Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to Service Mesh
- Challenges associated with managing microservices at scale
- Problems that a service mesh addresses
- Comparing Istio with alternative service meshes such as Linkerd and Consul
Kubernetes Networking Fundamentals
- Core Kubernetes networking model
- Services, Ingress, and load balancing mechanisms
- Limitations inherent in native Kubernetes networking
Istio Features and Architecture
- Control plane versus data plane
- The role of Envoy sidecars
- Key Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Installing Istio on Kubernetes
- Preparing a Kubernetes cluster for Istio deployment
- Installing Istio using Helm and Istioctl
- Verifying the installation and sidecar injection process
Managing Traffic with Istio
- Configuring routing, retries, and failover strategies
- Implementing blue/green and canary deployments
- Utilizing Istio Gateway for ingress traffic management
Service Mesh Security with Istio
- Mutual TLS (mTLS) for secure service-to-service authentication
- Authorization policies including RBAC and ABAC
- Implementing Zero Trust architecture within Istio
Observability and Monitoring
- Integrating Prometheus and Grafana with Istio
- Performing distributed tracing with Jaeger and Zipkin
- Analyzing metrics, logs, and trace data
Integrating Istio with Calico
- Enforcing advanced network policies
- Securing pod-to-pod communication
- Best practices for deployments combining Istio and Calico
Troubleshooting and Best Practices
- Common issues encountered in Istio deployments
- Debugging sidecar proxy configurations
- Operational best practices for production service meshes
Summary and Future Steps
Requirements
- Familiarity with networking concepts
- Proficiency with the Linux command line
- Understanding of containers and Kubernetes
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
Testimonials (1)
the technical preparation of teachers