A New Frontier: Sidecarless Service Mesh on Windows With Istio's Amb...
summary
Claims a practical sidecarless path: a small Rust zTunnel runs per node and handles mTLS while full Envoy on Linux, zTunnel on Windows provides layer‑7 features. Implementation ports roughly four syscalls, maps Linux primitives to Windows Host Compute/Host Network and WFP filtering platform plus named pipes, and demos on AKS with two Ubuntu nodes and one Windows Server 2022 node show cross‑OS HTTP routing. Status is experimental: UDP proxying, client source IP, and some WFP limits remain to fix, eBPF work is expected to help.
AI-written summary · about
chapters (9)
- 0:00Istio on Windows intro
- 1:46Windows support in Istio 1.26
- 3:52Why Istio on Windows matters
- 7:46Ambient mesh for Windows
- 8:08Windows networking crash course
- 15:13Live demo: Istio ambient on Windows
- 19:27Windows challenges and limits
- 21:33Windows roadmap for Istio
- 24:45Q&A
related talks
40mIstio Today and Tomorrow: Sidecars and Beyond
30mEmbracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars
31mJourney at the New York Times: Is Sidecar-Less Service Mesh Disappearing Into Infrastructure?
42mThe Current and Future State of Istio
39mThe Future of Service Mesh
44mA Guided Tour of ISTIO Ambient Mesh
01h 27mGetting Started with Istio Ambient Mesh
37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars