Istio 1.18 Released, Now with Ambient Mode Available
This article introduces Istio 1.18, the latest release of the service mesh platform. It highlights the new features and improvements, such as ambient mode, which allows Istio to run on any Kubernetes cluster without requiring a dedicated control plane. It also explains how to get started with Istio 1.18 using Tetrate’s distribution and support.
Using Geneve Tunnels to Implement Istio Ambient Mesh Traffic Interception
This article introduces Geneve tunnels, a network virtualization protocol that can intercept Istio ambient mesh traffic more flexibly and securely than VXLAN. It also explains how Istio Ambient Mesh uses Geneve tunnels and the new eBPF mode in Istio 1.18.
Managing Certificates in Istio with cert-manager and SPIRE
In this blog, I will guide you on how to use an external certificate authority (CA) to achieve fine-grained certificate management and automatic certificate rotation through the integration of SPIRE and cert-manager.
How Are Certificates Managed in Istio?
This blog post will explain how Istio handles certificate management.
L7 Traffic Path in Ambient Mesh
This article describes in detail the L7 traffic path in Ambient Mesh in both diagrammatic and hands-on form.
How Istio's Ambient Mode Transparent Proxy - tproxy Works Under the Hood
Tproxy is used to intercept traffic in Istio Ambient mode.
How to Use SkyWalking for Distributed Tracing in Istio?
This blog will guide you to use SkyWalking for distributed tracing with Istio.
How Istio’s mTLS Traffic Encryption Works as Part of a Zero Trust Security Posture
This article introduces TLS and mTLS, and describes how to enable mTLS in Istio and its application scenarios.
Transparent Traffic Intercepting and Routing in the L4 Network of Istio Ambient Mesh
This article details transparent traffic intercepting and L4 traffic paths in Ambient Mesh in both diagrammatic and hands-on form.
The Future of Istio: the Path to Zero Trust Security
The future of Istio lies in being the infrastructure for zero-trust network and hybrid cloud.