istio

• Sidecar mode

• Ambient Mesh

• Monitor and visualize your cluster

• [Istio profiles]

overview

missing side car

Add istio injection label

When you set the istio-injection=enabled label on a namespace

Prepare istio for demo

normal install with side car. show the traffic and iptables

ambient mesh, show the traffic and iptables

multi clusters

issues with sidecars:

• take more resources

• difficult to maintain-ish

• traffic take a different network path

Questions for the end

Can we replace service mesh? maybe yes, with cilium