Transparent Traffic Intercepting and Routing in the L4 Network of Istio Ambient Mesh
This article details transparent traffic intercepting and L4 traffic paths in Ambient Mesh in both diagrammatic and hands-on form.
Cloud Native
Kubernetes, Service Mesh, Envoy and Gateways.
The Future of Istio: the Path to Zero Trust Security
The future of Istio lies in being the infrastructure for zero-trust network and hybrid cloud.
Why the Gateway API Is the Unified Future of Ingress for Kubernetes and Service Mesh
This article introduces the ingress gateway and Gateway API in Kubernetes, the new trend of them with service mesh.
Beyond Istio OSS - The Current State and Future of the Istio Service Mesh
This article explains the background of Istio’s birth, its position in the cloud-native technology stack, and the development direction of Istio.
Why Would You Need Spire for Authentication With Istio?
This article explains what SPIRE means for zero-trust architectures and why you would need SPIRE for authentication in Istio.
Please Temporarily Abandon the Illusion of Using eBPF to Replace Service Mesh and Sidecar Mode
Whether or not eBPF exists, in the foreseeable future, service mesh will be based on sidecar proxies running in user space (except for proxyless mode).
Understanding the Sidecar Injection, Traffic Intercepting & Routing Process in Istio
Learn the sidecar pattern, transparent traffic intercepting and routing in Istio.
Istio Data Plane Pod Startup Process Explained
This article will explain Istio’s Init container, Pod internal processes and the startup process.
Understanding IPTables
This article will give you a brief introduction to iptables, its tables and the order of execution.
Traffic Types and Iptables Rules in Istio Sidecar Explained
This article will show you the six traffic types and their iptables rules in Istio sidecar, and take you through the whole diagram in a schematic format.