Delivery Done Right with Service Mesh

on YouTube ↗30m

" summary

Shipt replaces per-cluster hairpin DNS with a single global hostname per service and stitches 60+ clusters and ~400 services into a multi-cluster mesh using Istio + Envoy and Solo’s Glue to get multi-cluster mTLS and automatic failover. The platform runs ~3K RPS, deploys via GitOps (Helm, Concourse), and centralizes a regional ingress gateway with WAF/OIDC and Vault-backed PKI so cross-cluster identity and retries short‑circuit extra hops for lower latency and stronger policy enforcement.

AI-written summary · about

" chapters (16)

1. 0:00Intro
2. 1:39Technology at Shipt
3. 2:15Grass Roots Service Mesh
4. 3:42Scaling Service Mesh Expertise
5. 5:50Start Early
6. 6:44Why Service Mesh?
7. 8:09Choosing Service Mesh
8. 8:44Existing Architecture
9. 11:08Mesh Architecture
10. 11:47Mesh Integrated Gateway
11. 12:58Tiered Gateway
12. 14:31Shipt Routing pre Service Mesh
13. 15:24Multi Cluster DNS
14. 16:33Multi Cluster No Mesh
15. 19:42Proxy DNS
16. 24:41Conclusion

" related talks

• 24mMulticluster Service MeshAdam Sayah · ServiceMeshCon Europe 2021
• 01h 03mJust what is a "service mesh", and if I get one will it make everything OK?Elton Stoneman · NDC London 2019
• 43mService Mesh and the future of networkingIgnasi Barrera · Software Crafters Barcelona 2019
• 45mIstio Service Mesh Simplified Beyond a Single ClusterLin Sun, Sven Mawson · ServiceMeshCon North America 2020
• 11mWelcome & Opening RemarksChristian Posta · ServiceMeshCon Europe 2020
• 34mService Mesh for DevelopersAbdellfetah Sghiouar · DevDays Europe 2022
• 58mUsing Service Meshes and Kubernetes to Solve Service-to-Service Communications...Ben Hall · NDC Porto 2019
• 43mWTF Do We Need a Service Mesh?Anton Weiss · Cloud Native & OSS Day Tel Aviv 2019