Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to Service Mesh
- Challenges in managing microservices at scale
- The specific problems a service mesh addresses
- Comparison of Istio with alternative service meshes (Linkerd, Consul)
Fundamentals of Kubernetes Networking
- The core networking model in Kubernetes
- Services, Ingress, and load balancing mechanisms
- Constraints of native Kubernetes networking
Istio Features and Architecture
- Distinction between control plane and data plane
- The function of Envoy sidecars
- Essential Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Installing Istio on Kubernetes
- Readying a Kubernetes cluster for Istio deployment
- Deploying Istio using Helm and Istioctl
- Validating the installation and sidecar injection
Managing Traffic with Istio
- Setting up routing, retries, and failover mechanisms
- Implementing blue/green and canary deployments
- Utilizing the Istio Gateway for ingress traffic
Securing Service Meshes with Istio
- Implementing mutual TLS (mTLS) for inter-service authentication
- Defining authorization policies (RBAC and ABAC)
- Applying Zero Trust architecture within Istio
Observability and Monitoring
- Integrating Prometheus and Grafana with Istio
- Performing distributed tracing using Jaeger and Zipkin
- Interpreting metrics, logs, and traces
Combining Istio with Calico
- Enforcing advanced network policies
- Protecting pod-to-pod communication
- Best practices for deploying Istio alongside Calico
Troubleshooting and Best Practices
- Addressing common issues in Istio deployments
- Diagnosing sidecar proxy issues
- Operational best practices for production-grade service meshes
Summary and Next Steps
Requirements
- Familiarity with networking concepts
- Proficiency with the Linux command line
- Working knowledge of containers and Kubernetes
Target Audience
- Developers
- Cloud architects
- DevOps engineers
- Network engineers
- System administrators
Testimonials (1)
the technical preparation of teachers