KubeCon China 2024 Recap: Leading the Frontiers of Cloud Native Technology
A deep dive into the cloud native technology developments at KubeCon China 2024, focusing on the integration of Istio’s Ambient mode and API gateways and their profound …
Istio Ambient
Why Does Istio Ambient Mode Enforce mTLS?
Deep dive into the technical principles, architectural differences, and practical recommendations behind Istio Ambient Mode’s mandatory mTLS enforcement.
Istio CNI Unveiled: Streamlining Service Mesh Connectivity
This article provides a detailed explanation of the design principles, implementation methods, and how to enhance security and permission management through Ambient Mode in the …
Envoy Gateway Overview: Modern Kubernetes Ingress with Envoy Gateway and the Gateway API
This article explores the advantages of deploying Envoy Gateway on Kubernetes, its relationship with other service mesh components, and why it’s the ideal choice for exposing …
Analysis of the Limitations of Istio Ambient Mode
In-depth discussion on the Ambient mode in Istio 1.22, comparison with the traditional Sidecar mode, and its limitations.
Using Geneve Tunnels to Implement Istio Ambient Mesh Traffic Interception
This article introduces Geneve tunnels, a network virtualization protocol that can intercept Istio ambient mesh traffic more flexibly and securely than VXLAN. It also explains how …
L7 Traffic Path in Ambient Mesh
This article describes in detail the L7 traffic path in Ambient Mesh in both diagrammatic and hands-on form.
How Istio's Ambient Mode Transparent Proxy - tproxy Works Under the Hood
Tproxy is used to intercept traffic in Istio Ambient mode.
Transparent Traffic Intercepting and Routing in the L4 Network of Istio Ambient Mesh
This article details transparent traffic intercepting and L4 traffic paths in Ambient Mesh in both diagrammatic and hands-on form.