Iteratively Implementing Istio: Zero to Service Mesh with No Downtime
summary
PlanGrid moves from dozens of ELBs and manual Akamai config to two Istio gateways one public one internal and migrates ~50 services to sidecars then nearly 100, canarying changes with 1% traffic shifts; ELB limits force consolidation. Authentication becomes a central service with an Istio plugin that initially mirrors local auth then flips to enforce denies. Sidecar rollout is opt‑in then default true, a Redis SSL/env mismatch requires an IP ignore workaround, and L7 VirtualServices model APIs to replace a fragile rails proxy.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:33Architecture
- 3:13Authentication
- 10:31Observability
- 15:07Disaster Story
- 19:29Future Projects
related talks
20mHow to Optimise your Mesh with Istio Sidecar
52mEmpower Your Microservices with Istio Service Mesh
52mService Mess to Service Mesh
43mService Mesh for developers
34mService Mess to Service Mesh
52mMaking microservices micro with Istio Service Mesh & Kubernetes
01h 01mMeshing Around with Istio
35mIstio: The Past, Present and Future of the Project and Communi...