github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-13 18:30:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
69eeca361bb70f178c4e664276e48a045e39cbca
awesome-kubernetes/v2-docs/istio.md

29 KiB
Raw Blame History

Istio

!!! info "Architectural Context" Detailed reference for Istio in the context of Networking & Service Mesh.

Cloud Infrastructure

Service Mesh

Architecture Decisions

Comparative Studies

Evaluations

Istio Mesh

Legacy Learning Resources

  • (2020) github.com/askmeegs/learn-istio 🌟 [EN CONTENT] 🌟 [LEGACY] — Practical repository dedicated to learning Istio basics. Note: Lacks recent updates (>4 years inactive), served primarily as a legacy training framework.

Production Case Studies

  • (2020) Riding the Tiger: Lessons Learned Implementing Istio 🌟 [EN CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A detailed engineering review of deploying Istio in production. Shares real-world lessons on configuring security policies, debugging network traffic, and balancing mesh performance.

Red Hat Integrations

Troubleshooting

  • (2021) karlstoney.com: Istio 503's with UC's and TCP Fun Times [EN CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A deep-dive technical article detailing how to diagnose and resolve Istio 503 errors and connection problems, detailing TCP state machine behavior in microservice networks.

Tutorials

Cloud Native Infrastructure

Data Plane

Envoy Gateway

Ingress Controllers
  • (2026) ==Envoy Gateway== ⭐ 2733 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [EMERGING] — The official Envoy Gateway project aimed at unifying ingress controller configurations using the Kubernetes Gateway API. Simplifies managing edge proxy deployments, routing rules, TLS terminations, and access logging under a standard, community-supported model.

Envoy Proxy

Installation and Setup
  • (2025) getenvoy.io [DOCUMENTATION] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Provides official distribution binaries, bootstrap configurations, and installation processes for the Envoy proxy. Serves as the critical starting point for running standalone proxy instances, learning Envoy configuration syntax, and custom edge ingress scenarios.

Observability

Distributed Tracing

Continuous Profiling
  • (2022) infracloud.io: Linking Traces with Continuous Profiling using Pyroscope [ADVANCED LEVEL] 🌟🌟🌟🌟 [EMERGING] [ENTERPRISE-STABLE] [GUIDE] — Explores the technical union of distributed tracing and continuous profiling using Pyroscope. Explains how linking execution traces directly with CPU and memory flame graphs enables engineers to find the precise lines of code driving microservice bottlenecks.
OpenTelemetry Integration
Production Deployment
  • (2020) hackernoon.com: A Guide to Deploying Jaeger on Kubernetes in Production [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — An operational manual detailing production-grade strategies for deploying Jaeger. Explains the differences between ephemeral, Elasticsearch, and Cassandra storage backends, and details the scaling of Jaeger collectors under intense trace ingestion loads.

Service Mesh (1)

Architecture

Deep Dives
Foundational Concepts
  • (2020) thenewstack.io: Why Do You Need Istio When You Already Have Kubernetes? 🌟 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — An analytical deep dive examining the key functional limits of native Kubernetes load balancing. Explains how an enterprise service mesh like Istio delivers crucial application-layer networking enhancements, including fine-grained traffic shifting, mTLS, and observability.
  • (2021) thenewstack.io: What Is Istio and Why Does Kubernetes Need it? 🌟 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Provides a thorough introduction to the core architecture of Istio, explaining the separation of the control plane (istiod) and the data plane (Envoy proxies). Explains the essential value proposition of adopting a service mesh, focusing on centralized security enforcement, resilient communication networks, and platform-level observability.
Hybrid Infrastructure
  • (2021) tetrate.io: VM to container communications 101 🌟🌟🌟 [GUIDE] [LEGACY] — Investigates the architectural patterns required to bridge legacy virtual machine workloads with containerized services residing in Kubernetes. Demonstrates how modern service meshes extend their control plane to non-containerized environments using WorkloadEntry resources, enabling seamless mutual TLS (mTLS) and uniform traffic control.
Sidecarless Architecture
  • (2022) ==istio.io: Introducing Ambient Mesh== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [EMERGING] [ENTERPRISE-STABLE] — The official announcement of Istio Ambient Mesh, introducing a sidecarless data plane model. Splits mesh tasks into a secure transport layer (ztunnel) and an optional L7 processing layer (waypoint proxies), reducing resource usage and simplifying operational overhead.

GitOps

Progressive Delivery
  • (2020) dev.to: A GitOps recipe for Progressive Delivery with Istio 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Details a practical architectural recipe for implementing Progressive Delivery using Flagger, Istio, and GitOps workflows. Explains how to automate canary releases, A/B testing, and blue-green deployments based on real-time metrics analyzed from Prometheus.

