Tag: #service-mesh
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 23 posts
23 posts are tagged #service-mesh; the most recent was published on 2026-07-16.
Often tagged together: #istio 18 #kubernetes 10 #2026-03 7 #envoy 7 #cilium 6
Most read in the last 90 days:
- Networking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
- Service Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?)
- Complete Guide to Kubernetes Network Policy and Service Mesh (Istio, Cilium, Calico Comparison)
Move to Ambient and EnvoyFilter Goes Silently Ignored — The Gap Istio 1.30's TrafficExtension Closes, and What It Doesn't
The real obstacle blocking migration to ambient mode isn't resources — it's extensibility. Istio's official migration doc states outright that EnvoyFilter is not supported on waypoints, that it will be "silently ignored"
2026-07-16 · 15 min read #kubernetes#istio#service-mesh#envoy#ambient-meshIstio Ambient vs Sidecar — Choosing Your Service Mesh Architecture in 2026
A quantitative look at the resource cost and operational pain of the sidecar model, followed by a deep dive into the Ambient architecture built from ztunnel and waypoint proxies. Covers data path comparison, feature pari
2026-06-13 · 18 min read #istio#ambient-mesh#sidecar#ztunnel#kubernetesService Mesh in 2026 — Istio Ambient / Linkerd 3 / Cilium Mesh / Consul Connect / Kuma Deep Dive (Is the Sidecar Dead?) ♪ Listenable
Service mesh went through a turbulent 2024-2026 after the sidecar golden age of 2018-2020. Istio Ambient went GA, making sidecar-free Istio real. Linkerd 3 moved some features to a paid edition, sparking community contro
2026-05-16 · 20 min read #service-mesh#istio#linkerd#cilium#consulNetworking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
A complete look at the 2026 production networking stack. eBPF-based K8s networking (Cilium, Calico eBPF, Antrea), overlay VPNs (WireGuard, Tailscale, Nebula, ZeroTier, Twingate, OpenZiti), service meshes (Istio ambient,
2026-05-16 · 18 min read #networking#cilium#ebpf#wireguard#tailscaleService Mesh Deep Dive — Envoy, Istio, Linkerd, Cilium eBPF, Ambient Mesh, xDS/mTLS
Why sidecar proxies appeared — and why they are being abandoned. Envoy internals, xDS API flow, mTLS handshake, Ambient Meshs Ztunnel, and Ciliums sidecar-less eBPF mesh, all in one place.
2026-04-15 · 10 min read #service-mesh#envoy#istio#linkerd#ciliumService Mesh Complete Guide 2025: Istio vs Linkerd, mTLS, Traffic Management, Observability
Everything about Service Mesh! Istio vs Linkerd comparison, Envoy sidecar proxy, mTLS automatic encryption, traffic management (canary/mirroring/circuit breaker), Observability (metrics/tracing/logging), Gateway API, Amb
2026-04-13 · 19 min read #service-mesh#istio#linkerd#mtls#traffic-managementThe Complete Guide to API Design & Microservices Architecture
From REST, GraphQL, and gRPC API design principles to microservices patterns, service mesh, event-driven architecture, and distributed transactions.
2026-04-12 · 16 min read #architecture#api#microservices#rest#grpcgRPC & Protocol Buffers Complete Guide 2025: The New Standard for Microservices Communication ♪ Listenable
Everything about gRPC! Protocol Buffers schema design, 4 communication patterns (Unary/Server/Client/Bidirectional Streaming), interceptors, error handling, load balancing, gRPC-Web, REST vs gRPC comparison, and real-wor
2026-03-24 · 20 min read #grpc#protobuf#protocol-buffers#microservices#apiMicroservices Architecture 2025 Complete Guide: From Monolith to MSA, and Back to Modular Monolith ♪ Listenable
Everything about microservices! Monolith vs MSA vs Modular Monolith, DDD service decomposition, communication patterns (gRPC/REST/events), Service Mesh (Istio), Saga pattern, OpenTelemetry observability, and deployment s
2026-03-23 · 28 min read #microservices#monolith#modular-monolith#service-mesh#istioIstio Security Model Analysis: mTLS, Authentication, Authorization
Analyzes the internal implementation of the Istio security model. Covers certificate lifecycle, mTLS handshake flow, PeerAuthentication, RequestAuthentication, AuthorizationPolicy internals, and external authorization in
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Ambient Mesh Internals: Service Mesh Without Sidecars
Analyzes the internal architecture of Istio Ambient Mesh. Covers ztunnel L4 processing, waypoint proxy L7 processing, HBONE tunneling, eBPF traffic interception, and performance comparison with sidecars.
