mTLS with ztunnel in Istio Ambient Mesh | ztunnel | Istio | Demo | IMESH
See mTLS in action for traffic between ztunnels in Istio ambient mesh and learn how to apply L4 authorization policies.
Ztunnel is a rust-based proxy that runs as a daemon on each node in the Istio ambient mesh. It takes care of encrypting traffic using mTLS and performs L4 authentication.
In the video, you’ll see a few deployments in two namespaces spread over two different nodes. The traffic between the two nodes will be in plain text at first, without encryption.
We’ll install Istio and label the namespaces to make them a part of the ambient mesh. Each node will then have a ztunnel pod running in them, with the traffic between the namespaces encrypted using mTLS, which will be evident by doing a tcpdump.
Finally, you’ll see how to apply AuthorizationPolicy resources to each namespace for L4 authorization.
▬▬▬▬▬ Timestamp ▬▬▬▬▬▬
00:00 introduction
00:15 Cluster and application setup
02:35 tcpdump traffic for nodes
03:45 deploying application in cluster
04:10 communication between applications and nodes
05:05 installing istio with ambient
07:10 adding applications to ambient mesh
07:46 check mTLS and ztunnel logs
09:30 L4 authorization policies
14:20 outro
Access the code used for the video here- https://github.com/imesh-ai/webinar/t...
▬▬▬▬▬ Additional resources ▬▬▬▬▬▬
➡️ Istio ambient mesh on EKS: • Implementing Istio Ambient Mesh on AWS EKS...
➡️ Istio ambient mesh vs Istio sidecar: https://imesh.ai/blog/istio-ambient-m...
➡️ Learn Istio service mesh from scratch in 3 hrs: https://www.udemy.com/course/istio-se...
➡️ Need help with Istio in prod? Explore managed Istio: https://imesh.ai/managed-istio.html
▬▬▬▬▬ About IMESH ▬▬▬▬▬▬
IMESH offers a Kubernetes-native application network and security platform to manage multi-cloud and hybrid-cloud environments. The IMESH platform is built on top of Istio service mesh and Envoy API gateway and helps cloud, platform, and security teams to make Kubernetes applications more secure, manageable, and reliable.
▬▬▬▬▬ Connect ▬▬▬▬▬▬
Website: https://imesh.ai/
GitHub: https://github.com/imesh-ai
LinkedIn: / imeshai
▬▬▬▬▬▬ Thanks ▬▬▬▬▬▬
#istio #ambientmesh #ztunnel #servicemesh