Loading…

Sign up or log in to bookmark your favorites and sync them to your phone or calendar.

Istio - KubeCon [clear filter]
Friday, December 8
 

11:10am

IoK: Istio-on-Kubernetes Deep Dive [I] - Daneyon Hansen, Cisco
Running microservices at scale is not easy. Istio is an open platform to connect, manage, and secure microservices. Did I mention that Istio runs on Kubernetes? During the talk I will cover the following content:
- Istio Introduction
- Istio Key Concepts- Traffic Management, Auth, Policy, etc.
- Istio Demonstration
- Istio-on-Kubernetes Roadmap
- Q&A

Speakers
avatar for Daneyon Hansen

Daneyon Hansen

Principal Software Engineer, Cisco
Daneyon is a software engineer at Cisco responsible for developing distributed applications. As part of the Cloud CTO Office, Daneyon focuses on contributing to emerging cloud computing technologies such as Kubernetes, Istio and others.



Friday December 8, 2017 11:10am - 11:45am
Meeting Room 9AB, Level 3

11:55am

Istio: Sailing to a Secure Services Mesh [I] - Spike Curtis, Tigera & Dan Berg, IBM
Istio is an open platform that provides a uniform way to connect, manage, and secure microservices. In this presentation we describe the security features of the Istio service mesh: how it helps you secure service-to-service communication across clouds without application code changes, provide robust identity and strong authentication, and enforce powerful authorization policies for your applications. We discuss the current project status and look ahead to the roadmap for security features.

Speakers
avatar for Daniel Berg

Daniel Berg

Distinguished Engineer, IBM
Daniel is an IBM Distinguished Engineer responsible for the container and service mesh technical strategy within IBM Cloud. He has direct responsibility for the technical architecture and delivery of the IBM Cloud Kubernetes Service providing managed Kubernetes clusters worldwide... Read More →
avatar for Spike Curtis

Spike Curtis

Senior Software Engineer, Tigera
Spike Curtis is a software developer at Tigera. He co-leads the Istio Security Working Group and is a contributing author of SPIFFE specifications.  He is also a core developer for Calico.



Friday December 8, 2017 11:55am - 12:30pm
Ballroom A, Level 1

2:00pm

Setting Sail with Istio [B] - Lachlan Evenson, Microsoft
Even with Kubernetes, doing microservices is hard. In this session we will dive into Istio, A platform that builds on Kubernetes primitives and simplifies building and securing microservices. This session is a soup to nuts walkthrough of the Istio architecture along with diving into deploying a microservice onto Istio from a user perspective. For those interested in learning more about Istio, this session is a great introduction and will be very hands on.

Speakers
avatar for Lachlan Evenson

Lachlan Evenson

Principal Program Manager - Azure Container Compute, Microsoft
Lachlan is a Principal Program Manager on the Container Compute team at Azure. He has spent the last few years working with Kubernetes and enabling Cloud Native journeys. Lachie serves as a Cloud Native ambassador and TOC contributor, and has deep operational knowledge of many Cloud... Read More →



Friday December 8, 2017 2:00pm - 2:35pm
Meeting Room 9AB, Level 3

2:45pm

Reliable Application Roll Out and Operations with Istio [B] - Lin Sun, IBM & Mandar Jog, Google
Do you wish for a premium user experience as your team delivers new code to production with speed and agility? Have your users been caught off guard with new feature and enhancement continuously delivered to the cloud? Do you have services go dark while other service can’t handle graceful degradation? Do some of your services get overloaded with too many requests occasionally? If you have experienced some or all of these concerns, we have the answer and it’s service mesh with Istio!

Join us to hear how you can leverage Istio’s intelligent routing feature to roll out newer version of services, apply rate limiting to your services to shed load and gracefully degrade as services fail, and visualize the dependencies and flow of traffic between services to provide optimized user experience to your users as you continuously deliver new updates to your microservice based application.

