In this video, we will explore Cilium’s, Service Mesh. We will start by defining a Service Mesh and then review an older and established Service Mesh provider Istio’s architecture. We will then dive into Cilium’s Service Mesh architecture to contrast the two and what advantages Cilium brings to the table. We will also discuss Cilium’s various new Mesh offering such as ingress (including TLS termination), L7 traffic management, and its future mTLS and encryption architecture. I will also cover an overview of mTLS in this video, discussing how it works, how it is implanted in sidecar-based Mesh providers like Istio, and how Cilium is envisioning it to be implanted in the future version of its Serve Mesh.
Demo scripts: https://github.com/gary-RR/myYouTube_video_Cilium-Service_Mesh
Timecodes
0:00 - Intro
2:27 - Istio's Service Mesh Architecture.
5:53 - Cilium's Long-Term Service Mesh Vision.
6:57 - Cilium Service Mesh and eBPF, and Overview of What Features were Implemented in V1.12.2
10:08 - Demo: Enable Service Mesh, Ingress Controller Config, and Run Sample Apps(Rest and GRPC)
33:23 - Ingress Visualization of The Previous Demo
38:11 - Ingress TLS Termination and Demo
49:02 - L7-Aware Traffic Management Features and Overview
50:39 - L7-Aware Traffic Management Demo(Weighted Load Balancing, Retry Policy,Path Translation,...)
1:13:35 - MTLS (Mutual TLS) Overview
1:20:15 - How MTLS is Implemented in Sidecar-Based Service Meshes (Istio in this case)
1:22:26 - Cilium's Vision for MTLS and Message Encryption
1:29:15 - Final Thoughts
My Other Videos:
► Cilium Kubernetes CNI Provider: Part 4, IP Routing Modes (Direct and Encapsulated)
https://youtu.be/j2aox7K-7wU
► Cilium Kubernetes CNI Provider, Part 3: Cluster Mesh
https://youtu.be/gkrPt0ZcCfo
►Cilium Kubernetes CNI Provider, Part 2: Security Policies and Observability Leveraging Hubble
https://youtu.be/5EcVrm01rAU
► Cilium Kubernetes CNI Provider, Part 1: Overview of eBPF and Cilium and the Installation Process https://youtu.be/aLq3O3l2LF4
► What is VXLAN and How It is Used as an Overlay Network in Kubernetes?
https://youtu.be/WMLSD2y2Ig4
► Managing Linux Log-ins, Users, and Machines in Active Directory (AD): Part 2- Join Linux Machines to AD:
https://youtu.be/1tgqdz3lw-k
► Managing Linux Log-ins, Users, and Machines in Active Directory (AD): Part 1- Setup AD:
https://youtu.be/ftxxO381-_Q
► Sharing Resources between Windows and Linux:
https://youtu.be/MzHX6eUlZfs
► Kubernetes Kube-proxy Modes: iptables and ipvs, Deep Dive:
https://youtu.be/lkXLsD6-4jA
►Kubernetes: Configuration as Data: Environment Variables, ConfigMaps, and Secrets:
https://youtu.be/mjcNIaRDAsc
►Configuring and Managing Storage in Kubernetes:
https://youtu.be/U11YjaRvCd4
► Istio Service Mesh – Securing Kubernetes Workloads:
https://youtu.be/GFXjlPBsykM
► Istio Service Mesh – Intro
https://youtu.be/x_HRl-Ehvb8
► Understanding Kubernetes Networking. Part 6: Calico Network Policies:
https://youtu.be/sxB9-td1-F8
► Understanding Kubernetes Networking. Part 5: Intro to Kubernetes Network Policies:
https://youtu.be/vjhA9TJWw-k
► Understanding Kubernetes Networking. Part 4: Kubernetes Services:
https://youtu.be/BZk2HUKsxAQ
► Understanding Kubernetes Networking Part 3: Calico Kubernetes CNI Provider in depth:
https://youtu.be/vOo__3GqyxM
► Understanding Kubernetes Networking. Part 2: POD Network, CNI, and Flannel CNI: Plug-in: https://www.youtube.com/watch?v=U35C0EPSwoY
►Understanding Kubernetes Networking. Part 1: Container Networking: https://www.youtube.com/watch?v=ApeX6IAOfOc
► Setup a Linux-Windows (Calico-based) Hybrid Kubernetes Cluster to Host .NET Containers:
https://youtu.be/DMKS43POa5s
► A Docker and Kubernetes tutorial for beginners:
A Docker and Kubernetes tutorial for beginners. - YouTube
► Setup a "Docker-less" Multi-node Kubernetes Cluster on Ubuntu Server:
https://youtu.be/H9YfKliGuUY
►Step by Step Instructions on Setting up Multi-Node Kubernetes Cluster on CentOS: https://www.youtube.com/watch?v=2Tr7hNW02fg
►Setup and Configure CentOS Linux Server on A Windows 10 Hypervisor - YouTube: https://www.youtube.com/watch?v=CBfJXZitG-o
►Setup NAT (Network Address Translation) on Hyper-V: https://www.youtube.com/watch?v=PYamsYQSmFY
► Enable Nested Virtualization on Windows to run WSL 2 (Linux) and Hyper-V on a VM: https://www.youtube.com/watch?v=Y1U2YnnowsE
►Setup a Multi-Node MicroK8S Cluster on Windows 10: https://www.youtube.com/watch?v=fZVivQYDU8k
► Detailed Windows Terminal, (WSL 2), Linux, Docker, and Kubernetes Install Guide on Windows 10:
https://www.youtube.com/watch?v=5MlLVjZJcyI