Sharpen That Edge! How a Service Mesh Enhances EdgeComputeOps
Talkat Kubernetes on Edge Day Europe 2023 · on Tuesday, 2023-04-18· at 14:15· Hall 7, Room B | Ground Floor | Europe Complex
summary
Ambient Mesh replaces per-workload sidecars with a lightweight Rust L4 Z-tunnel (L4 proxy) plus optional Envoy-based Waypoint (L7 proxy), delivering mTLS and layer‑7 policy with a footprint "on the order of megabytes" instead of full Envoy per pod. Multi-cluster uses HBONE double‑tunnel (two TLS identities) via East‑West Gateway; a live demo shows cross-cluster requests succeed after fixing identity SE/WorkloadEntry misconfigurations. Glue Platform provides GitOps automation to push Istio Ambient configs to thousands of edge sites.
AI-written summary · about
chapters (13)
- 0:00Edge ComputeOps with service mesh
- 1:06Networking for Edge Computing
- 3:58Edge workload deployment challenges
- 5:00KubeEdge and Edge mesh limitations
- 6:25Complete network stack with service mesh
- 7:06Service mesh benefits
- 8:30Ambient mesh sidecar-less approach
- 10:17Multi-cluster ambient mesh for Edge
- 13:51Double encapsulation in multi-cluster
- 16:38Managing service mesh with GitOps
- 18:04Live ambient mesh demo
- 24:23GitOps for Edge deployments
- 24:44Edge use cases and next steps