request: can access reviews-v1, reviews-v3 can not access reviews-v2 since we have enabled ISTIO_MUTUAL mode on client side Access productpage 1) Apply destination rule enable client side mTLS mTLS services outside of the mesh ● ISTIO_MUTUAL: originate TLS with istio cert ● SIMPLE/MUTUAL: originate TLS with the cert you specified, common if you want to TLS with service outside mesh apiVersion: DestinationRule metadata: name: reviews spec: host: reviews trafficPolicy: tls: mode: ISTIO_MUTUAL 1) Generate client and server certificates and keys 2) Create a secret for the ingress

当然，我们需要调小 gridDim * blockDim 使其远小于 n ，这样才能够减少原子操作 的次数。比如右边就减少了 4096/512=8 倍的原子操作。这就是胡渊鸣所说的 TLS 。 第 8 章：板块与共享内存 到底为什么需要区分出板块的概念？ • 之前说到实际的线程数量就是板块数量 (gridDim) 乘以每板块线程数量 (blockDim) 。 • 那么为什么中间要插一个板块呢？感觉很