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Traffic Management Engine Deep Dive
Analyzes how Istio traffic management works internally. Covers VirtualService to Envoy RouteConfiguration translation, load balancing algorithms, circuit breakers, retries, and fault injection Envoy implementations in de
2026-03-20 · 8 min read #istio#service-mesh#open-source-internalsIstio Architecture Internals: Control Plane and Data Plane
A deep dive into Istio service mesh internal architecture. Explores istiod control plane, Envoy sidecar injection mechanisms, xDS protocol, filter chains, and workload identity at the code level.
2026-03-20 · 9 min read #istio#service-mesh#open-source-internalsIstio Observability Internals: Metrics, Tracing, Logging
Analyzes the internal implementation of Istio observability. Covers Envoy stats generation, Istio standard metrics, Telemetry API v2, distributed tracing span propagation, access logging, and Kiali/Prometheus/Grafana/Jae
2026-03-20 · 8 min read #istio#service-mesh#open-source-internals[Golden Kubestronaut] ICA Practice Exam 80 Questions - Istio Certified Associate ♪ Listenable
80 practice questions for the ICA exam toward Golden Kubestronaut. Covers Istio architecture, traffic management, security, and observability across all domains.
2026-03-20 · 30 min read #kubernetes#golden-kubestronaut#istio#service-mesh#icaNetwork Engineering & Security Master Guide: From TCP/IP to Service Mesh and AI Serving Networks
A complete networking guide for AI engineers covering TCP/IP fundamentals, gRPC, Istio service mesh, Zero Trust security, and real-time LLM streaming.
2026-03-17 · 11 min read #networking#grpc#tls#service-mesh#istioComplete Guide to Kubernetes Network Policy and Service Mesh (Istio, Cilium, Calico Comparison)
Compare and analyze traffic control between microservices using Network Policy in Kubernetes environments, along with the architecture, implementation, and operational strategies of Istio and Cilium Service Mesh.
2026-03-14 · 16 min read #kubernetes#network-policy#service-mesh#istio#ciliumService Mesh Production Guide: mTLS, Traffic Management, and Observability with Istio, Envoy, and Linkerd
Cover service mesh core concepts (data plane/control plane), Istio architecture (Istiod, Envoy sidecar), VirtualService and DestinationRule, traffic splitting, circuit breaking, mTLS configuration, Linkerd comparison, Am
2026-03-12 · 11 min read #architecture#service-mesh#istio#envoy#linkerdKubernetes Istio Ambient Mesh Sidecarless Guide ♪ Listenable
A practical guide to Istio Ambient Mesh sidecarless architecture on Kubernetes, covering ztunnel, waypoint proxies, and migration strategies.
2026-03-08 · 23 min read #kubernetes#istio#ambient-mesh#service-mesh#ztunnelCilium Service Mesh: Building and Operating Sidecarless Service Mesh with eBPF
A comprehensive guide covering Cilium Service Mesh sidecarless architecture based on eBPF, Envoy integration, mTLS configuration, L4/L7 traffic management, performance comparison with Istio, and production troubleshootin
2026-03-07 · 15 min read #kubernetes#cilium#service-mesh#ebpf#sidecarless