Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to Service Mesh
- Challenges associated with managing microservices at scale
- How service meshes address these challenges
- Comparison of Istio with alternative service meshes (Linkerd, Consul)
Kubernetes Networking Basics
- The core networking model in Kubernetes
- Services, Ingress, and load balancing mechanisms
- Constraints of native Kubernetes networking
Istio Features and Architecture
- Control plane versus data plane
- The function of Envoy sidecars
- Key Istio components: Pilot, Citadel, Mixer (legacy), Istiod
Setting Up Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio deployment
- Installing Istio using Helm and Istioctl
- Confirming installation success and sidecar injection
Managing Traffic with Istio
- Setting up routing, retries, and failover strategies
- Implementing Blue/green and canary deployment strategies
- Utilizing Istio Gateway for ingress traffic handling
Securing the Service Mesh with Istio
- Using mutual TLS (mTLS) for service-to-service authentication
- Defining authorization policies (RBAC and ABAC)
- Applying Zero Trust architecture principles within Istio
Observability and Monitoring
- Integrating Prometheus and Grafana with Istio
- Performing distributed tracing with Jaeger and Zipkin
- Interpreting metrics, logs, and traces
Combining Istio with Calico
- Enforcing advanced network policies
- Securing communication between pods
- Best practices for deploying Istio alongside Calico
Troubleshooting and Best Practices
- Addressing common issues in Istio environments
- Debugging sidecar proxies effectively
- Operational best practices for maintaining production service meshes
Conclusion and Next Steps
Requirements
- Familiarity with networking fundamentals
- Proficiency with the Linux command line
- Understanding of containers and Kubernetes
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
Testimonials (1)
the technical preparation of teachers