Istio Day Europe 2024
as the organisers put it
Istio Day Europe has officially wrapped! Thank you to all the attendees who joined us. Watch keynotes and all breakout sessions on Istio Day’s YouTube channel. Review session slides from speakers who…
who it's for
platform engineers, kubernetes engineers, site reliability engineers, security engineers, cloud architects, observability engineers, service mesh operators
topics
Istio ambient mode adoption; Istio CNI ztunnel redirection; Envoy Lua global routing; multi-cluster deployment models; OpenTelemetry with otel Java agent; Wasm WAF (Coraza) in Envoy; multi-control-plane migration; DPU acceleration for ambient workloads; Kiali support for ambient; service mesh root certificate rotation; strict mTLS and hardening practices; Istio DNS and ingress gateway setup
| title | author | length |
|---|---|---|
| Istio Day | Welcome + Opening Remarks | Iris Ding, Zack Butcher | 07m |
Quick updates and logistics: announces Istio 1.21 is released and the project hits 10 billion Docker Hub pulls, thanks contributors and maintainers and invites… | ||
| Empowering Istio Ambient with Any Kubernetes CNIs | Benjamin Leggett, Yuval Kohavi | 20m |
Istio 1.21 adds an approach that uses Istio‑CNI to give Ztunnel access to each pod’s network namespace, redirecting traffic from the pod to Ztunnel so TLS and… | ||
| Istio in Action: Global Request Routing for Seamless Data... | Arthur Busser, Baudouin Herlicq | 31m |
Pigment uses Kubernetes and Istio to route a single hostname to region-specific clusters, generating hundreds of VirtualServices from a central config and… | ||
| Lightning Talk: Unifying Hybrid Clouds: A Journey Through Multi-Control... | Alan Diego dos Santos | 06m |
Describes replacing a homegrown control plane with an Istio/Envoy-based multi-control-plane mesh that runs alongside the legacy system, with 100,000 sidecars… | ||
| Lightning Talk: Kick-Start Distributed Tracing in Istio with OpenTelemetry | Chris Detsicas | 08m |
Istio plus OpenTelemetry is used to get practical end-to-end traces: auto-instrumentation with the otel Java agent deployed via an operator covered about 80+… | ||
| Lightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and... | José Chávez | 11m |
Claims that WebAssembly plugins let a WAF run inside Envoy sidecars to enforce zero trust per-hop protection, using the Proxy-Wasm API and a WAF like Coraza… | ||
| Another Choice for Istio Multi-Cluster & Multi-Network Deployment Model | Haiwen Zhang, Yongxi Zhang | 21m |
Claims a replacement Istio multicluster model built on the open-source Cosmos all‑in‑one distributed cloud that moves global control into a master cluster… | ||
| Panel: Ask Me Anything About Istio Service Mesh | Lin Sun, John Howard, Mitch Connors, Louis Ryan | 46m |
Istio ambient hits alpha in Istio 1.18 and aims for beta in 1.22 with a focus on reducing sidecar overhead and infrastructure cost, plus ambient L7… | ||
| Lightning Talk: Kiali and Istio Ambient | Josune Cordoba | 08m |
Kiali adds alpha support for Istio Ambient: it detects an ambient label on control planes and namespaces and marks them in the GUI, shows a ztunnel (ctanel)… | ||
| Reliable multi-cluster application architectures with Istio | Ameer Abbas, John Howard | 31m |
Istio plus Kubernetes implements four concrete multi‑cluster archetypes — zonal, regional, multi‑regional, and global — with tradeoffs quantified by SLA math… | ||
| (Almost) Secure by Default - Next Steps for Hardening Istio in Production... | Niranjan Shankar | 31m |
Istio defaults to permissive mTLS so attackers or misconfigurations can bypass cluster-wide encryption; set strict mTLS and enforce it with policy tools… | ||
| A Not-so-Scary Way to Add Istio to Your Platform, Step by Step | John Keates | 28m |
Stepwise recipe that actually installs Istio on Kubernetes: add the control plane, deploy an Ingress Gateway, create a small VirtualService to glue an existing… | ||
| Cluster Optimization: Harnessing DPUs for Ambient Mesh Workloads | Shatakshi Mishra, Abed Kamaluddi | 19m |
Prototype offloads Ambient Service Mesh data plane onto an OCTEON10 DPU, moving CNI, zTunnel and Waypoint processing off servers; engineers run the model on a… | ||
| Securing a Managed Jupyter Notebook Platform Using Istio & OPA | Yao Weng, Yifan Zhang | 24m |
Managed Jupyter access uses OIDC SSO for authentication, an Istio Gateway + Envoy WASM plugin to extract user and resource headers, and an Envoy filter that… | ||
| Istio and DNS | Costin Manolache | 23m |
Istio implements a pod-level DNS interception that uses XDS (not DNS-over-TLS) and always falls back to the platform resolver; it aggregates multicluster… | ||
| Service Mesh Root Cert Rotation: No Downtime, No Problem! | Zhonghu Xu, Jianpeng He | 23m |
Claims a zero-downtime root CA rotation for Istio that avoids restarting workloads or istiod by using two feature gates: ProConfig XDS agent and allowing… | ||
| Closing Remarks | Iris Ding, Zack Butcher | 01m |
Announces a post-event reception at 7.1 downstairs and asks attendees to look for some SEO folks to chat with there, notes the exhibit hall opens tomorrow and… | ||
| nothing matches | ||