A Guided Tour of ISTIO Ambient Mesh
summary
Claims a sidecar-less data plane that uses a ztunnel per-node zero‑trust tunnel plus optional Waypoint proxies for layer‑7, demonstrated on Istio 1.18 alpha installed into a four‑node kind cluster. Live demo shows no application restarts needed, immediate layer‑4 metrics and mTLS, enforcement of zero‑trust authorization rules, layer‑7 policies (GET only) and resilience injection, and a traffic‑shift of 90/10 traffic split ~8% observed to canary. Sidecar mode interoperates with ambient in the demo and the components run and log as expected.
AI-written summary · about
chapters (8)
- 0:00Introduction to service mesh
- 2:40The evolution of Istio
- 6:29Ambient architecture
- 12:04Data plane flow details
- 15:58Environment setup and demo
- 25:50Applying ambient policies
- 33:20Advanced L7 traffic control
- 41:50Interoperability and closing
related talks
01h 27mGetting Started with Istio Ambient Mesh
48mIstio Ambient Mesh deep dive
42mThe Current and Future State of Istio
37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars
40mIstio Today and Tomorrow: Sidecars and Beyond
39mThe Future of Service Mesh
30mEmbracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars
35mIstio: The Past, Present and Future of the Project and Communi...