Cloud Native Computing Foundation / ServiceMeshCon 2019 (San Diego)

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

An Intro to Network Service Mesh (NSM) and Its Relationship to Service Mesh - John Joyce & Tim Swanson, Cisco

Open Source has many application service mesh related projects (Istio,Linkerd, SMI, etc.). Network Service Mesh (NSM), a relatively new addition to the Open Source landscape, aims to solve a slightly different problem. Used together they are immensely powerful. NSM aims to solve problems dealing with heterogeneous network configurations and multicloud scenarios, especially when exotic protocols like tunnelling are required. NSM can be used to solve microservice specific multicloud connectivity issues, but even with that connectivity, application service mesh integration with Istio doesn’t come for free. Application service mesh solutions are great in single cloud environments but become unwieldy or unusable across multiple environments. In this talk and demo we will show an NSM multicloud application connectivity solution with Istio integration to provide the control, security and observability applications require ACROSS multiple clouds. We will demo an NSM adapter for Istio which provides Istio a view of the NSM connected workloads. This will allow Istio to provide seamless control over microservices regardless of how they are connected.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Ask Me Anything About Service Mesh

Speakers: Christian Posta, Louis Ryan, William Morgan, Lin Sun, Idit Levine, Zack Butcher
As part of the cloud native journey, users are leveraging service mesh to solve the rising challenges of microservices in a consistent manner such as how to observe microservices, how to handle network failures, how to control traffic and how to secure microservices etc. without redeploying their services. Join us for a live interactive session where our panel of experts from ServiceMeshCon program review committee will address your most challenging inquiries around service mesh!

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Buoyant Sponsored Session - William Morgan, Buoyant

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Collaboration is Important for Admission Webhooks in Service Meshes - Alejandro Pedraza, Buoyant

Admission controllers provide a way to tap into Kubernetes’ object persistence workflow by modifying manifests. The Kubernetes API server provides a set of default admission controllers, but users can also provide their own through webhooks. This is a common pattern used in service meshes to inject a sidecar proxy. Ideally, in-tree admission controllers and webhooks should be able to cooperate, in the sense that mutations made by some controller should be able to be taken into account by other controllers regardless of the invocation sequence. Up until 1.15 this cooperation has had its problems. Now, through a clever reinvocation mechanism this has been addressed. Alejandro Pedraza, software engineer at Buoyant, will give an overview of admission webhooks reinvocation policy and what it looks like now to operate in the particular case of the sidecar proxy provided by Linkerd.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Control Plane for Large Mesh in a Heterogeneous Environment - Fuyuan Bie & Zhimeng Shi, Pinterest

Service mesh is great. However, building service mesh in a heterogeneous environment of a large number of clusters is challenging. At Pinterest, we have a complicated mixture of thousands of clusters ranging from IaaS to dockerized services to kubernetes; They are developed with C++/Java/Python/Node/Go/Elixir.

Using open source go control plane as the interface to Envoy, we meshed Pinterest services with a control plane namely tower we developed. From edge to backends, 100% services are managed by Tower. We use actor model and event sourcing to make it performant, reliable, scalable and extensible.

Technology aside, migration is the determining yet very challenging factor of the success of a service mesh. We will share how we prioritize our adoption; how we design for our goal; how we migrate our existing investments to a fully meshed services network step by step.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Google Cloud Sponsored Session - Istio Adoption Journeys - Sean Suchter, Google

A lightning talk about what customer problems prompt Istio adoption. Specific examples of pain points will be explained, along with what solutions are available from Istio and how (and when) they can be achieved.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

How Google Manages Sidecars for Millions of Containers Without Breaking Anything (Much) - Sven Mawson, Google Cloud

Between 2014 and 2016, Google updated its production fleet to run every job with a sidecar as a way to support new languages like golang in production. This talk will discuss our experience of rolling out a sidecar to an extremely large fleet, the precautions that we took to make the rollout safe, and the benefits we've gained from this architecture. We will also describe how we continue to update our sidecar in a safe way for such a large fleet, and the lessons we've learned and problems we've solved along the way.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

IBM App Connect's Journey to Istio - Greg Hanson, IBM

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

IBM Sponsored Session - Dramatic UX Improvement and Analytics-driven Canary Deployment with Istio - Dan Berg, IBM

With the latest Istio releases, it has never been this easier to onboard microservices to Istio, and to seamlessly transition from plain traffic to mTLS traffic among microservices. Need to roll out new changes to your microservices, don’t panic! Combine with analytics, you can make intelligent decisions on your canary deployment. This talk will show demos on how Istio dramatically improve UX and how to leverage analytics to make intelligent decisions for canary deployment.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Leveraging Service Meshes for A/B, Blue-Green, and Canary Deployments (aka "Progressive Delivery") - Paul Curtis, Weaveworks

Do you want to maximize your service mesh capabilities by enabling canary deployments, A/B testing, Blue-Green, etc. that have come to be called “Progressive Delivery”?

