Cloud Native

Why Does Istio Ambient Mode Enforce mTLS?

Deep dive into the technical principles, architectural differences, and practical recommendations behind Istio Ambient Mode’s mandatory mTLS enforcement.

Istio CNI Unveiled: Streamlining Service Mesh Connectivity

This article provides a detailed explanation of the design principles, implementation methods, and how to enhance security and permission management through Ambient Mode in the Istio CNI plugin.

CNI Essentials: Powering Kubernetes' Network

This article provides an in-depth explanation of the basic concepts of Container Network Interface (CNI), its core components, and its relationship with Container Runtime Interface (CRI).

Envoy Gateway Overview: Modern Kubernetes Ingress with Envoy Gateway and the Gateway API

This article explores the advantages of deploying Envoy Gateway on Kubernetes, its relationship with other service mesh components, and why it’s the ideal choice for exposing services to the public internet.

Analysis of the Limitations of Istio Ambient Mode

In-depth discussion on the Ambient mode in Istio 1.22, comparison with the traditional Sidecar mode, and its limitations.

KubeCon EU 2024 Transparency Report Interpretation

A detailed interpretation of the key data and highlights from KubeCon Europe 2024.

In-depth Analysis of CNCF's Cloud Native AI Whitepaper

During KubeCon EU 2024, CNCF released its first Cloud Native Artificial Intelligence (CNAI) whitepaper. This article provides an in-depth analysis of the content of this whitepaper.

TVS: Istio and Envoy CVE Scanning Solution

This article will introduce Tetrate’s newly launched tool – Tetrate Vulnerability Scanner (TVS), a CVE scanner customized for Istio and Envoy.

KubeCon EU 2024: Impressions and Recap from Paris

Explore KubeCon EU 2024: From the latest developments in Istio and Cilium to an in-depth interpretation of cloud native trends such as AI convergence, the rise of Wasm, and enhanced observation.