HP set up secure and wise platform with Istio John Zheng/ john.zheng@hp.com #IstioCon Agenda ➢ HP Horizon platform design with Istio ➢ Secure Platform ➢ Wise Platform ➢ Excellent Observability Observability ➢ Q & A #IstioCon HP Horizon Platform design with Istio #IstioCon HP Horizon Platform HP has lots of projects, deployed on cloud. They have common features, also have project specified feature feature. We provide a common platform includes all common features, connect all projects with istio. #IstioCon Common services are in core cluster Projects shared solution cluster • Different namespace

Using Istio to Build the Next 5G Platform David Lenrow Open Source Service Mesh Evangelist Neeraj Poddar Co-founder & Chief Architect, Aspen Mesh February 22, 2021 2 ©2021 Aspen Mesh. All rights reserved rchitecture-sba-47900b0ded0a 5G Architecture 4 ©2021 Aspen Mesh. All rights reserved. Key Platform Requirements Multi-Vendor Real-Time (RAN) Workload Mobility Networking outside CNF Encryption

#IstioCon Performance tuning and best practices in a Knative based, large-scale serverless platform with Istio 张龚, Gong Zhang, IBM China Development Lab 庄宇, Yu Zhuang, IBM China Development Lab #IstioCon Architect and Senior Software Engineer in IBM Cloud. Working on IBM Cloud Code Engine (Serverless platform), focusing on Knative, Istio, and Tekton, community, leading team to develop and offer serverless Kubernetes in IBM Cloud. #IstioCon ● Knative and Istio ● How Istio is leveraged in a Knative based platform ● Performance bottleneck analysis and tuning ○ Istio scalability optimization during Knative Service

samples/bookinfo/platform/kube/b ookinfo.yaml and samples/bookinfo/networking/bookinfo-gateway.yaml configu- rations 4. Using the restricted user, kubectl -n restrict-test apply -f samples/bookinfo/ platform/kube/bookinfo "darwin": err = exec.Command("open", url).Start() default: fmt.Fprintf(writer, "Unsupported platform %q; open %s in your browser.\n", runtime.GOOS, url) } if err != nil { fmt.Fprintf(writer, "Failed of access required, availability of exploitation information, requirements relating to social engineering, race conditions, brute forcing, etc, and other impediments to exploitation. High Attackers can

David@adalogics.com Istio maintainers involved in the audit Name Title Email Anand Jayaraman Engineering Leader ajayaram@google.com Andrea Ma So�ware Engineer ayma@us.ibm.com Craig Box VP of Open Source jdpettit@google.com Lei Tang Technical Lead leitang@google.com Neelima Balakrishnan So�ware Engineering Manager neelimabk@google.com Shankar Ganesan So�ware Engineer shankgan@google.com OSTIF 4 is a service mesh which is an infrastructure layer applicable to so�ware applications. Istio is platform and language agnostic, but is o�en used on top of Kubernetes. It offers users easy access to features

South America 1.5% from Oceania Participant demographics 20.4% of attendees were CxO / Engineering manager / Tech Lead 43.8% of attendees were either evaluating Istio for production use, popular sessions in English Session Welcome Keynote Using Istio to build the next generation 5G platform I want to sketch a mesh for you Istio service mesh at enterprise scale Improving security within Istio Performance tuning and best practices in a Knative based, large-scale serverless platform with Istio Company presenting Intel and Tetrate Tetrate, HP and others Intel Huawei Huawei

with strong requirements ● For Istio ○ What is Istio? A service mesh. But more: an open service platform! ○ More use cases! ○ (Consul, Kuma…) #IstioCon Emerging Use Cases #IstioCon Legacy Scenarios process ○ Automate provisioning a VM's mesh identity (certificate) ■ based on a platform-specific identity ■ w/o a platform-specific identity ● using a short-lived K8s service account token ● Automatic Yes #IstioCon QUIC & HTTP/3 Support in Istio ● Should take Gateway as the 1st step ○ Less engineering effort ○ Particularly valuable for some VM user scenarios ● Limitations ○ Envoy QUIC support

Bilibili platform ● Listening sessions +20 End User Presentations 10 IstioCon Sponsors and partners Where did people join from? Participant demographics 28% of attendees were CxO / Engineering manager 58/5 Making Istio accessible 12 Sessions presented in Chinese, transmitted also on Bilibili platform. 51 Sessions presented in English, with captioning. 4 Workshops for providing hands-on practice

CONFIDENTIAL 3 API-driven applications exploding Service Testing Component Testing E2E API Tests Engineering effort grows superlinearly as #APIs grow Customer services Order services Catalog Customer

Expectations ● Reliability ● Maintainability ● Usability #IstioCon Platform One #IstioCon Big Bang https://repo1.dso.mil/platform-one/big-bang/bigbang https://p1.dso.mil/#/products/big-bang #IstioCon Toy @adam_toy1 github.com/atoy3731 https://p1.dso.mil/#/products/big-bang https://repo1.dso.mil/platform-one/big-bang/bigbang https://github.com/atoy3731/istiocon-demo (WIP)