Hybrid sidecar mode with Istio Ambient Mesh | Demo | IMESH
See a demo on Istio sidecar proxy and sidecar-less Istio ambient mesh coexisting together.
Ambient mesh is a sidecar-less data plane mode implementation of Istio. It is faster and more resource-efficient than the default Istio sidecar architecture.
Istio ambient mesh will soon be in beta and safe for production rollout in 2024. It doesn’t mean DevOps and architects have to migrate all their mesh workloads to ambient mode all of a sudden. It can be a gradual process, as shown in the video.
First, start with a non-critical service in a non-prod environment. Onboard the sidecar to ambient and remove the sidecar version. Implement ztunnel for mTLS encryption and L4 metrics and authorization. Gradually introduce waypoint proxies to implement advanced L7 routing, authorization, and telemetry capabilities of Istio.
Both the sidecar and the sidecar-less version can also coexist. In the demo, you’ll see secure communication between sidecar and sidecar-less services.
▬▬▬▬▬ Timestamp ▬▬▬▬▬▬
00:00 Intro to Istio Ambient mesh architecture
05:06 Tips to adopt Istio Ambient mesh
07:14 Microservices with Istio sidecar and sidecar less ztunnel
08:51 Demo of implementing hybrid sidecar mode with Istio Ambient mesh
Access the code used for the video here: https://github.com/imesh-ai/webinar/t...
▬▬▬▬▬ Additional resources ▬▬▬▬▬▬
➡️ Istio sidecar vs sidecar-less Istio ambient mode: • Istio Sidecar vs Ambient Mesh | DevOps Tea...
➡️ Implementing Istio ambient mesh on EKS: • Implementing Istio Ambient Mesh on AWS EKS...
➡️ Canary deployment in Istio ambient mesh: • Canary Release in Istio Ambient Mesh | IMESH
➡️ mTLS with ztunnel in Istio ambient mesh: • mTLS with ztunnel in Istio Ambient Mesh | ...
➡️ Learn Istio service mesh from scratch in 3 hrs: https://www.udemy.com/course/istio-se...
➡️ Looking for Istio at scale, without any of its operational complexities? Check this out: https://imesh.ai/managed-istio.html
▬▬▬▬▬ About IMESH ▬▬▬▬▬▬
IMESH offers a Kubernetes-native application network and security platform to manage multi-cloud and hybrid-cloud environments. The IMESH platform is built on top of Istio service mesh and Envoy API gateway and helps cloud, platform, and security teams to make Kubernetes applications more secure, manageable, and reliable.
▬▬▬▬▬ Connect ▬▬▬▬▬▬
Website: https://imesh.ai/
GitHub: https://github.com/imesh-ai
LinkedIn: / imeshai
▬▬▬▬▬▬ Thanks ▬▬▬▬▬▬
#istio #ambientmesh #sidecar