Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to Service Mesh
- Challenges associated with managing microservices at scale.
- How a service mesh resolves these challenges.
- Comparing Istio with alternative service meshes such as Linkerd and Consul.
Fundamentals of Kubernetes Networking
- The core networking model in Kubernetes.
- Services, Ingress, and load balancing mechanisms.
- Limitations inherent to native Kubernetes networking.
Istio Features and Architecture
- Distinction between the control plane and data plane.
- The function of Envoy sidecars.
- Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod.
Installing Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio deployment.
- Installing Istio using Helm and Istioctl.
- Validating the installation and sidecar injection process.
Managing Traffic with Istio
- Configuring routing, retries, and failover strategies.
- Implementing Blue/green and canary deployments.
- Utilising the Istio Gateway for ingress traffic management.
Securing the Service Mesh with Istio
- Implementing mutual TLS (mTLS) for service-to-service authentication.
- Defining authorization policies (RBAC and ABAC).
- Applying Zero Trust architecture within Istio.
Observability and Monitoring
- Integrating Prometheus and Grafana with Istio.
- Performing distributed tracing with Jaeger and Zipkin.
- Analysing metrics, logs, and traces effectively.
Integrating Istio with Calico
- Enforcing advanced network policies.
- Securing pod-to-pod communication.
- Best practices for deploying Istio alongside Calico.
Troubleshooting and Best Practices
- Addressing common issues in Istio deployments.
- Debugging sidecar proxies.
- Operational best practices for production service meshes.
Summary and Next Steps
Requirements
- A solid understanding of networking concepts.
- Proficiency with the Linux command line.
- Knowledge of containers and Kubernetes.
Target Audience
- Developers.
- Cloud Architects.
- DevOps Engineers.
- Network Engineers.
- System Administrators.
14 Hours
Testimonials (1)
the technical preparation of teachers