Tag: #istio
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 24 posts
24 posts are tagged #istio; the most recent was published on 2026-08-12.
Often tagged together: #service-mesh 18 #kubernetes 11 #envoy 8 #cilium 6 #linkerd 5
Most read in the last 90 days:
- Networking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
- Service Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?)
- Complete Guide to Kubernetes Network Policy and Service Mesh (Istio, Cilium, Calico Comparison)
Korean Dev Blog Curation 1 — Backend and Infrastructure, 14 Posts I Opened and Checked
Fourteen Korean-language backend and infrastructure posts selected for being concrete and reproducible. They cover Istio Sidecar and ServiceEntry, Envoy circuit breaking and routing, the limits of the Prometheus Push Gat
2026-08-12 · 13 min read #curation#큐레이션#backend#infra#istioMove to Ambient and EnvoyFilter Goes Silently Ignored — The Gap Istio 1.30's TrafficExtension Closes, and What It Doesn't
The real obstacle blocking migration to ambient mode isn't resources — it's extensibility. Istio's official migration doc states outright that EnvoyFilter is not supported on waypoints, that it will be "silently ignored"
2026-07-16 · 15 min read #kubernetes#istio#service-mesh#envoy#ambient-meshIstio Ambient vs Sidecar — Choosing Your Service Mesh Architecture in 2026
A quantitative look at the resource cost and operational pain of the sidecar model, followed by a deep dive into the Ambient architecture built from ztunnel and waypoint proxies. Covers data path comparison, feature pari
2026-06-13 · 18 min read #istio#ambient-mesh#sidecar#ztunnel#kubernetesIstio Security in Practice — mTLS, AuthorizationPolicy, and the Zero Trust Mesh ♪ Listenable
From the mesh security model built on SPIFFE identities and the istiod CA, through the PERMISSIVE-to-STRICT migration strategy for PeerAuthentication, least-privilege AuthorizationPolicy design, JWT end-user authenticati
2026-06-13 · 21 min read #istio#mtls#security#authorizationpolicy#zero-trustIstio Traffic Management in Practice — From VirtualService to Automated Canaries
A hands-on guide covering the relationships between Istio traffic APIs, header and weight-based routing, canary automation with Flagger and Argo Rollouts, mirroring, fault injection, and how to derive circuit breaker set
2026-06-13 · 17 min read #istio#virtualservice#canary#traffic-management#kubernetesOIDC Token Validation at the API Gateway — Istio, Envoy, and Gateway API in Practice
Validate at the edge or in the service? This post covers detailed Envoy jwtauthn filter configuration, the Istio RequestAuthentication plus AuthorizationPolicy combination, JWKS caching and failure modes, audience strate
2026-06-12 · 15 min read #istio#envoy#jwt#oidc#api-gatewayService Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?) ♪ Listenable
Service mesh went through a turbulent 2024-2026 after the sidecar golden age of 2018-2020. Istio Ambient went GA, making sidecar-free Istio real. Linkerd 3 moved some features to a paid edition, sparking community contro
2026-05-16 · 20 min read #service-mesh#istio#linkerd#cilium#consulNetworking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
A complete look at the 2026 production networking stack. eBPF-based K8s networking (Cilium, Calico eBPF, Antrea), overlay VPNs (WireGuard, Tailscale, Nebula, ZeroTier, Twingate, OpenZiti), service meshes (Istio ambient,
2026-05-16 · 18 min read #networking#cilium#ebpf#wireguard#tailscaleKubestronaut Path 2026 Deep-Dive - CKA, CKAD, CKS, KCNA, KCSA and the CNCF Certification Ladder (Prometheus, Istio, Cilium, OpenTelemetry, Argo) ♪ Listenable
A thorough 2026 guide to the Kubestronaut program and the CNCF certification ladder. We cover the five core exams (CKA, CKAD, CKS, KCNA, KCSA) in depth — domains, exam format, passing scores, pass rates, Killer Shell moc
2026-05-16 · 20 min read #kubestronaut#cncf#kubernetes#cka#ckadService Mesh Deep Dive — Envoy, Istio, Linkerd, Cilium eBPF, Ambient Mesh, xDS/mTLS
Why sidecar proxies appeared — and why they are being abandoned. Envoy internals, xDS API flow, mTLS handshake, Ambient Meshs Ztunnel, and Ciliums sidecar-less eBPF mesh, all in one place.
