How to Integrating Third-Party Service Registries with Istio?
This article provides a detailed introduction on how to integrate third-party service discovery mechanisms such as Consul and Eureka with Istio, achieving seamless service …
Cloud Native
Kubernetes, Service Mesh, Envoy and Gateways.
How to Implement Single Sign-On (SSO) with OIDC in API Gateway using Envoy Gateway?
Guide to configure Envoy Gateway with OIDC (using Auth0) to enable Single Sign-On at the API gateway level for secure, centralized authentication.
Introduction to Envoy xDS and Configuration Distribution in Istio
This article shares the components of xDS and the process of configuration distribution in Istio, as well as the two modes of xDS, SotW and Delta xDS.
Detailed Explanation of Common Authentication Methods in Microservices
This article introduces several common authentication methods in microservices, helping you choose the appropriate authentication scheme when designing and implementing …
Why Does Istio Ambient Mode Enforce mTLS?
Deep dive into the technical principles, architectural differences, and practical recommendations behind Istio Ambient Mode’s mandatory mTLS enforcement.
Istio CNI Unveiled: Streamlining Service Mesh Connectivity
This article provides a detailed explanation of the design principles, implementation methods, and how to enhance security and permission management through Ambient Mode in the …
CNI Essentials: Powering Kubernetes' Network
This article provides an in-depth explanation of the basic concepts of Container Network Interface (CNI), its core components, and its relationship with Container Runtime Interface …
Envoy Gateway Overview: Modern Kubernetes Ingress with Envoy Gateway and the Gateway API
This article explores the advantages of deploying Envoy Gateway on Kubernetes, its relationship with other service mesh components, and why it’s the ideal choice for exposing …
Analysis of the Limitations of Istio Ambient Mode
In-depth discussion on the Ambient mode in Istio 1.22, comparison with the traditional Sidecar mode, and its limitations.
In-depth Analysis of CNCF's Cloud Native AI Whitepaper
During KubeCon EU 2024, CNCF released its first Cloud Native Artificial Intelligence (CNAI) whitepaper. This article provides an in-depth analysis of the content of this …