggering predictability Neeraj Poddar (Co-founder & Chief Architect, Aspen Mesh) Louis Ryan (Principal Engineer, Google) #IstioCon Highlights

26dacdde40968a37ba9eaa864d40e45051ec5448 Finding Breakdown Critical issues 0 High issues 4 Medium issues 5 Low issues 7 Informational issues 2 Total issues 18 Category Breakdown Access Controls 7 Configuration Configuration 5 Cryptography 1 Data Exposure 3 Data Validation 2 Component Breakdown Istio 10 Istio Sidecar 3 Istioctl 2 Pilot 3 Key Critical High Medium Low Informational 3 | Google Istio Security Assessment security choices are relevant, standards for hardening, and clear direction on which features should work with others to provide the most secure environment. The gaps in documentation include: • /docs/

Istio OSS? ● Problems unsolved ○ Multi-cluster and VM (lower onboarding cost) ○ Enterprise team structure gap (Workspace, Tenants, etc) ○ UI&UX Background ● Leads to complexity and lack of operational

of improved API tests • Istio benefits – Venky / Prasad – point here • Demo • Questions 2 Structure | CONFIDENTIAL 3 API-driven applications exploding Service Testing Component Testing E2E API

large service mesh: ● It exposes low-level Envoy configurations to operation ● It depends on the structure/name convention of the generated xDS by Pilot ● It depends on some cluster-specific information

non developers to use the API ○ Analyze existing redirections without technical skills Ease the work of our SEO Specialist #IstioCon Creating the .csv Importing the file Generating the Istio configuration (crawler, etc..) How does it work ? #IstioCon Creating the .csv Importing the file Generating the Istio configuration Deploy to production 1 3 4 2 How does it work ? #IstioCon Creating the .csv does it work ? #IstioCon Creating the .csv Importing the file Generating the Istio configuration Deploy to production 1 2 3 4 The files are reviewed, merged and deployed! How does it work ? #IstioCon

audit they were verified by the Istio maintainers and found to be acceptable use cases. Note: Much work to migrate from gogo/protobuf to golang/protobuf had already been done here: https://github.com/i Istio community a�er they had been reported by the previous auditors. Our review focuses mostly on the work that had been done a�er the final audit report had been handed over to the Istio team, which is 6th be integrated into Istio's build pipeline as a first step to start 53 Istio Security Audit, 2023 work on provenance generation. This would generate provenance that satisfies SLSA level 3 which would bring

related to computers, especially interface design. I started working on Istio last summer. Istio.io Work Automation Indicator #7734 Add IBM Cloud Kubernetes Service specific instructions for node port Contributing ○ Check out the style guides for documentation ○ Look into writing tests and how they work ○ We are here to help you with your PR! #IstioCon Thank you! @albertsun0 https://albert.doshy

and determine its destination socket ➢ Help functions: BPF_MSG_REDIRECT_HASH Istio Meetup China Work Flow of Acceleration ● sock_ops o Capture socket in specific states and populate the maps ● sk_msg Envoy(in the same node) and back (envoy to envoy) ● Works with Istio >= 1.10 ● CNI agnostic and should work with all CNIs (wo/ eBPF) ● Latency：11~17% improvement Istio Meetup China Thank you! luyao.Zhong@intel

and the sponsoring vendor sends out gifts to those participants. ● The Organizers Committee will work with sponsoring vendors interested in paying for goods or services for the conference, to find a Sponsored by Google (Example from the Royal Society of the Arts (London) “Animate” series, “Re-imagining work”) Artist for IstioCon mural ● An illustration artist that captures key concepts in a linear illustration