Get in Touch
 Duration 14 hours

Course Outline

Fundamentals of Service Mesh

  • The challenges associated with managing microservices at scale
  • How a service mesh addresses these challenges
  • A comparison of Istio against other service mesh solutions like Linkerd and Consul

Essentials of Kubernetes Networking

  • The core networking model of Kubernetes
  • Understanding Services, Ingress, and load balancing mechanisms
  • The limitations inherent in native Kubernetes networking

Istio Architecture and Key Features

  • Distinguishing between the control plane and the data plane
  • The function of Envoy sidecars
  • Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod

Deploying Istio on Kubernetes

  • Preparing a Kubernetes cluster for Istio adoption
  • Installing Istio using Helm and Istioctl
  • Validating the installation process and sidecar injection

Managing Traffic with Istio

  • Setting up routing rules, retries, and failover strategies
  • Implementing blue/green and canary deployment patterns
  • Leveraging Istio Gateway for ingress traffic control

Securing the Service Mesh with Istio

  • Employing mutual TLS (mTLS) for service-to-service authentication
  • Defining authorization policies using RBAC and ABAC
  • Implementing Zero Trust architecture within Istio

Observability and Monitoring Practices

  • Integrating Prometheus and Grafana with Istio for monitoring
  • Performing distributed tracing with Jaeger and Zipkin
  • Interpreting metrics, logs, and trace data

Combining Istio with Calico

  • Enforcing advanced network policies
  • Protecting pod-to-pod communication
  • Best practices for deploying Istio alongside Calico

Debugging and Operational Best Practices

  • Identifying common issues in Istio deployments
  • Debugging sidecar proxy behavior
  • Operational best practices for maintaining production service meshes

Recap and Future Steps

Requirements

  • A solid grasp of fundamental networking concepts
  • Familiarity with the Linux command line
  • Working knowledge of containers and Kubernetes

Target Audience

  • Software Developers
  • Cloud Architects
  • DevOps Engineers
  • Network Engineers
  • System Administrators

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories