(NFV) #IstioCon Hybrid and Multi Clouds #IstioCon Istio VM Integration is? A Tumultuous Odyssey… [1] Istio 1.8: A Virtual Machine Integration Odyssey, Jimmy Song #IstioCon V0.2 Mesh Expansion ● Prerequisites VMs to Kubernetes integration ○ Reduced load on your DNS servers w/ faster resolution ○ Automatic VIP allocation where possible ○ Multicluster DNS lookup #IstioCon V1.9 VM Integration, Beta! ● DNS_AUTO_ALLOCATE Virtual Machine Architecture to learn about the high level architecture of Istio’s virtual machine integration. ○ Debugging Virtual Machines to learn more about troubleshooting issues with virtual machines

23.5 44.9 Unlimited throughput Improved performance because of elimination of integration intermediary Integration expenses reduction Cloud oriented technology Control Plane Pod Service Pod Service Cloud-Native Event Hub • Full Support for VM-Based Workloads • UX Simplification CONTACT US Head of integration department Igor Gustomyasov Sber IVGustomyasov.SBT@sberbank.ru Open source system architect

Plane ● Front Envoy ● Multi Cluster support ● XCP Central -> XCP Edge TSB Control Plane ● VM integration ● XCP Edge ● Upstream Istio ● XCP Central -> Edge ● TSB CR -> Istio CR TSB Config Data Flow Plane Pods ● Operators: Istio, Onboarding, TSB, XCP ● OTEL collector, Zipkin, Istiod, Edge VM Integration ● Install DEB/RPM package of the Istio Sidecar on that VM ● Install DEB/RPM package of the Workload Gateway Ingress & Egress Mesh include VMs Before using service mesh: 100+ Kubernetes cluster ● VM integration ● On-prem, AWS, Azure, GCP, OpenShift ● 10000+ core business apps ● Plan to move to public cloud

Service Entry ○ Destination Rule ● Blocked ○ Envoy Filters ○ Gateways Developer Platform Integration ● Mesh Automation ○ Control Plane Install/Upgrade ○ Admiral cluster registration ● Higher Level

io/latest/blog/2020/tradewinds-2020/ #IstioCon Other improvement areas ● Native Kubernetes API integration ○ Kubernetes Service APIs ○ Kubernetes Multi-cluster APIs ● Adopt & drive innovation in Envoy

Istio & Zero Trust) Running Istio at Scale for a Secure and Compliant Cloud External CA integration with Istio explained Managed service mesh as a distributed cloud service Lessons Learned

catalog | CONFIDENTIAL #Rollbacks MTTR #Bugs Release Velocity Scale API Functional & Integration Testing Improve productivity of each of your developers 10x API test and mock creation speed

Knative benchmarking tool called kperf, speaker of Open Source Summit China 2019 about Istio integration with containerized Cloud Foundry Yu Zhuang, yuzcdl@cn.ibm.com, https://www.linkedin.com/in/yu-zhuang-

triage and assess criticality. Results summarised 6 fuzzers written and added to Istio's OSS-Fuzz integration 1 CVE found in Golang 1 vulnerability found that affected Googles managed Istio offering 11