Industry Analysis

Ecosystem Evolution
  • (2021) thenewstack.io: Solo.io: Istio Is Winning the Service Mesh War 🌟🌟🌟 [CASE STUDY] [COMMUNITY-TOOL] — A historical industry retrospective tracing Istio's path to becoming the dominant service mesh specification. Details the consolidation of the service mesh ecosystem, the donation of Istio to the CNCF, and Solo.io's strategic alignment around Envoy and Istio technologies.

Istio (1)

Ingress and Gateways
  • (2022) tetrate.io: Using Istio Service Mesh as API Gateway 🌟 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Explores the technical viability and patterns for utilizing Istio's native Ingress Gateway as an API Gateway solution. Covers standard gateway requirements such as rate limiting, request transformation, CORS policy enforcement, and authentication delegation directly at the perimeter.
  • (2020) learncloudnative.com: Attach multiple VirtualServices to Istio Gateway 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A practical configuration guide explaining how to attach multiple VirtualService definitions to a singular shared Istio Gateway resource. Demonstrates host-matching strategies and wildcard configurations to safely share ingress infrastructure across distinct namespaces and engineering teams.
Learning Resources
  • (2023) redhat-scholars: istio-tutorial 🌟 ⭐ 1207 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — A hands-on, scenario-driven learning path designed by Red Hat to introduce developers to Istio's core operational capabilities. Covers basic deployment, routing rules, traffic splitting, dark launches, resilient patterns like circuit breaking, and advanced security configurations using Envoy proxies.
Release Analysis
  • (2021) thenewstack.io: Istio 1.10 Improves Scalability and Revision Control 🌟🌟 [LEGACY] — Highlights the key technical improvements delivered in the Istio 1.10 release, with a strong focus on canary control plane upgrades, safer discovery mechanisms, and memory consumption optimizations. Shows how sidecar injection was streamlined to minimize workload disruption.
Security and Encryption
  • (2021) samos-it.com: Securing Redis with Istio TLS origination 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A technical guide illustrating how to configure Istio to automatically perform TLS origination for traffic destined for a Redis database cluster. Explains the ServiceEntry and DestinationRule patterns required to secure transport-layer communications with external data systems.
Traffic Management
  • (2020) solo.io: Learn how to rate limit requests in Istio 🌟 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — An in-depth architectural guide on implementing rate limiting policies within an Istio service mesh topology. Explains the integration of Envoy's rate-limiting service with Istio's custom resource definitions. Provides concrete configuration patterns for EnvoyFilter and external rate limit service deployments to enforce global and local limits.

Istio Distributions

Source Code
  • (2023) github.com: Maistra Istio ⭐ 94 [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — The official GitHub repository for Maistra's modified Istio control plane code. Optimized for multi-tenancy support, advanced security policies, and tight integration within OpenShift environments.

Learning Resources (1)

Comprehensive Courses
Video Guides
  • (2021) youtube: Istio & Service Mesh - simply explained in 15 mins 🌟 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — An exceptionally clear, highly visual tutorial introducing the fundamental concepts of service mesh architectures, specifically focusing on Istio. Walks through sidecar injection, traffic management, and security benefits in an accessible format optimized for rapid onboarding.

Multi-Cluster

Automation Tools
  • (2024) istio-ecosystem/admiral ⭐ 636 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — An active Istio-ecosystem tool that automates multi-cluster configuration management. Eliminates the need to manually configure ServiceEntries and DNS across clusters, programmatically stitching distinct meshes together for transparent scale.
Management Planes
  • (2021) thenewstack.io: Multicluster Management with Kubernetes and Istio [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Explores the core design trade-offs of deploying multi-cluster Istio topologies, comparing primary-remote and multi-primary architectures. Discusses DNS resolution, secure gateway transit, and the consolidation of global service registries across heterogeneous cloud providers.
Testing and Simulation
  • (2021) piotrminkowski.com: Multicluster Traffic Mirroring with Istio and Kind 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Provides a complete local lab configuration demonstrating how to execute multi-cluster traffic mirroring using Istio deployed on Kind (Kubernetes-in-Docker) instances. Teaches engineers how to route safe read-only shadow traffic from a primary cluster to a remote secondary cluster.
Traffic Management (1)
  • (2021) tetrate.io: Multicluster Management with Kubernetes and Istio 🌟 [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Analyzes the complexities of coordinating multiple distinct Kubernetes clusters using a unified Istio service mesh strategy. Focuses on address space translation, cross-cluster routing topology design, and managing service-to-service mTLS boundaries across networks.

