ServiceMeshCon North America 2022
2022-10-25
Detroit, United States
[ServiceMeshCon North America 2020, ServiceMeshCon North America 2021, ServiceMeshCon North America 2022]
who it's for
service mesh operators, platform engineers, cloud architects, Kubernetes operators, site reliability engineers, security engineers, observability engineers
topics
Istio Ambient mesh; Envoy performance in Rust; eBPF sidecarless monitoring; multi-cluster service mesh; Kubernetes Gateway API usage; zero trust mTLS architectures; declarative certificate automation (MeshRootCertificate); CNI plugin and node-level installation; Envoy metrics and Prometheus; Linkerd control plane in Rust; blue-green control-plane upgrades; Grafana traffic topology visuals
| title | author | length |
|---|---|---|
| Welcome + Opening Remarks | Lin Sun, Nic Jackson | 10m |
Conference opens with concrete signals: project count doubled since 2019, session list highlights real case studies and new standards work. Announcements… | ||
| Keynote: The Next Big Things for Istio | Idit Levine | 14m |
Roadmap for Istio focuses on concrete changes: a split design with a fast node layer‑4 proxy plus a dedicated Waypoint/ambient layer‑7 proxy, mTLS and… | ||
| Building a Scalable, Compliant, Multi-Cloud Bank with a Service Mesh | Kasper Borg Nissen | 30m |
Lunar builds a scalable, compliant multi‑cloud bank by centralizing logs and release tooling in a platform cluster and connecting GCP, Azure, and AWS clusters… | ||
| A Packet Eye View of the Istio Ambient Mesh | Justin Pettit, Lin Sun | 40m |
Sidecarless Istio splits proxy work: a z-tunnel daemonset on each node handles L4 (mTLS tunnels, XDS and CA client) while optional waypoint proxy per namespace… | ||
| Lightning Talk: Your Wish Is Our Command: Declarative Certificate Management in a... | Jackie Elliott | 10m |
A declarative custom resource, MeshRootCertificate (MRC), centralizes certificate configuration and lets the mesh perform provider migrations and root… | ||
| Lightning Talk: Make Way for the Gateway | Christine Kim | 10m |
Kubernetes Gateway API is at Beta (July 2022) and positions itself as a superset of Ingress with a standardized, extensible model. Demonstrations use… | ||
| Delivery Done Right with Service Mesh | Brandon Barrow, Nick Nellis | 30m |
Shipt replaces per-cluster hairpin DNS with a single global hostname per service and stitches 60+ clusters and ~400 services into a multi-cluster mesh using… | ||
| Lightning Talk: Domain-Oriented Microservice Architecture with Kuma | Mike Beaumont | 11m |
Argues that grouping services as mesh per domain gives true isolation by assigning each mesh its own CA so cross-domain calls require explicit gateways… | ||
| Lightning Talk: Writing Service Mesh Control Planes in Rust | Eliza Weisman | 13m |
Linkerd ships a Rust policy controller in Rust (added in 2.11) while proxies have been Rust since 2018, and the controller runs as a separate binary talking to… | ||
| Sidecarless Mesh Monitoring with eBPF and Grafana | Adam Sayah | 35m |
Claims that eBPF hooks into the kernel to capture socket events and produce Prometheus metrics without sidecars, using Bumblebee to package, push, and run eBPF… | ||
| Building Multi-Cloud Service Meshes at Snowflake | Charles Xu | 25m |
Snowflake runs ~170 Kubernetes clusters plus millions of VMs and needs a cloud-agnostic service mesh. Built solutions include running ingress gateways as… | ||
| Stretching CNI Boundaries with Service Meshes, a Roadmap for the Future | Alex Leong | 25m |
Linkerd moves iptables setup out of init containers into a host-installed CNI plugin so pods avoid NET_ADMIN privileges, but two failure modes appear… | ||
| How Many Proxies Do You Need? | Liz Rice, Thomas Graf | 34m |
Argues that sidecarless ≠ proxyless and demonstrates a hybrid model: push L3/L4, policy and observability into the kernel with eBPF-native L3/L4, then fall… | ||
| Panel Discussion: Service Mesh Maturity: Are We There Yet? | Mitch Connors, John Howard, William Morgan, Nitya Dhanushkodi, Keith Mattix II | 41m |
Panelists compare concrete progress: Kubernetes traffic routing converges on the Gateway API (GAMMA) so Ingress and mesh routing share one model; many teams… | ||
| Closing Remarks | Viktor Gamov | 04m |
Working implementations of service-mesh features now use eBPF and other kernel-level tooling, and Kuma 2.0 ships with eBPF support slated for CNCF inclusion… | ||
| Hands-on Workshop: Envoy Metrics Demystified Workshop | Nic Jackson, Kerim Satirli | 01h 32m |
Hands-on walkthrough that uses Prometheus + Grafana and an Envoy-based mesh to turn raw stats into dashboards. Workshop boots a three‑tier demo (API → payments… | ||
| Hands-on Workshop: Zero Trust Networking in Practice with a Service M... | Jason Morgan, Ashley Davis | 01h 12m |
Hands-on setup of Linkerd with cert-manager (and trust-manager) on a Kubernetes cluster: deploy demo app, install cert-manager, create a self-signed root CA… | ||
| Hands-on Workshop: A Guided Tour of... | Christian Posta, Ram Vennam, Christine Kim, Nim Jayawardena | 50m |
Hands-on workshop shows a concrete Istio Ambient Mesh setup: an istioctl install --profile ambient deploys 4-node kind cluster with a z-tunnel per node and no… | ||
| nothing matches | ||