Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to Service Mesh Technology
- The challenges associated with managing microservices at scale
- The specific problems a service mesh addresses
- A comparative analysis of Istio against other service mesh solutions (Linkerd, Consul)
Fundamentals of Kubernetes Networking
- The standard Kubernetes networking model
- Services, Ingress controllers, and load balancing mechanisms
- Constraints inherent in native Kubernetes networking
Istio Capabilities and Architectural Design
- Distinction between the control plane and data plane
- The function of Envoy sidecar proxies
- Essential Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Deploying Istio on Kubernetes
- Preparing a Kubernetes cluster to support Istio
- Executing Istio installation using Helm and Istioctl
- Confirming installation success and sidecar injection
Managing Traffic with Istio
- Setting up routing rules, retries, and failover strategies
- Implementing Blue/green and canary release strategies
- Leveraging Istio Gateway for inbound traffic management
Securing the Service Mesh with Istio
- Applying Mutual TLS (mTLS) for inter-service authentication
- Defining authorization policies using RBAC and ABAC
- Integrating Zero Trust architecture principles within Istio
Observability and Monitoring Strategies
- Utilizing Prometheus and Grafana alongside Istio
- Performing distributed tracing with Jaeger and Zipkin
- Interpreting metrics, logs, and trace data
Combining Istio with Calico
- Enforcing advanced network policies
- Protecting pod-to-pod data flows
- Recommended best practices for Istio and Calico integrations
Troubleshooting Techniques and Best Practices
- Identifying frequent issues in Istio implementations
- Diagnosing problems with sidecar proxies
- Operational guidelines for maintaining production service meshes
Course Conclusion and Future Directions
Requirements
- Familiarity with fundamental networking concepts
- Proficiency in using the Linux command line
- Solid knowledge of containers and Kubernetes
Target Audience
- Software Developers
- Cloud Architects
- DevOps Engineers
- Network Engineers
- System Administrators
Testimonials (1)
the technical preparation of teachers