Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Overview of Service Mesh Technology
- Complexities associated with managing microservices at scale
- Key functions addressed by service mesh infrastructure
- Comparative analysis of Istio against alternative solutions (Linkerd, Consul)
Kubernetes Networking Principles
- Fundamental components of the Kubernetes networking model
- Implementation of Services, Ingress controllers, and load balancing mechanisms
- Identified constraints within native Kubernetes networking capabilities
Istio Capabilities and System Architecture
- Distinction between control plane operations and data plane execution
- Functionality of Envoy sidecar proxies
- Core Istio components: Pilot, Citadel, Mixer (legacy), and Istiod
Deployment of Istio on Kubernetes Environments
- Prerequisites for configuring Kubernetes clusters to support Istio
- Procedures for installing Istio using Helm and Istioctl tools
- Validation of installation integrity and sidecar proxy injection
Management of Istio Traffic Routing
- Configuration of routing rules, retry policies, and failover protocols
- Execution of blue/green and canary deployment strategies
- Utilization of Istio Gateway for managing ingress traffic flows
Securing Service Mesh Communications with Istio
- Implementation of Mutual TLS (mTLS) to ensure service-to-service authentication
- Definition and application of authorization policies (RBAC and ABAC)
- Adoption of Zero Trust security frameworks within Istio environments for government applications
System Observability and Monitoring
- Integration of Prometheus and Grafana for data collection and visualization with Istio
- Implementation of distributed tracing using Jaeger and Zipkin
- Analysis of aggregated metrics, logs, and trace data
Integration of Istio with Calico Network Policies
- Enforcement of advanced network segmentation policies
- Securing inter-pod communication channels
- Recommended practices for deploying combined Istio and Calico solutions
Troubleshooting Methodologies and Operational Best Practices
- Identification and resolution of common issues in Istio deployments
- Diagnostic procedures for Envoy sidecar proxies
- Operational guidelines for maintaining production-grade service meshes
Summary and Future Direction
Requirements
- Proficiency in foundational networking principles
- Competence with Linux operating system commands
- Familiarity with containerization technologies and Kubernetes orchestration
Intended Recipients
- Software developers
- Cloud infrastructure architects
- DevOps practitioners
- Network engineers
- System administrators
14 Hours
Testimonials (1)
the technical preparation of teachers