We are using istio at scale.<p>I have a love-hate relationship with it.
It is very complex and builds on 5 other layer of abstraction (K8s, Envoy, Iptables,...). Grasping what is going on requires you to understand all of those layers first. Istio essentially adds one layer of proxy for all your ingress/egress requests and from an engineering/performance/cost perspective that is not amazing.<p>Once it is working and deployed though it provides a solid set of functionalities as part of the infrastructure directly. AuthN/Z, mTLS, security, metrics and logs are all deployed by default without the end-user having to do anything.<p>Eventually I expect Istio will evolve to a model that makes more sense with Ambient/eBPF (For cost/performance reasons)<p>The community behind Istio is especially helpful and one of the main reasons why we went with this project.
In case anyone wants to read the rendered markdown:<p><a href="https://github.com/cncf/toc/blob/main/proposals/graduation/istio.md">https://github.com/cncf/toc/blob/main/proposals/graduation/i...</a>
Here's the official CNCF announcement: <a href="https://www.cncf.io/announcements/2023/07/12/cloud-native-computing-foundation-reaffirms-istio-maturity-with-project-graduation/" rel="nofollow noreferrer">https://www.cncf.io/announcements/2023/07/12/cloud-native-co...</a>
I may have missed the announcement where Istio’s ownership was being transfered to a vendor-neutral foundation like the CNCF, or is the Open Usage Commons What can be used in place?
Here is some community information for istio <a href="https://devboard.gitsense.com/istio/istio" rel="nofollow noreferrer">https://devboard.gitsense.com/istio/istio</a><p>Not kubernetes level <a href="https://devboard.gitsense.com/kubernetes/kubernetes" rel="nofollow noreferrer">https://devboard.gitsense.com/kubernetes/kubernetes</a> but still very good.<p>Full Disclosure: This is my tool, but I figure the insights would be interesting/useful.
Here's the PR: <a href="https://github.com/cncf/toc/pull/1000">https://github.com/cncf/toc/pull/1000</a>
What's an alternative to istio? I want to have http metrics between our services inside kubernetes. I don't really want all the fancy shmancy mtls, dpi and stuff, they don't bring value to me.
Istio is amazing once you grok how it works and get it running. It has a lot of gotchas (objects in istio-system become global?) and there’s a lot of ways to abuse or misuse it.