7353c84b560fd469123611476314e4aee553611d • github.com/istio/proxy – c51fe751a17441b5ab3f5487c37e129e44eec823 • github.com/istio/istio.io – 26dacdde40968a37ba9eaa864d40e45051ec5448 Key Findings • There Source code in the master branch up to July 15th, 2020. Commit: 7353c84b560fd469123611476314e4aee553611d istio/proxy Istio Envoy Proxy code in the master branch up to July 15th, 2020. Commit: c51fe751a17 security guidelines from the master branch up to July 15th, 2020. Commit: 26dacdde40968a37ba9eaa864d40e45051ec5448 Finding Breakdown Critical issues 0 High issues 4 Medium issues 5 Low issues 7 Informational

k8s production environment Line Moseng @linemoseng Johnny Horvi Norwegian Labour and Welfare Administration 5,2 million nais.io github.com/nais CD CD metrics alerts deploy cache events logs

Istio is a long wild river: how to navigate it safely 2 About me Raphael Fraysse @la1nra (Twitter) Github / @lainra Tech Lead, Networking Mercari, Inc. 3 Today’s agenda ● Istio at Mercari Deployment 4. Delete old Deployment Simple, isn’t it? Now, repeat for hundreds of services! Good luck :D 51 Label selector updates for app and version labels Adopting Istio A more sustainable approach: Pod Svc authn/z 1 2 3 1 2 Client Pod Svc A Pod Svc B Pod Svc C Pod Svc D Pod Svc authn/z 1 2 3 4 5 62 Istio proxy performance and capacity Adopting Istio Service

#IstioCon 5 tips for your first Istio.io Contribution Albert Sun | @albertsun0 #IstioCon About Me I’m a high schooler who loves learning about everything related to computers, especially interface

HelmChart that you can use to deploy istio-redirector on your own cluster. Feel free to reach to me for any questions if you want to implement it in your company! #IstioCon Thank you! @etifontaine

张之晗 Tetrate ⼯程师/Istio 社区 Release Manager 服务⽹格安全—— 理解 Istio CNI Istio Meetup China About me Istio 1.10 Release Manager, Istio Community, 2021-Present GetMesh(GetIstio) core contributor, Istio Community

single track mode of this conference as well as the very quick access to playbacks. It allows me to not have to choose between sessions but if I do I have very quickly access to the playbacks

#IstioCon Preserve Original Source Address within Istio Zhonghu Xu @hzxuzhonghu #IstioCon About me Zhonghu Xu：an open source engineer from Huawei Cloud. - Github：https://github.com/hzxuzhonghu -

disk space, a Denial-of-Service scenario would happen. Case 1 https://github.com/istio/istio/blob/d86fa8b48356c92b6c73b5831c18df893a4ae861/operat or/pkg/helm/urlfetcher.go#L89 74 75 76 77 78 79 80 81 traverse the file system and perform out of bounds file writes. https://github.com/istio/istio/blob/d0705cf0ed5591cc26c08001f3faab0a880aec48/operato r/pkg/util/tgz/tgz.go#L70 70 71 72 73 74 75 76 77 78 Description If execution goes into this branch, outFile is not closed: https://github.com/istio/istio/blob/d0705cf0ed5591cc26c08001f3faab0a880aec48/operato r/pkg/util/tgz/tgz.go#L107 103 104 105 106 107 108 109