Istio Ambient Mesh deep dive
summary
Istio Ambient Mesh removes the requirement for sidecar proxies by introducing two components: ztunnel, a node-level proxy handling mTLS and L4 traffic, and waypoint, a service-account-level proxy providing L7 features. The talk explains how this mode works and demos mixing ambient mode with traditional sidecars, achieving global observability without changing applications, and seamlessly onboarding new services into the mesh.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 8:05Sidecar problems
- 12:15Ambient Mesh principles
- 18:20Installing Istio demo
- 22:16Services without sidecars
- 24:44L4 security permissions
- 27:13L7 features Waypoint
- 31:08Traffic shifting use cases
- 34:26Sidecar and Ambient Mesh interop
- 37:16Q&A
related talks
39mThe Future of Service Mesh
11mIstio Ambient Mesh: Sidecar vs Sidecar-less, Explained Simply
30mFrom Sidecar to Ambient: Understanding the Evolution of the Service Mesh with Istio
44mA Guided Tour of ISTIO Ambient Mesh
42mThe Current and Future State of Istio
23mIntroduction to Ambient Mesh
01h 27mGetting Started with Istio Ambient Mesh
40mIstio Today and Tomorrow: Sidecars and Beyond