Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies

Secure a Cassandra Database Ge�ng Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Using kube-router to run BGP Se�ng up Cluster Mesh Cilium integra�on with call authoriza�on Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Ka�a cluster Getting Started Using MicroK8s This guide uses microk8s [h�ps://microk8s call authoriza�on Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Ka�a cluster Self-Managed Kubernetes Installa�on using kubeadm Standard Installa�on

Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help Observing flows with Hubble Relay Connectivity Problems Policy Troubleshooting etcd (kvstore) Cluster Mesh Troubleshooting Symptom Library Useful Scripts Reporting a problem Community Weekly Community Meeting Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies

Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (beta) Host-Reachable call authorization Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Advanced Networking Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta) Policy Enforcement Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Getting Started Using MicroK8s This guide uses microk8s [https://microk8s

Scenario enablement Linux kernel x86, Arm, RISC-V GPU NPU Real-time kernel Security kernel Database Big data Resource orchestration Desktop system Industrial application ... ... openEuler OpenHarmony Cloud Cloud node Cloud node Local Controller Task mgmt & coordination Edge KubeEdge Model/Database mgmt Messaging over KubeEdge Lib Model Global Manager Worker GM Common Worker Edge node A-Tune client (atune-adm) A-Tune server (atuned/Golang) gRPC service Configuration Analysis Tuning Database Backend server (HTTP/Python 3) MPI/CPI Data sampling System parameter configuration Classification

Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta)

Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Setting up Cilium in AWS ENI mode Using kube-router to run BGP Using BIRD to run BGP Setting up Cluster Mesh Cilium integration with Flannel (beta) IPVLAN based Networking (beta) Transparent Encryption (stable/beta)

2021 IstioCon 2021 is the inaugural community conference for the industry's most popular service mesh. IstioCon is a community-led event, showcasing the lessons learned from running Istio in production roadmap sessions. Fun and games are also included with two social hours to take the load off and mesh with the Istio community, vendors, and maintainers! #IstioCon Agenda ● Introduction ● Target Audience Some service outside of cluster Version 1 Version 2 Extended Mesh Defines endpoints outside of cluster as a part of Service Mesh #IstioCon Brush up on Istio resources (cont’d) Target Audience

when there is anomalous behavior. 4. Vulnerability Management 5. A service mesh proxy to connect to the service mesh 6. Zero Trust down to the container level. Zero trust requires strict controls the security sidecar include: 1. Program-specific Log Storage and Retrieval Service 2. Service Mesh 3. Program-specific artifact repository 4. Runtime Behavior Analysis Artificial Intelligence (AI)