Life of a Request in Istio Ambient Mesh
summary
Ambient replaces sidecars with a node-local ztunnel and optional Envoy waypoints; a typical call hits one or two ztunnels — the client’s collocated ztunnel and, for cross-node, the destination’s collocated ztunnel — and only hits a waypoint if layer‑7 features are used. Waypoints are deployed per namespace or service account and act as inbound-only proxies (any replica may answer via a service IP). Ingress flows through the gateway then the destination ztunnel (or waypoint then ztunnel); egress is still in design.
AI-written summary · about
related talks
23mIntroduction to Ambient Mesh
31mThe Future of Service Meshes: Sidecarless or eBPF?
20mEmpowering Istio Ambient with Any Kubernetes CNIs
43mService Mesh and the future of networking
37mReinventing Networking: A Deep Dive into Istio's Multicluster Gateways
28mIstio in Action: Taking Kubernetes Traffic Control to the Next Level
47mService mesh options with Istio, Linkerd, and/or Consul
48mProxies, Gateways, and Service Mesh. Why Are Words so Confusing?