Cross-cluster Calls Made Easy with Istio 1.1

23 May 2019 | KubeCon, Barcelona Spain

Recording

Session Information

Abstract

Despite the now-common practice of spinning up multiple clusters across multiple regions, cross-cluster communication between the services running in them is still a huge issue. We rarely bother, or when we do, it’s hard-coded at the application level. Holes are punched in our ingress. Traffic traverses the open internet with hand-crafted addresses, no observability, and one-way TLS.

Istio already helps communication within a cluster: adding layer 7 routing, automatic security and more. The new version 1.1 can now do that between clusters.

This talk will guide you through using Istio’s latest features to easily setup secure, resilient, cross-cluster communication. Matt will talk through the required config before showing a demo of an app seamlessly spanning Kubernetes clusters. The full config will be made available so you can head straight home and give it a go on your own systems!

Slides

Demo Scripts

Reviews

After 3 long days and many sessions, @mt165 manages to make the last session of #KubeCon entertaining and interesting at the same time. Not an easy feat, great job 👌
— Nicolas T. (@eikke) May 23, 2019

This! @mt165: "If you're going to call a service at the other end of the world, don't make it look like something local". Good old https://t.co/pzl1ujhX1S
— Nicolas T. (@eikke) May 23, 2019

Final talk at #KubeCon with @mt165 well worth sticking around for. pic.twitter.com/S1pMQkwN3K
— Martin Bower (@martinbower) May 23, 2019