#IstioCon Preserve Original Source Address within Istio Zhonghu Xu @hzxuzhonghu #IstioCon About me Zhonghu Xu：an open source engineer from Huawei Cloud. - Github：https://github.com/hzxuzhonghu com/hzxuzhonghu - Istio steering committee member - Istio Core Maintainer & Contributor - Open source enthusiastic, previously Kubernetes active contributor and Volcano maintainer #IstioCon Agenda 1. TCP Original EIP: 192.168.1.100 #IstioCon What does envoy provide? - Original source filter “envoy.filters.listener.original_src” The original source listener filter replicates the downstream remote address of the

Summary Synopsis In the summer of 2020, Google enlisted NCC Group to perform an assessment on the open-source version of Istio and all of its components. Istio is a modern service mesh technology stack often environment was deployed following Istio Documentation using istioc tl. The assessment included many open source compo- nents that were actively being updated during testing so testers used the latest release Local Test Environment Consultants 4 Level of Effort 50 person days Targets istio/istio Istio Source code in the master branch up to July 15th, 2020. Commit: 7353c84b560fd469123611476314e4aee553611d

PRESENTS Istio Security Audit In collaboration with the Istio projects maintainers and The Open Source Technology Improvement Fund, Inc (OSTIF). ostif.org Authors Adam Korczynski Leader ajayaram@google.com Andrea Ma So�ware Engineer ayma@us.ibm.com Craig Box VP of Open Source and Community craigb@armosec.io Didier Grelin Sr. Technical Program Manager dgrelin@google.com Ethan prioritised. This is already a great foundation for a secure product, and it demonstrates that the Istio community has formulated a threat model that is used to assess which parts of Istio are particularly exposed

and Istio, contributor of the Knative and Cloud Foundry community, maintainer of a Knative benchmarking tool called kperf, speaker of Open Source Summit China 2019 about Istio integration with containerized Working on IBM Cloud Code Engine (Serverless platform), focusing on Knative, Istio, and Tekton, community, leading team to develop and offer serverless capabilities in IBM Cloud, which based on these Opensource Knative. It is leveraged for Net-istio is A Knative ingress controller for Istio. Knative is an open source project which provides a set of components (Serving and Eventing) that introduce event-driven

636 #IstioCon Most popular sessions in Chinese Session China: Opening & Panel: Istio Istio Open Source Ecosystem Outlook From China The road to microservice for Database as a Service (DBaaS) via quickly access to the playbacks." "Great to see how common problems were solved by other community members through the various istiocon sessions, really informative!" "This is the best conference Istio.io users were first-time users during the month of April 2022. Impact for the project Source: http://eng.istio.io/ The team (1/3) Program Committee Co-lead Lin Sun (Solo.io) Co-lead Mitch

Security Varun Talwar Co-founder Co-creator gRPC, Istio Lizan Zhou Senior Maintainer, Envoy Community & Industry Leaders ● Founded CNCF SIG Security ● Secure and Hardened Istio and Envoy builds ● a zero-trust network for application connectivity. • We are committed to maintaining Istio's open source ecosystem. 《深入理解 Istio》 • 电子工业出版社 • 2022 年 6 月出版 • 云原生社区著 • 基于 Istio 1.11 与我联系 https://www

networking : Linux, Kubernetes and Envoy ● Be patient and resisting the temptations from users to open features too early ● Mechanisms to improve the reliability of Istio 30 Choose your fights, start loose coupling? This issue opened last year explains the problem and its fatality. Thankfully, the community is working on a solution. (Contributing is important!!!) But we didn’t have the time to wait for Istio ● Putting sidecars everywhere has a cost ○ Latency ○ Compute resources The Istio 1.9 community reference values for sidecar performance are: ● Latency: +2.65 ms at p90 (no telemetry) ● Compute

Notes ○ Release date slip ○ Release with known issues ○ Performance and resource usage ● Istio community didn’t have a process #IstioCon Led To ● Upgrade Working Group ● Release Note Generation ● usage ○ Open issues ○ Features being promoted ○ Release notes and upgrade notes #IstioCon Continuous Release Health ● New dashboard being created to allow visibility of release health ● Open issues and priorities ● Issues being promoted ● Features awaiting documentation ● Weekly performance ● Open release blockers #IstioCon Thanks also to the efforts of: ● Mitch Connors ● Nathan Mittler ●

microservices with Istio step by step Best practice: from Spring Cloud to Istio Preserve original source address within Istio Performance tuning and best practices in a Knative based, large-scale was an amazing event in every way of that! From the speakers and presentations, to the hosts, community, activities, gifts, online gathering platform, and even the amazing artists for the caricatures Feb. 87% Of Istio users are new users at the end of February 2021. Impact for the project Source: http://eng.istio.io/ The team (1/3) Organizer’s Committee Co-lead Aizhamal Nurmamat kyzy (Google)

2022-09 Community Growth New Contributors up 32% YoY 2022 2023 Contributor Experience Get Involved Ask Questions ● Join our Slack and interact live with other members of the Istio community. ● Bring rapidly to vulnerability reports. Read how to submit an issue. Become a Contributor ● The Istio Community README is the starting point for contributors who want to work on code, docs or other parts of Istio Google Group. ● Interested in helping with Chinese language documentation? Join the Cloud Native Community(China). Istio Trends ιστίο • (istío) n (plural ιστία) 1. sail What about the rest of the boat