Running Databases in Istio's Service Mesh
Talkat Istio Day North America 2025 · on Monday, 2025-11-10· at 16:00· Building B | Level 4 | B406b-407·
summary
GEICO builds a Kubernetes database platform that runs Apache Cassandra and Postgresql over a multi‑cluster Istio mesh using sidecar data plane, Spire for trust, Kafka for cross‑cluster service discovery, psyllium CNI and BGP to expose routable pod IPs and avoid NAT. They achieve mTLS between clients, servers and replica gossip, but operators need pod‑IP access and webhook cert fixes, Cassandra sidecars require more CPU because replication is extremely chatty, and v2 is validated at scale but not yet in production.
AI-written summary · about
chapters (11)
- 0:00Istio and databases intro
- 1:02Legacy DB platform challenges
- 3:48Platform v2 goals
- 7:00Multi-cloud network strategy
- 9:48Why service mesh for DBs
- 11:11Service mesh architecture
- 13:17Data and control plane design
- 18:21DBs in mesh challenges
- 20:49Production status and plans
- 23:57Envoy/Istio wishlist
- 26:25Closing and hiring
related talks
32mDistributed Database DevOps Dilemmas? Kubernetes to the Rescue
26mTaking Your Database Beyond the Border of a Single Kubernetes Cluster
34mIstio 101: Open Source Service Mesh for Microservices
45mIstio Service Mesh Simplified Beyond a Single Cluster
33mDistributed Database DevOps Dilemmas? Kubernetes to the rescue!
38mA Tale of a Meshi Kafka: Securing Kafka Deployment When Istio Is Used
40mIstio, your K8S cluster best friend
01h 01mIstio Service Mesh & pragmatic microservices architecture