Istio Ambient is not a "Node Proxy" - addressing some common misconceptions in Istio's ambient architecture. blog.howardjohn.info/posts/ambient-…

The largest Kubernetes cluster size I have seen discussed is 150k Pods (and even that I believe is theoretical), so I setup Istio ambient on a *200k pod*, 14k service cluster. Ztunnel comes in at just under 500mb RAM and starts up in just over 1s.

🎉 Gateway API v0.8.0 is live! This marks the first official support for Service Mesh in Kubernetes. You can now use the same set of APIs to configure Istio, Linkerd, and Kuma, with more on the way. kubernetes.io/blog/2023/08/2…

Excited to announce that I will be hosting a panel at #kccnc2023 kccncna2023.sched.com/event/1R2ts/se… with esteemed panelists Lin Sun Thomas Graf 🐝 howardjohn and Flynn (representing Buoyant).

Solo.io Recognized as a Visionary in the Gartner 2023 Magic Quadrant for API Management solo.io/blog/solo-a-vi… via solo.io

Released last week, our article The New Stack covering svc-to-svc authentication with JWTs "unravels your API Gateway" by forcing complicated logic back into your app code. thenewstack.io/using-jwts-to-… Seems to resonate with some folks who went down this path! Peter Jausovec solo.io

This is some impressive stuff. Also ambient is coming along nicely.

It's my first #AWSReinvent and this thing is ungodly huge. If anyone wants to talk Istio you know where to find me and you can get your steps in on the way.

Using SPIFFE/SPIRE? Some systems like Istio have established conventions about how to encode identity with SPIFFE IDs, but you may be wondering how best to construct SPIFFE IDs… this is a GREAT blog from [email protected] // bsky.social 🖤🕯️ SPIRL spirl.com/blog/how-to-co…

An invalid benchmark quoted in haste can be repented at leisure github.com/pragmagic/serv… tldr; - L3 != L4 != L7 - Envoy performance is consistent - Istio #Ambient is faster for HTTP

Istio ambient is often seen as just "service mesh without sidecars". It is that, but it also solves a ton of pain points in Istio. One of many things you won't need to worry about: securing all Prometheus scraping: blog.howardjohn.info/posts/securing…. With ambient, it just works.

Finally got a chance to write up how we are testing Istio ambient without Kubernetes (or docker, root, ...): blog.howardjohn.info/posts/ztunnel-…

You can now cryptographically attest the identity of two major clouds and your on-prem stuff! Or in meme speak: spiffe has been achieved internally.

I'm hanging out at #RSAC so if you want to chat about Istio or #zerotrust hit me up

A while coming but 'ambient mode' is definitely worth the wait.

Say good bye to sidecars, Istio’s ambient mode reaches beta in v1.22, thanks to CNCF for publishing this! cncf.io/blog/2024/05/2…

Exciting event at TomTom HQ! Tomorrow, Louis Ryan will dive into #servicemesh & Istio’s Ambient mode! Register here: meetup.com/dutch-kubernet… ⚛️ #CloudNative #Istio

Not too shabby

cloudnativenow.com/contributed-co… Ambient mode — the next-generation architecture for Istio — more than just an incremental improvement to the sidecar-based architecture. #ambientmode #istio #kubecon #multicloud

It’s time to get excited for #IstioDay! We’re kicking off tomorrow Nov.12 at 1:25 PM: sched.co/1jJgh. Come check out THE #KubeCon co-located event for Istio maintainers and practitioners to learn from each other!! Hope to see you there 😄