Paul will discuss progressive delivery and its considerations, and show how - using the open source Kubernetes operator, Weave Flagger - you can leverage service meshes to enable progressive delivery.

We will cover:
- talk about the principles behind service mesh technologies
- give an overview of the current state of service meshes for Kubernetes
- explain how you can leverage service mesh capabilities to implement progressive delivery
- show how, by doing that, you can limit the impact of a failed deployment in production

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Lightning Talk - Connecting and Migrating Heterogeneous Applications with Consul Service Mesh - Luke Kysow, HashiCorp

Without question, systems are moving to a highly decoupled distributed approach running on modern schedulers like Kubernetes. There are two challenges which practitioners are often faced with while on this journey. How do you migrate legacy applications safely and without interruption to the new world? Once you have migrated, how do you ensure the connectivity and security of applications, potentially running in multiple Kubernetes clusters?
This talk takes a demo driven approach to how the service mesh can solve both of these problems. You will learn how Consul Service Mesh can help to seamlessly and safely migrate an application from Virtual Machines to Kubernetes. Also, how Consul Service Mesh can help connect and secure heterogeneous applications running in multiple Kubernetes clusters.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Making Sense of the Mesh: A Conceptual Model for Service Mesh Topologies - Mitch Connors & Mandar Jog, Google

Service Meshes such as Istio can be used to connect and secure a variety of deployment topologies, but with great power and flexibility comes great complexity and confusion. In this talk we will walk through a conceptual model for thinking about service mesh topologies, including how to think about networks, clusters, control planes, meshes, and federations of meshes. We will describe best practices for building a topology that can scale and grow with your organization, and discuss a number of different patterns that can be used to simplify your service mesh journey.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Opening - Lin Sun, IBM

Opening Remarks

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Service Mesh Interface: Developer Friendly APIs for Service Mesh - Michelle Noorali, Microsoft

The proliferation of service mesh technologies has led developers and operators alike wondering when and how to choose the right service mesh for their needs. It’s also hard to describe and build on top of the common features that service meshes provide. In this session we will introduce Service Mesh Interface (SMI), a common abstraction that allows service mesh users and operators the freedom to adopt service mesh concepts without being tied to a specific implementation, making the space more open and lowering the barrier for tools being built on top of these amazing technologies.

In this session, we will take a hands-on look at how SMI(https://smi-spec.io/) integrates into three different service mesh runtimes, Istio, Linkerd, and Consul, explore the SMI specification and it’s core components, and look at the future of what SMI can provide.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Solo.io Sponsored Session - Idit Levine, Solo.io

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

The Truth About the Service Mesh Data Plane - Christian Posta, Solo.io

The exploration of service mesh for any organization comes with some serious questions. What data plane should I use? How does this tie in with my existing API infrastructure? What kind of overhead do sidecar proxies demand? As I've seen in my work with various organizations over the years "if you have a successful microservices deployment, then you have a service mesh whether it’s explicitly optimized as one or not."

In this talk, we seek to understand the role of the data plane and how to pick the right component for the problem context. We start off by establishing the spectrum of data-plane components from shared gateways to in-code libraries with service proxies being along that spectrum. We clearly identify which scenarios would benefit from which part of the data-plane spectrum and show how modern service meshes including Istio, Linkerd, and Consul enable these optimizations.

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

There’s A Bug in My Service Mesh! What Do You Do When the Tool You Rely On is the Cause? - Ana Calin, Paybase & Risha Mars, Buoyant

A service mesh is an increasingly necessary tool when running and debugging modern applications. But what do you do when there’s a bug in the mesh itself?

Paybase offers the most flexible, developer-native, API-driven solution for payments, compliance and risk. They use the Linkerd service mesh to process all requests that come through their complex system of microservices, where it is highly useful for out of the box gRPC load balancing which allows Paybase to scale their application.

In this talk, Ana and Risha will talk about different Linkerd bugs that Paybase encountered after deploying Linkerd to their staging environment, and how they worked with the Linkerd maintainers to track them down and squash them.

This talk also explores the relationship between companies that rely on open source software and their interactions with maintainers in the path to getting bugs fixed.