From Brownfield to Greenfield: Istio Service Mesh Journey at Freddie Mac
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 11:50· Hall D - San Diego Convention Center·
summary
Freddie Mac migrates a hybrid estate of VMs and Kubernetes with Istio/Envoy to get uniform mTLS, telemetry and policy without refactoring every app. POCs add a sidecar per VM, use ServiceEntry/egress and OPA hooks, remove hardware load balancers, and enable direct pod↔VM east‑west traffic plus canary deployments. A management/control plane reconciles ServiceNow/VM/ LB registries; certificate integration with internal CAs remains the main unresolved hurdle.
AI-written summary · about
chapters (18)
- 0:00Intro
- 2:20Freddie Mac
- 6:28IT Environment
- 6:54Challenges
- 8:04Infrastructure
- 12:17New Design Patterns
- 16:43Concrete Challenges
- 21:38Availability
- 23:42Load Balancing
- 25:02Scaling
- 26:33Brownfield
- 26:43Brownfield Mesh
- 28:17Network Connectivity
- 31:54Application Example
- 32:46Application Transformation
- 33:29Software Defined Infrastructure
- 34:27Technical Challenges
- 39:33Community Support
related talks
38mIstio as an enabler for migrating Monolithic apps to Microservices
28mService Mesh: Demystifying Istio
58mService Mesh and Sidecars with Istio and Envoy
39mThe Future of Service Mesh
21mIteratively Implementing Istio: Zero to Service Mesh with No Downtime
33mPlatform Engineering meets Service Mesh: an SRE love story
01h 01mIstio Service Mesh & pragmatic microservices architecture
52mEmpower Your Microservices with Istio Service Mesh