Overview and State of Linkerd
Talkat KubeCon + CloudNativeCon North America 2021 · on Wednesday, 2021-10-13· at 14:30· Concourse Hall 153 ABC + Online·
summary
Linkerd is an ultra‑light Kubernetes service mesh with a Rust data‑plane proxy (linkerd2‑proxy) built on tokio/hyper/h2/tower, claiming much lower latency and CPU/memory than Istio in Kinvolve benchmarks. Release 2.11 adds authorization policies via new CRDs Server and ServerAuthorization, defaults to mutual TLS with certificates rotated roughly once per day, supports SMI adapters and multi‑cluster service mirroring, and targets smaller resource overhead by avoiding Envoy.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:52About Linkerd
- 2:45Why use Linkerd
- 4:20Principles
- 6:27Service Mesh
- 8:10TLS
- 12:35Proxy
- 15:47Istio
- 16:40Benchmarks
- 18:02Authorization Policies
- 19:59Example
- 26:16Community
related talks
36mOverview and State of Linkerd
35mIntro: Linkerd
35mDeep Dive: Linkerd
32mLinkerd and the Service Mesh
30mLinkerd Update: Gateway API, Client-Specific Policy, Federated Services, Multicluster, Rust, & More!
06mKeynote: Linkerd Project Update
24mWhat We Learned From the Gateway API: Designing Linkerd’s New Policy CRD
52mService Mess to Service Mesh