Insights on open source, cloud-native tech, and life reflections.
How to Implement Single Sign-On (SSO) with OIDC in API Gateway using Envoy Gateway?
This article provides a detailed guide on configuring Envoy Gateway to use OIDC for Single Sign-On. By using Auth0 as the identity provider, it demonstrates how to achieve secure and efficient SSO at the API Gateway level, enhancing user experience and system security.
Introduction to Envoy xDS and Configuration Distribution in Istio
This article shares the components of xDS and the process of configuration distribution in Istio, as well as the two modes of xDS, SotW and Delta xDS.
Deep Dive into Istio 1.22: New Features and Practical Application Advice
Explore the new features and practical advice of Istio 1.22, including the delta xDS, path template support, and API upgrades, to optimize service mesh management.
A Journey in Paris — Capturing the Spring of France
In March 2024, I visited Paris during KubeCon EU, experiencing the local culture, cuisine, and daily life nuances.
Dragon Boat Festival Road Trip in Xinjiang: Experiencing Majestic Landscapes
A Dragon Boat Festival road trip through Ili, Xinjiang, exploring majestic landscapes and local delicacies, capturing unforgettable moments.
How to Add Instant Search to Your Hugo Website
This article introduces how to add instant search functionality to a Hugo website, and outlines ways to optimize it.
Detailed Explanation of Common Authentication Methods in Microservices
This article introduces several common authentication methods in microservices, helping you choose the appropriate authentication scheme when designing and implementing microservice systems.
Why Does Istio Ambient Mode Enforce mTLS?
Deep dive into the technical principles, architectural differences, and practical recommendations behind Istio Ambient Mode’s mandatory mTLS enforcement.
Istio CNI Unveiled: Streamlining Service Mesh Connectivity
This article provides a detailed explanation of the design principles, implementation methods, and how to enhance security and permission management through Ambient Mode in the Istio CNI plugin.
CNI Essentials: Powering Kubernetes' Network
This article provides an in-depth explanation of the basic concepts of Container Network Interface (CNI), its core components, and its relationship with Container Runtime Interface (CRI).