Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to Service Mesh
- Challenges in managing microservices at scale
- Issues addressed by a service mesh
- Comparison of Istio with other service meshes (Linkerd, Consul)
Kubernetes Networking Basics
- Core Kubernetes networking model
- Services, Ingress, and load balancing
- Limitations of native Kubernetes networking
Istio Features and Architecture
- Control plane versus data plane
- Function of Envoy sidecars
- Key Istio components: Pilot, Citadel, Mixer (legacy), Istiod
Installing Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio
- Installing Istio using Helm and Istioctl
- Verifying the installation and sidecar injection
Managing Traffic with Istio
- Configuring routing, retries, and failovers
- Blue/green and canary deployments
- Utilizing Istio Gateway for ingress traffic
Service Mesh Security with Istio
- Mutual TLS (mTLS) for service-to-service authentication
- Authorization policies (RBAC and ABAC)
- Zero Trust architecture in Istio
Observability and Monitoring
- Leveraging Prometheus and Grafana with Istio
- Distributed tracing with Jaeger and Zipkin
- Analysis of metrics, logs, and traces
Integrating Istio with Calico
- Advanced network policy enforcement
- Securing pod-to-pod communication
- Best practices for Istio + Calico deployments
Troubleshooting and Best Practices
- Common issues in Istio deployments
- Debugging sidecar proxies
- Operational best practices for production service meshes
Summary and Next Steps
Requirements
- Familiarity with networking concepts
- Proficiency with the Linux command line
- Understanding of containers and Kubernetes
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
Testimonials (1)
the technical preparation of teachers