Observability (1)

Monitoring
  • (2021) sysdig.com: How to monitor Istio, the Kubernetes service mesh 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A comprehensive guide to obtaining full observability into the Istio control plane (istiod) and data plane (Envoy sidecars). Walks through configuring Prometheus metrics, Grafana dashboards, and Sysdig Monitor to track golden signals such as latency, errors, traffic saturation, and routing health.
Source Code (1)
  • (2026) ==github.com: kiali== ⭐ 3613 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The source repository for Kiali, an indispensable observability dashboard. Provides real-time interactive topologies, configuration validation, and native wizard-based creations of complex traffic routing mechanisms directly within Istio.
Troubleshooting (1)
  • (2021) itnext.io: Find issues in your Istio mesh with Kiali 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Demonstrates how to diagnose, troubleshoot, and fix misconfigured routing rules and service-to-service communication failures using Kiali. Teaches developers how to read the visual topological graph to pinpoint bottlenecks and broken security boundaries.
Visualization
  • (2025) ==kiali.io== [DOCUMENTATION] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [ENTERPRISE-STABLE] — The home portal for Kiali, the de facto standard visual console for Istio service mesh topologies. It aggregates Prometheus metrics, Jaeger traces, and Istio configurations to display active traffic flows, circuit breakers, and network health anomalies.

Operations

Lifecycle Management
  • (2021) solo.io: Upgrading Istio without Downtime [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — A mission-critical operational guide for performing seamless, zero-downtime upgrades of the Istio service mesh in production environments. Details the canary upgrade process (revision tags) for both the control plane (istiod) and long-running Envoy sidecar data planes.

Performance

eBPF Acceleration
  • (2022) istio.io: Merbridge - Accelerate your mesh with eBPF [ADVANCED LEVEL] 🌟🌟🌟🌟 [EMERGING] [ENTERPRISE-STABLE] — Introduces Merbridge, an open-source tool utilizing eBPF to optimize network routing within service meshes. Shows how replacing standard iptables redirection rules with eBPF sockops can significantly bypass TCP/IP stack overhead and lower pod-to-pod latency.

Security

Authentication and Authorization
  • (2021) thenewstack.io: Securing Istio Workloads with Auth0 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A tutorial walking through the implementation of JSON Web Token (JWT) validation at the service mesh edge. Shows how to integrate external identity providers like Auth0 with Istio's RequestAuthentication and AuthorizationPolicy CRDs to secure API endpoints.

Traffic Management (2)

High Availability
  • (2021) istio.io: Configuring failover for external services [DOCUMENTATION] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — An authoritative guide from the official Istio project explaining how to construct locality-aware failover routing rules for external integrations. Details the interplay between ServiceEntry definitions, DestinationRules, and Envoy's outlier detection mechanics to achieve dynamic failover.
Traffic Shaping
  • (2020) itnext.io: Taffic Shaping - Kubernetes & Istio | Daniele Polencic 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Demonstrates practical scenarios for traffic shaping and network manipulation utilizing Istio's VirtualServices and DestinationRules. Covers key microservice patterns including rate limiting, service delays, fault injection, and custom routing configurations.
gRPC Load Balancing
  • (2020) useanvil.com: Load balancing gRPC in Kubernetes with Istio 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Explores the specific challenges of load balancing HTTP/2 and gRPC connections in Kubernetes environments, where traditional L4 load balancers fail. Demonstrates how Istio performs true request-level L7 load balancing to evenly distribute traffic across backends.

Cloud Providers

AWS

App Mesh

Service Mesh (2)
  • (2019) allthingsdistributed.com: Redefining application communications with AWS App Mesh 🌟🌟🌟 [LEGACY] — This foundational article by AWS CTO Werner Vogels outlines the initial design philosophy of AWS App Mesh. While historically valuable for understanding multi-tenant application boundaries across ECS and EKS, the service was officially deprecated in 2024. Teams are heavily advised to migrate to modern alternatives like VPC Lattice.

Networking

Service Mesh (3)

Istio (2)

Performance Testing
  • (2025) Istio Performance/Stability Testing ⭐ 372 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — The official benchmarking and performance analysis framework from the Istio project. It contains test suites designed to help platform engineers run automated stability checks, identify Envoy memory leakage, and measure sidecar-added latency under synthetic load conditions.

Observability (2)

Service Mesh (4)

Istio (3)

gRPC Monitoring
  • (2021) itnext.io: Observing gRPC-based Microservices on Amazon EKS running Istio [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — A deep dive tutorial explaining telemetry configuration for gRPC-based microservices on Amazon EKS running Istio. Offers practical configurations for capturing service-to-service call latency, tracing headers, and standard Envoy metrics at the pod boundary.

💡 Explore Related: Caching | Servicemesh | Kubernetes Networking

Reference in New Issue View Git Blame Copy Permalink