Single Mesh vs Multi Mesh- Tradeoffs for Enterprise Multi-Tenant Support- Ding Shaojun (Iris Ding) & Zhang Huailong (Steve Zhang), Intel

on YouTube ↗27m

" summary

Compares concrete designs and demos for multi-tenant service mesh showing a patched multi-mesh-in-single-cluster that relies on istio discovery selectors, a single-mesh with sidecar CR and exportTo for service/config isolation plus authorization policy to deny-then-allow cross-namespace traffic, and a certificate flow using a cert-manager style signer watching CSRs that lets tenants have per-tenant signing roots. Shows demo with namespaces bar and foo running httpbin and sleep, verifies intra- and inter-namespace connectivity and outlines using Intel SGX enclaves to protect tenant private keys.

AI-written summary · about

" chapters (15)

1. 0:00Introduction
2. 0:28Agenda
3. 1:10Background
4. 2:16Challenges
5. 3:39Service Mesh
6. 4:46Service Discovery Selector
7. 5:26Patched Solution
8. 6:38Discovery Isolation
9. 7:47Config Isolation
10. 8:00Authorization Policy
11. 10:25Identity Isolation
12. 12:01MultiTenant in Single Mesh
13. 16:00MultiTenant in Service Mesh
14. 20:01Demo
15. 25:53Summary

" related talks

• 21mService-Mesh for Enterprise Multi-Tenant KubernetesSudeepto Roy, Venkatesh Kinthali · Kubernetes Forum Bengaluru 2020
• 45mIstio Service Mesh Simplified Beyond a Single ClusterLin Sun, Sven Mawson · ServiceMeshCon North America 2020
• 31mMulti(Control Plane/Network/Mesh)??: A Practical MultiCluster...Nicholas Nellis, Vikas Choudhary · ServiceMeshCon North America 2020
• 11mWelcome & Opening RemarksChristian Posta · ServiceMeshCon Europe 2020
• 24mMulticluster Service MeshAdam Sayah · ServiceMeshCon Europe 2021
• 40mReimagining Application Networking and SecurityTim Szigeti · Conf42 Cloud Native 2022
• 01h 03mJust what is a "service mesh", and if I get one will it make everything OK?Elton Stoneman · NDC London 2019
• 20mThe Crazy Service Mesh EcosystemLin Sun · All Things Open 2019