Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Fundamentals of Service Mesh
- The challenges associated with managing microservices at scale
- How a service mesh addresses these challenges
- A comparison of Istio against other service mesh solutions like Linkerd and Consul
Essentials of Kubernetes Networking
- The core networking model of Kubernetes
- Understanding Services, Ingress, and load balancing mechanisms
- The limitations inherent in native Kubernetes networking
Istio Architecture and Key Features
- Distinguishing between the control plane and the data plane
- The function of Envoy sidecars
- Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Deploying Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio adoption
- Installing Istio using Helm and Istioctl
- Validating the installation process and sidecar injection
Managing Traffic with Istio
- Setting up routing rules, retries, and failover strategies
- Implementing blue/green and canary deployment patterns
- Leveraging Istio Gateway for ingress traffic control
Securing the Service Mesh with Istio
- Employing mutual TLS (mTLS) for service-to-service authentication
- Defining authorization policies using RBAC and ABAC
- Implementing Zero Trust architecture within Istio
Observability and Monitoring Practices
- Integrating Prometheus and Grafana with Istio for monitoring
- Performing distributed tracing with Jaeger and Zipkin
- Interpreting metrics, logs, and trace data
Combining Istio with Calico
- Enforcing advanced network policies
- Protecting pod-to-pod communication
- Best practices for deploying Istio alongside Calico
Debugging and Operational Best Practices
- Identifying common issues in Istio deployments
- Debugging sidecar proxy behavior
- Operational best practices for maintaining production service meshes
Recap and Future Steps
Requirements
- A solid grasp of fundamental networking concepts
- Familiarity with the Linux command line
- Working knowledge of containers and Kubernetes
Target Audience
- Software Developers
- Cloud Architects
- DevOps Engineers
- Network Engineers
- System Administrators
Testimonials (1)
the technical preparation of teachers