Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to Service Mesh
- Challenges associated with managing microservices at scale
- Problems solved by a service mesh
- Comparing Istio with other service meshes such as Linkerd and Consul
Kubernetes Networking Fundamentals
- Core Kubernetes networking model
- Services, Ingress, and load balancing
- Limitations of native Kubernetes networking
Istio Features and Architecture
- Control plane versus data plane
- The role of Envoy sidecars
- Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Installing Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio
- Installing Istio using Helm and Istioctl
- Verifying the installation and sidecar injection
Working with Istio Traffic Management
- Configuring routing, retries, and failovers
- Implementing blue/green and canary deployments
- Using the Istio Gateway for ingress traffic
Service Mesh Security with Istio
- Mutual TLS (mTLS) for service-to-service authentication
- Authorization policies (RBAC and ABAC)
- Implementing Zero Trust architecture in Istio
Observability and Monitoring
- Utilizing Prometheus and Grafana with Istio
- Distributed tracing with Jaeger and Zipkin
- Analyzing metrics, logs, and traces
Integrating Istio with Calico
- Advanced network policy enforcement
- Securing pod-to-pod communication
- Best practices for deploying Istio alongside Calico
Troubleshooting and Best Practices
- Common issues encountered in Istio deployments
- Debugging sidecar proxies
- Operational best practices for production service meshes
Summary and Next Steps
Requirements
- Understanding of networking concepts
- Experience with the Linux command line
- Knowledge of containers and Kubernetes
Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
14 Hours
Testimonials (1)
the technical preparation of teachers