Speakers
avatar for Mandar Jog

Mandar Jog

Istio TL/M, Google
Mandar is a co-lead of the Istio extensions and the Istio performance and scalability workgroups. He would like to see adoption of service meshes everywhere so as to realize the full promise of micro services architecture. Mandar has been working on the Isio project since its inception... Read More →
avatar for Lin Sun

Lin Sun

Senior Technical Staff Member, IBM
Lin has been working on container and cloud-native since 2014 from Docker to Kubernetes to Service Mesh. She is currently an Istio maintainer, a member of the Istio steering committee and technical oversight committee. She is passionate about new technologies and loves to play with... Read More →


Friday December 8, 2017 2:45pm - 3:20pm
Meeting Room 9AB, Level 3

3:40pm

Enable your Microservices with Advanced Resiliency and Fault Tolerance Leveraging Istio [I] - Animesh Singh & Tommy Li, IBM
Building and packaging microservices is one part of the story. Given a highly salable and distributed microservices deployment is going to face failures at different layers, how do we make these microservices resilient and fault tolerant? How do we enforce policy decisions such as fine-grained access control and rate limits? How do we enabled timeouts/retries, health checks etc? Even though some language specific frameworks address these issues, the implementation is often framework or language specific.

If the underlying framework or language changes, the resiliency features need to be reimplemented or ported over. And in some cases, applications also have the responsibility of implementing the code and configuration required for resiliency and fault tolerance. A Service-mesh architecture attempts to solve these issues by extracting the common resiliency features needed by a microservice framework away from the applications and frameworks and into the platform itself. Istio provides an easy way to create this service mesh.

In this talk we will discuss how to build, deploy, connect your Java microservices leveraging Istio service mesh. We then show how to configure and use circuit breakers, timeouts/retries, rate limits and other advanced resiliency features from Istio without changing the application code.

Speakers
avatar for Tommy Li

Tommy Li

Software Developer, IBM
Tommy Li is a software developer in IBM focusing on Cloud, Kubernetes, and Machine Learning. He is one of the Fabric for Deep Learning’s main contributors and worked on various developer code patterns on Kubernetes, Microservice, and deep learning application to provide use cases... Read More →
avatar for Animesh Singh

Animesh Singh

Chief Architect and Program Director, IBM
Animesh Singh is a Program Director and Chief Architect for the IBM Watson and Cloud Open Source Platform, where he leads machine learning and deep learning initiatives on IBM Cloud and works with communities and customers to design and implement deep learning, machine learning, and... Read More →


Friday December 8, 2017 3:40pm - 4:15pm
Meeting Room 9AB, Level 3

4:25pm

Istio’s Mixer: Policy Enforcement with Custom Adapters [I] - Limin Wang, Google & Torin Sandall, Styra
The Istio service mesh provides a highly extensible platform to connect, manage, and secure microservices. Istio’s highly extensible nature is one of the main selling points as it allows you to enforce your own organization-specific policies across large fleets of microservices. At the same time, new technology always has a learning curve, and with all this extensibility and generality the task can be quite daunting.

In this talk, Limin Wang (Software Engineer at Google) and Torin Sandall (Technical Lead of the Open Policy Agent project) explain how Istio’s Mixer works and lead a deep dive into Mixer Adapter development. The talk shows (with demos) how the Mixer Adapter model enables custom policy enforcement and how the model is used to integrate third party policy engines like the Open Policy Agent.

This talk is targeted at platform engineers interested in using the Istio service mesh to enforce custom policies in their microservices. The talk also provides new ideas about the kinds of policies that can be enforced in Istio today.

Speakers
avatar for Torin Sandall

Torin Sandall

Software Engineer, Styra
Torin Sandall is a co-founder of the Open Policy Agent (OPA) project. Torin has spent 10 years as a software engineer working on large-scale distributed systems projects. Torin is a frequent speaker at events like KubeCon, DockerCon, Velocity, and more. Prior to working on OPA, Torin... Read More →
LW

Limin Wang

Staff Software Engineer, Google
Limin Wang is a software engineer at Google. She is a technical lead of the Istio Security project. Before joining Google, she was a senior software engineer at VMware. Limin holds a PhD degree in Computer Science from Michigan State University.



Friday December 8, 2017 4:25pm - 5:00pm
Meeting Room 9AB, Level 3