Envoy’s ext_proc filter enables flexible request and response processing through gRPC integration.
Blog
Insights on open source, cloud-native tech, and life reflections.
Implementing HTTP/2 CONNECT Tunnels with Envoy: Concepts and Practical Guide
A deep dive into creating transparent tunnels using HTTP/2 CONNECT, including technical principles, practical workflows, and example code.
Packet Lifecycle and Traffic Optimization in Istio Ambient Mode
An in-depth analysis of the detailed processing of initial packets in Istio Ambient Mode, followed by fast forwarding and traffic optimization strategies for subsequent packets.
In-Pod IPtables Rule Injection in Istio Ambient Mode Explained
A deep dive into how iptables rules in Istio ambient mode enable transparent traffic interception and control within Pods.
Detailed Explanation of Transparent Traffic Interception in Istio ambient mode
This article is the first in a series on Istio ambient mode, focusing on how transparent traffic interception enables a sidecar-free service mesh. It provides an in-depth analysis of the interactions among the Istio CNI Node Agent, ztunnel, and pod network namespaces.
Improve Istio mesh tracing capabilities and flexibility by migrating to the Telemetry API and configuring the SkyWalking provider.
Network Cost Comparison Between Istio Sidecar and Ambient Modes
In-depth comparison of network costs and performance between Istio sidecar and ambient modes, and analysis of their locality awareness and troubleshooting methods.
Deep Dive into Istio Ambient Mode Traffic Paths: The Powerful Combination of eBPF and Istio
An in-depth exploration of the perfect combination of Cilium, eBPF, and Istio Ambient mode in Kubernetes clusters. This article provides detailed traffic path analysis in kube-proxy-free environments, complete deployment guides, and best practices.
Migrating from AWS App Mesh to Istio: A Comprehensive Guide
Guide on migrating from AWS App Mesh to Istio. Focuses on benefits of cloud-native, Kubernetes-friendly solution. Explore differences, advanced features and Tetrate Istio Migration Tool for easy, efficient transition.
This article focuses on implementing PKI for Istio in a multi-cluster environment. It details the combination of EJBCA and cert-manager, including setup steps and emphasizes the importance of PKI best practices for secure and compliant service mesh.