The Current and Future State of Istio
Talkat ContainerCon @ Open Source Summit Europe 2022 · on Thursday, 2022-09-15· at 15:00· Wicklow Hall 1 (Level 2), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Istio introduces an ambient mode that removes mandatory sidecars by running a z-tunnel per node for L4 mutual TLS and optional Waypoint proxy per service account for L7 features; it uses the new h‑bone HTTP‑CONNECT tunnel to amortize TLS handshakes. Control plane still pushes XDS configs, sidecars and ambient can coexist, and existing VirtualService/Gateway APIs remain usable. Demo shows labeled namespaces flip to ambient, encrypted traffic between z‑tunnels, L7 auth and metrics via Waypoint, and injected latency working end‑to‑end.
AI-written summary · about
chapters (5)
- 0:00Start
- 5:58Challenges With Sidecars - Transparency
- 8:51Challenges With Sidecars - Incremental Adoption
- 24:41Ambient Architecture - Secure Overlay Layer
- 25:51Ambient Architecture - L7 Processing Layer
related talks
40mIstio Today and Tomorrow: Sidecars and Beyond
44mA Guided Tour of ISTIO Ambient Mesh
48mIstio Ambient Mesh deep dive
39mThe Future of Service Mesh
35mIstio: The Past, Present and Future of the Project and Communi...
30mEmbracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars
30mFrom Sidecar to Ambient: Understanding the Evolution of the Service Mesh with Istio
01h 27mGetting Started with Istio Ambient Mesh