The document summarizes the new features of Istio 1.1, an open-source service mesh. Some key highlights include improved performance and scalability, namespace isolation, multi-cluster capabilities, easier installation with Helm, and locality-aware load balancing. A new Sidecar resource was introduced to improve performance by configuring resources for individual proxies. The presentation demonstrates performance improvements with the Sidecar resource and highlights additional functionality in Istio like traffic control and metrics collection.

1. Istio Service Mesh: What’s New in 1.1
@soloio_inc

2. CHRISTIAN POSTA
• Field CTO @ solo.io
• Author of a few books
• Contributor to many open-source projects
• Architect, blogger, speaker, mentor, leader
https://bit.ly/istio-in-action
@christianposta
christian@solo.io
https://blog.christianposta.com
https://slideshare.net/ceposta

3. Check out Gloo!
https://gloo.solo.io https://sqoop.solo.io https://supergloo.solo.io

4. 3 FREE COPIES AT END OF THE SESSION:
COMPLEMENTS OF SOLO.IO AND MANNING
https://bit.ly/istio-in-action
Winner will be chosen from Twitter.
Tweets to @christianposta with
#kubePHXIstio will be considered

5. Istio is a
service mesh
A service mesh is decentralized,
application-agnostic,
networking infrastructure between
your services that can be
programmed to provide more
resilient, secure, and observable
service to service communication

6. Istio components

7. Service mesh for service to service

8. Istio
● Popular open-source project
● Announced May 2017
● v1.0 released July 2018
● v1.1 release March 2019
● Uses an Envoy proxy data plane
https://istio.io

9. Istio functionality
• Fine-grained traffic control (at request level)
• End-to-end encryption with strong Identity
• Network-level (request) metric and distributed tracing
collection
• Policy enforcement
• Request-level resilience

10. Istio components

11. Istio Citadel

12. Istio Pilot

13. Istio Telemetry

14. Istio Policy

15. Demo:
Traffic control

16. Istio 1.1 “Enterprise Ready Istio”

17. Istio
● Improved performance, scalability, and stability
● Namespace isolation
● Multi-cluster capabilities
● Improved installation with Helm
● Locality aware load balancing
● Issue identity certificates through SDS
● Vault CA integration
● Disable policy checks (by default)
● Egress on by default
https://istio.io

18. Performance improvements with 1.1
● Default test with 1000, services 2000 sidecar/instances,
70K request/sec within the mesh
● 8ms P90 latency through two sidecar
● 0.6 vCPU per 1K requests
● 50M Mem overhead for highly loaded namespaces
● Pilot uses 1 vCPU and 1.5G memory
https://istio.io

19. Sidecar Resource
https://istio.io

20. Sidecar Resource

21. Sidecar Resource

22. Sidecar Resource

23. Demo:
performance
improvements
with Sidecar

24. For more information
● https://solo.io
● https://medium.com/solo-io
● https://twitter.com/soloio_inc
● https://gloo.solo.io
● https://sqoop.solo.io
● https://supergloo.solo.io
● https://squash.solo.io

25. HOW BOOK WINNERS WILL BE DECIDED:
https://bit.ly/istio-in-action
For everyone else: 40% off with code:
cpistio
Winner will be chosen from Twitter.
Tweets to @christianposta with
#kubePHXIstio will be considered

26. Thank you
@soloio_inc