Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to Service Mesh
- Challenges of managing microservices at scale.
- Solutions provided by a service mesh.
- Comparing Istio with other service meshes (Linkerd, Consul).
Kubernetes Networking Fundamentals
- Core Kubernetes networking model.
- Services, Ingress, and load balancing.
- Limitations of native Kubernetes networking.
Istio Features and Architecture
- Control plane versus data plane.
- The role of Envoy sidecars.
- Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod.
Installing Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio.
- Installing Istio using Helm and Istioctl.
- Verifying the installation and sidecar injection.
Working with Istio Traffic Management
- Configuring routing, retries, and failovers.
- Blue/green and canary deployments.
- Using Istio Gateway for ingress traffic.
Service Mesh Security with Istio
- Mutual TLS (mTLS) for service-to-service authentication.
- Authorization policies (RBAC and ABAC).
- Zero Trust architecture within Istio.
Observability and Monitoring
- Using Prometheus and Grafana with Istio.
- Distributed tracing with Jaeger and Zipkin.
- Analysing metrics, logs, and traces.
Integrating Istio with Calico
- Advanced network policy enforcement.
- Securing pod-to-pod communication.
- Best practices for Istio and Calico deployments.
Troubleshooting and Best Practices
- Common issues encountered in Istio deployments.
- Debugging sidecar proxies.
- Operational best practices for production service meshes.
Summary and Next Steps
Requirements
- A foundational understanding of networking concepts.
- Experience using the Linux command line.
- Knowledge of containers and Kubernetes.
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
14 Hours
Testimonials (1)
the technical preparation of teachers