Production-Ready gRPC: How Service Meshes Simplify Security, Routing, and Observability

on YouTube ↗21m

" summary

Shows a working setup on DigitalOcean Kubernetes using Istio mTLS handled by sidecars to offload encryption and certificate rotation, with Prometheus/Grafana scraping sidecar metrics for tracing and latency. Configured destinationRule and VirtualService subsets route traffic with 50/50 to 100% canary switch without pod restart, plus retries and fault injection policies that produce observable 503 patterns. Namespace-level PeerAuthentication enforces strict MTLS so non-injected clients fail, and demo artifacts and example configs are available for reproduction.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 0:22gRPC production readiness
3. 3:38Service meshes for gRPC
4. 9:41Demo setup and canary
5. 13:35Traffic routing with virtual services
6. 14:58Securing services with mTLS
7. 16:41Observability with Prometheus
8. 18:26Fault injection and retries
9. 18:47Q&A

" related talks

• 47mDeploying Service Mesh in ProductionChristian Posta · Craft Conference 2021
• 58mUsing Service Meshes and Kubernetes to Solve Service-to-Service Communications...Ben Hall · NDC Porto 2019
• 34mService Mess to Service MeshRob Richardson · Conf42 Kube Native 2023
• 26mAn Introduction to Service Mesh in ActionJason Dudash · Conf42 Cloud Native 2022
• 30mIntroduction to Service Mesh for DevOpsGiacomo Tonucci · IDI Incontro DevOps Italia 2020
• 53mDo you need a Service Mesh?Matt Turner · Full Stack Fest 2018
• 52mEmpower Your Microservices with Istio Service MeshHossam Barakat · NDC Oslo 2019
• 01h 03mJust what is a "service mesh", and if I get one will it make everything OK?Elton Stoneman · NDC London 2019