How to Implement Single Sign-On (SSO) with OIDC in API Gateway using Envoy Gateway?
Guide to configure Envoy Gateway with OIDC (using Auth0) to enable Single Sign-On at the API gateway level for secure, centralized authentication.
Cloud Native
Kubernetes, Service Mesh, Envoy and Gateways.
Introduction to Envoy xDS and Configuration Distribution in Istio
This article shares the components of xDS and the process of configuration distribution in Istio, as well as the two modes of xDS, SotW and Delta xDS.
Detailed Explanation of Common Authentication Methods in Microservices
This article introduces several common authentication methods in microservices, helping you choose the appropriate authentication scheme when designing and implementing microservice systems.
Why Does Istio Ambient Mode Enforce mTLS?
Deep dive into the technical principles, architectural differences, and practical recommendations behind Istio Ambient Mode’s mandatory mTLS enforcement.
Istio CNI Unveiled: Streamlining Service Mesh Connectivity
This article provides a detailed explanation of the design principles, implementation methods, and how to enhance security and permission management through Ambient Mode in the Istio CNI plugin.
CNI Essentials: Powering Kubernetes' Network
This article provides an in-depth explanation of the basic concepts of Container Network Interface (CNI), its core components, and its relationship with Container Runtime Interface (CRI).
Envoy Gateway Overview: Modern Kubernetes Ingress with Envoy Gateway and the Gateway API
This article explores the advantages of deploying Envoy Gateway on Kubernetes, its relationship with other service mesh components, and why it’s the ideal choice for exposing services to the …
Analysis of the Limitations of Istio Ambient Mode
In-depth discussion on the Ambient mode in Istio 1.22, comparison with the traditional Sidecar mode, and its limitations.
In-depth Analysis of CNCF's Cloud Native AI Whitepaper
During KubeCon EU 2024, CNCF released its first Cloud Native Artificial Intelligence (CNAI) whitepaper. This article provides an in-depth analysis of the content of this whitepaper.
TVS: Istio and Envoy CVE Scanning Solution
This article will introduce Tetrate’s newly launched tool – Tetrate Vulnerability Scanner (TVS), a CVE scanner customized for Istio and Envoy.