Istio As An API Gateway Discussion Flow ● What is an API Gateway? ● What is a Service Mesh? ● Common Features ● API Gateway + Service Mesh together! ● Istio as the API Gateway ● Advantages ● Challenges Challenges ● Where It Isn’t a Good Fit? What is an API Gateway? What is a Service Mesh? Common Features Common Features ● Load Balancing ● Request Routing ● Service Discovery ● JWT Authentication Logging, Monitoring, Tracing API Gateway + Service Mesh together! Limitations of This Approach ● Maintaining Two Tools ● Maintaining Two Expert Pools Istio as the API Gateway Advantages Advantages ● Same

Apache APISIX: How to implement plugin orchestration in API Gateway wenming@apache.org Apache APISIX VP Ming Wen 温铭 • Co-founder @ api7.ai • VP and PMC member, Apache APISIX • committer, Apache APISIX • Custom plugin development in API Gateway • Generate APISIX plugins automatically • The future of API Gateway Apache APISIX • Cloud Native API Gateway （https://github.com/apache/apisix） • Cover plugin as IoT gateway • Use IdP plugin as Zero-Trust gateway Technology Architecture Custom plugin development in API Gateway Difficulties of gateway implementation • API Gateway is not an out-of-the-box

#IstioCon Apache APISIX from Gateway to Full Traffic Proxy with Istio Jintao Zhang API7.ai #IstioCon About Me ● Apache APISIX PMC ● Kubernetes Ingress NGINX maintainer ● Microsoft MVP ● zhangjintao@apache Scenarios for Apache APISIX #IstioCon Usage Scenarios for Apache APISIX ● L4/L7 Gateway（weibo、WPS） ● Microservices API Gateway（iQIYI） ● Kubernetes Ingress controller（UPYUN） ● https://github.com/apache/a

API Gateway Mesh 思考与实践 靳文祥（花名：贾岛） 蚂蚁金服 高级技术专家1/21 /01 /02 /03 API Gateway Mesh 的定义 蚂蚁金服 API Gateway Mesh 实践 云原生 API Gateway 的思考2/21 API Gateway Mesh 的定义 /013/21 LB\Ingress API Gateway Sidecar Sidecar App POD Traffic Control Plane K8S Cluster API Gateway in Service Mesh4/21 API Gateway Service Mesh vs 南北流量（内外） API Gateway vs Service Mesh A infrastructure to decouple the application Mesh is Patterns SofaRPC API Gateway MQ Client Service Code6/21 LB\Ingress API Gateway Sidecar App POD Sidecar App POD Traffic Control Plane Cluster API Gateway Mesh An infrastructure to expose

gRPC Using grpc-gateway and httputil.ReverseProxy Igor Dubinskiy GitHub: idubinskiy Twitter: idubins ● Everything but the browser a. Modify clients to use gRPC b. Use grpc-gateway; see below ● Browser Browser (using grpc-gateway) a. Modify clients to call new service per route as each required RPC is implemented b. Modify clients to call new service for all routes once all required RPCs are implemented to migrate a service from HTTP to gRPC Proxy using grpc-gateway and httputil.ReverseProxy https://github.com/idubinskiy/http-to-grpc-gateway Demo Thank you!

adding /removing files in S3 bucket, updating Amazon DynamoDB tables, HTTP request from Amazon API Gateway etc. Audience This tutorial is designed for software programmers who want to learn the basics ............................................................................... 176 Using API Gateway and AWS Lambda with Serverless Framework ....................................................... .............................................................................. 205 Amazon API Gateway ................................................................................................

26dacdde40968a37ba9eaa864d40e45051ec5448 Key Findings • There was a lack of validation on the VirtualService Gateway fields that could allow route hijacking • In testing, it did not appear to be possible to secure Security Related Documentation 016 High Lack of VirtualService Gateway Field Validation Enables Request Hijacking 017 High Ingress Gateway Configuration Generation Enables Route Hijacking 023 High Pilot Google Istio Security Assessment Google / NCC Group Confidential Finding Lack of VirtualService Gateway Field Validation Enables Request Hijacking Risk High Impact: High, Exploitability: Medium Identifier

traffic Can be standalone or sidecar Other Container Istio Sidecar Proxy Istio Ingress Gateway Istio Egress Gateway @rytswd Istio Operator istio-operator Manages Istio installation with IstioOperator Data Plane with 5 proxies ● Each pod knows endpoint details of other pods ● Can be Sidecar or Gateway component #IstioCon Brush up on Istio resources (cont’d) Target Audience What to expect Istio istiod Some container Istio Sidecar Proxy Istio Ingress Gateway Istio Egress Gateway @rytswd DestinationRule ServiceEntry Gateway VirtualService Some service outside of cluster Version 1

[https://fabric-sdk-node.github.io/]. Java SDK [https://github.com/hyperledger/fabric-gateway-java] and Java SDK documentation [https://fabric-gateway-java.github.io/]. In addition, there are two more application SDKs smart contract How an application uses a wallet and identity How an application connects using a gateway How to access a particular network How to construct a transaction request How to submit a transaction to follow six basic steps to submit a transaction: Select an identity from a wallet Connect to a gateway Access the desired network Construct a transaction request for a smart contract Submit the transaction

[https://fabric-sdk-node.github.io/]. Java SDK [https://github.com/hyperledger/fabric-gateway-java] and Java SDK documentation [https://fabric-gateway-java.github.io/]. In addition, there are two more application SDKs smart contract How an application uses a wallet and identity How an application connects using a gateway How to access a particular network How to construct a transaction request How to submit a transaction to follow six basic steps to submit a transaction: Select an identity from a wallet Connect to a gateway Access the desired network Construct a transaction request for a smart contract Submit the transaction