Let Them Eat CAKES: A Sweet Dive Into a Modern Cloud Networking Stack
Talkat ContainerCon @ Open Source Summit Europe 2024 · on Tuesday, 2024-09-17· at 14:00· Room 0.14 (Level 0)·
summary
Stacks a working, opinionated recipe: CAKES stack = Cilium (CNI with eBPF), Ambient mesh (sidecar‑less Istio), Kubernetes, Envoy and SPIFFE/SPIRE for crypto identity; BAKES adds Backstage. Ambient mode uses a Ztunnel daemonset and Hbone overlay to provide mTLS without restarting apps and reduces sidecar cost at large scale; waypoint proxies (Envoy or Glue Gateway) handle L7. Cilium excels at L3/L4 and observability but uses label‑based identity (not pure SPIFFE) so trade‑offs exist. Labs and open source workshops prove the components integrate and run.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 1:47What is Solo.io
- 3:12Why platform engineering matters
- 9:12Cloud migrations challenges
- 12:47Platform engineering solution
- 14:56Introducing CAKES stack
- 16:42Kubernetes foundation
- 19:05Cilium CNI layer
- 23:20SPIFFE/SPIRE identity
- 25:04Istio Ambient Mode
- 30:23Layer four in Istio
- 32:49Layer seven with Waypoints
- 34:34Envoy proxy
- 37:04Glue Gateway API
- 41:59Unifying app networking
- 43:21Summary
- 45:00Q&A
related talks
45mLet Them Eat CAKES: A Sweet Dive Into a Modern Cloud Networking Stack
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
04mIntro
43mService MESH without the MESS
20mCAPI vs. ClusterStacks: The Better is the Enemy of the Good
05mLightning Talk: Unveiling 5 Essential Insights from Cilium Implementation in a...
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
07mThe Cilium Vision