Istio to the Rescue
summary
Explains concrete Istio wiring: Envoy sidecars on Kubernetes, Pilot control plane, and how virtual services plus destination rules implement 75/25 traffic splits, 10s timeouts, 3 retries with 2s backoff and circuit breaker limits (example: 100 connections). Demonstrates fault injection like a 5s delay for 10% of requests, mutual TLS for service-to-service identity and JWT-based request auth, and telemetry via metrics plus distributed traces to Zipkin/Jaeger for end-to-end observability.
AI-written summary · about
chapters (23)
- 0:00Intro
- 1:11The great transition
- 6:28Why do we do it?
- 8:04Is it all sunshine and rainbows?
- 10:07Mesh what?
- 10:43Service Mesh
- 13:52Istio Architecture
- 14:23Envoy
- 16:24Traffic Management: Virtual Service
- 18:35Traffic Management: Destination Rule
- 19:40Traffic Management: Gateway
- 20:43Traffic Management Service Entry
- 21:58Traffic Management Network Resilience
- 22:36Traffic Management: Fault Injection
- 24:46Security: Architecture
- 25:41Security: Authentication
- 26:54Security: Peer Authentication
- 27:28Security: Request Authentication
- 28:43Security: Authorization Policies
- 31:00Observability: Metrics
- 32:15Observability: Distributed traces
- 33:21Observability: Logs
- 34:38Thank you!
related talks
25mIstio for Node Developers
28mIstio in Action: Taking Kubernetes Traffic Control to the Next Level
01h 06mIstio on Kubernetes: Smart Canaries, Dark Launches and Chaos
35mReliable Application Roll Out and Operations with Istio [B]
43mService Mesh for developers
40mIstio, your K8S cluster best friend
30mEnable your Microservices with Advanced Resiliency and Fault Tolerance Leveraging Istio
25mIstio and why do we need it