Service Mesh In Action With Kuma: Security, Routing, and Observability
summary
Kuma is an Envoy‑based CNCF Sandbox service mesh that claims fast enterprise adoption (≈600% more cumulative deployments, 4,000% more data planes, 500% more virtual meshes) and first‑class support for Kubernetes and virtual machines. It implements mutual TLS via a built‑in CA with rotation, SPIFFE certificates, attribute‑based policies, L4 blue/green and canary routing, Prometheus metrics and health checks, and a multi‑zone control plane (global + remote) model. Demo shows install via the kuma CLI, data planes registering, TLS blocking then restored by a traffic‑permission policy.
AI-written summary · about
chapters (6)
- 0:00Introduction to Kuma
- 2:20Service mesh fundamentals
- 4:52Kuma key features
- 5:50Multi-zone architecture
- 7:18Policies and integrations
- 8:49Installation and demo
related talks
29mZero Trust Security with Service Mesh
25mHow to Achieve Zero-Trust Security With Kuma Service Mesh
24mHow MS3 Supports 10,000+ Transactions Per Second with Kuma Service Mesh Across VMs a...
53mDo you need a Service Mesh?
45mMulti-Runtime Service Mesh With Consul
39mDo you need a Service Mesh?
31mEffective building blocks for securing...
40mReimagining Application Networking and Security