2026-04-15 · 10 min read #service-mesh#envoy#istio#linkerd#ciliumService Mesh Complete Guide 2025: Istio vs Linkerd, mTLS, Traffic Management, Observability
Everything about Service Mesh! Istio vs Linkerd comparison, Envoy sidecar proxy, mTLS automatic encryption, traffic management (canary/mirroring/circuit breaker), Observability (metrics/tracing/logging), Gateway API, Amb
2026-04-13 · 19 min read #service-mesh#istio#linkerd#mtls#traffic-managementMicroservices Architecture 2025 Complete Guide: From Monolith to MSA, and Back to Modular Monolith ♪ Listenable
Everything about microservices! Monolith vs MSA vs Modular Monolith, DDD service decomposition, communication patterns (gRPC/REST/events), Service Mesh (Istio), Saga pattern, OpenTelemetry observability, and deployment s
2026-03-23 · 28 min read #microservices#monolith#modular-monolith#service-mesh#istioIstio Security Model Analysis: mTLS, Authentication, Authorization
Analyzes the internal implementation of the Istio security model. Covers certificate lifecycle, mTLS handshake flow, PeerAuthentication, RequestAuthentication, AuthorizationPolicy internals, and external authorization in
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Ambient Mesh Internals: Service Mesh Without Sidecars
Analyzes the internal architecture of Istio Ambient Mesh. Covers ztunnel L4 processing, waypoint proxy L7 processing, HBONE tunneling, eBPF traffic interception, and performance comparison with sidecars.
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Traffic Management Engine Deep Dive
Analyzes how Istio traffic management works internally. Covers VirtualService to Envoy RouteConfiguration translation, load balancing algorithms, circuit breakers, retries, and fault injection Envoy implementations in de
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Architecture Internals: Control Plane and Data Plane
A deep dive into Istio service mesh internal architecture. Explores istiod control plane, Envoy sidecar injection mechanisms, xDS protocol, filter chains, and workload identity at the code level.
2026-03-20 · 9 min read #istio#service-mesh#open-source-internalsIstio Observability Internals: Metrics, Tracing, Logging
Analyzes the internal implementation of Istio observability. Covers Envoy stats generation, Istio standard metrics, Telemetry API v2, distributed tracing span propagation, access logging, and Kiali/Prometheus/Grafana/Jae
2026-03-20 · 8 min read #istio#service-mesh#open-source-internals[Golden Kubestronaut] ICA Practice Exam 80 Questions - Istio Certified Associate ♪ Listenable
80 practice questions for the ICA exam toward Golden Kubestronaut. Covers Istio architecture, traffic management, security, and observability across all domains.
2026-03-20 · 30 min read #kubernetes#golden-kubestronaut#istio#service-mesh#icaNetwork Engineering & Security Master Guide: From TCP/IP to Service Mesh and AI Serving Networks
A complete networking guide for AI engineers covering TCP/IP fundamentals, gRPC, Istio service mesh, Zero Trust security, and real-time LLM streaming.
2026-03-17 · 11 min read #networking#grpc#tls#service-mesh#istioComplete Guide to Kubernetes Network Policy and Service Mesh (Istio, Cilium, Calico Comparison)
Compare and analyze traffic control between microservices using Network Policy in Kubernetes environments, along with the architecture, implementation, and operational strategies of Istio and Cilium Service Mesh.
2026-03-14 · 16 min read #kubernetes#network-policy#service-mesh#istio#cilium