Introduction to Waypoint Proxy | Istio Ambient Mesh | IMESH
Explore the waypoint proxy component of Istio ambient mesh and see how it differs from the default sidecar approach.
In the default Istio sidecar model, Envoy proxy is injected into pods as sidecars, which then proxy the requests between services and provide both L4 and L7 networking functionalities. With the latest sidecar-less Istio ambient mesh, L4 and L7 functionalities are split between ztunnel and waypoint proxy.
Waypoint proxy is an Envoy proxy that takes care of the L7 networking functionality in Istio ambient mesh. DevOps and architects now get the liberty to deploy waypoint proxy only for the services that require advanced L7 capabilities.
The video delves into why the Istio chose a sidecar-less ambient pattern and explores the ambient approach. You’ll see a side-by-side workload comparison between the sidecar and a namespace with a waypoint proxy. Finally, you’ll see the traffic flow from the ztunnel to the waypoint proxy and the service.
▬▬▬▬▬ Timestamp ▬▬▬▬▬▬
00:00 Introduction
00:16 Ambient Mesh components
01:11 Issues with Sidecar
03:16 Ambient Mesh approach
04:44 Workload comparision
05:44 Visualising traffic in Waypoint proxy
07:54 Workload count comparison
08:26 Outro
▬▬▬▬▬ Additional resources ▬▬▬▬▬▬
➡️ Hybrid sidecar mode with Istio ambient mesh: • mTLS with ztunnel in Istio Ambient Mesh | ...
➡️ mTLS with Ztunnel in Istio ambient mesh: • mTLS with ztunnel in Istio Ambient Mesh | ...
➡️ Getting started with Kubernetes Gateway API: • Getting Started With Kubernetes Gateway AP...
➡️ Learn Istio service mesh from scratch in 3 hrs: https://www.udemy.com/course/istio-se...
➡️ Looking for Istio at scale, without any of its operational complexities? Check this out: https://imesh.ai/managed-istio.html
▬▬▬▬▬ About IMESH ▬▬▬▬▬▬
IMESH offers a Kubernetes-native application network and security platform to manage multi-cloud and hybrid-cloud environments. The IMESH platform is built on top of Istio service mesh and Envoy API gateway and helps cloud, platform, and security teams to make Kubernetes applications more secure, manageable, and reliable.
▬▬▬▬▬ Connect ▬▬▬▬▬▬
Website: https://imesh.ai/
GitHub: https://github.com/imesh-ai
LinkedIn: / imeshai
▬▬▬▬▬▬ Thanks ▬▬▬▬▬▬
#istio #waypointproxy #ambientmesh