Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours (2 days)
Course Outline
Introduction to Service Mesh
- Challenges associated with managing microservices at scale
- The problems a service mesh addresses
- Comparison of Istio with alternative service meshes (Linkerd, Consul)
Kubernetes Networking Fundamentals
- The core networking model in Kubernetes
- Services, Ingress, and load balancing mechanisms
- Constraints of native Kubernetes networking
Istio Features and Architecture
- Control plane versus data plane
- The function of Envoy sidecars
- Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Installing Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio deployment
- Installing Istio using Helm and Istioctl
- Verifying the installation and sidecar injection process
Working with Istio Traffic Management
- Setting up routing, retries, and failover strategies
- Blue/green and canary deployment techniques
- Utilizing Istio Gateway for ingress traffic handling
Service Mesh Security with Istio
- Mutual TLS (mTLS) for authenticating service-to-service communication
- Authorization policies using RBAC and ABAC
- Implementing Zero Trust architecture in Istio
Observability and Monitoring
- Integrating Prometheus and Grafana with Istio
- Distributed tracing using Jaeger and Zipkin
- Interpreting metrics, logs, and traces
Integrating Istio with Calico
- Enforcing advanced network policies
- Securing pod-to-pod communication
- Best practices for deploying Istio and Calico together
Troubleshooting and Best Practices
- Common challenges in Istio deployments
- Debugging sidecar proxies
- Operational best practices for production-grade service meshes
Summary and Next Steps
Requirements
- Familiarity with core networking concepts
- Proficiency with the Linux command line
- Knowledge of containerization and Kubernetes
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
Testimonials (1)
the technical preparation of teachers