Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Service Mesh Introduction
- Challenges associated with managing microservices at scale
- How service meshes address these challenges
- Comparison of Istio with alternative service meshes (Linkerd, Consul)
Foundations of Kubernetes Networking
- The core networking model in Kubernetes
- Concepts of Services, Ingress, and load balancing
- Constraints of native Kubernetes networking capabilities
Istio Capabilities and Architecture
- Distinction between the control plane and data plane
- The function of Envoy sidecars
- Essential Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Deploying Istio on Kubernetes
- Readying a Kubernetes cluster for Istio deployment
- Installing Istio using Helm and Istioctl
- Validating the installation and sidecar injection process
Managing Traffic with Istio
- Setting up routing rules, retries, and failover mechanisms
- Implementing blue/green and canary deployment strategies
- Utilizing the Istio Gateway for managing ingress traffic
Securing the Service Mesh with Istio
- Applying Mutual TLS (mTLS) for service-to-service authentication
- Defining authorization policies (RBAC and ABAC)
- Implementing Zero Trust architecture within Istio
Observability and Monitoring Strategies
- Leveraging Prometheus and Grafana alongside Istio
- Performing distributed tracing with Jaeger and Zipkin
- Interpreting metrics, logs, and trace data
Combining Istio with Calico
- Enforcing advanced network policies
- Securing communication between pods
- Recommended practices for Istio and Calico integrations
Troubleshooting and Operational Excellence
- Addressing common challenges in Istio deployments
- Debugging sidecar proxy issues
- Best practices for operating production-grade service meshes
Course Summary and Future Directions
Requirements
- A solid grasp of fundamental networking concepts
- Proficiency with the Linux command line
- Familiarity with containerization and Kubernetes
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
14 Hours
Testimonials (1)
the technical preparation of teachers