Start with equal parts API gateway, Kubernetes ingress and service mesh, then throw in security, observability, and multi-tenancy. The world of application networking is changing fast. Join us at this off-site co-located event to learn about what’s new with open source application networking technologies including Istio, Ambient, Cilium and eBPF, and how to use them together to better power your applications.

This event includes one full day of technical sessions presented by end users and industry leaders from across the cloud native ecosystem concurrent with live, hands-on workshops so you can try out the technologies as you learn.

Please note that this is an off-site Sponsor Hosted Co-located Event.

When: April 17, 2023 |  8:45am – 6:00pm

Location: Amstel Boathouse, Amsteldijk 223 1079 LK Amsterdam Netherlands

This event is currently at capacity. If you would like to be placed on the waitlist, Please provide your information on this page and you will be notified if a seat at the event becomes available.

For questions regarding this event, please contact: events@solo.io



Solo Application Networking Day Logo CMYK V3 2

Register for the event

Click here to register for KubeCon + CloudNativeCon and add this workshop/event to your registration. If you are already registered for KubeCon + CloudNativeCon, please modify your registration to add-on this workshop/event.


April 17

08:30 - 09:00


April 17

09:00 - 09:05

Welcome and Overview

April 17

09:05 - 09:25

Visionary/Ecosystem Track

The Future of Application Networking with Istio, Ambient, eBPF, and Cilium

Speakers | Idit Levine, CEO, Solo.io

The last 5 years have been all about building Cloud-native 1.0, deploying Kubernetes, understanding how to containerize applications, and managing daily updates. Those early successes are now leading to a new set of challenges in scalability, security and observability. We’re now moving into the Cloud-native 2.0 era, which will require us to apply new technologies and architectures to solve bigger challenges. Learn how the evolution of Istio, Envoy and Cilium will play a critical role in this next stage of cloud-native applications.

April 17

09:30 - 10:40

Istio/Ambient Track

WORKSHOP: Get Started with Istio: Sidecars or Sidecarless with Ambient Mesh

Speakers | Antonio Berben, Baptiste Collard

Microservices can be complicated and difficult to manage. These complexities have given rise to a new solution called service mesh. This workshop explains how to get started with Istio by incrementally adopting Istio and observing the benefits that Istio service mesh brings to you. We will explore various functions and benefits that Istio provides to your organization.

April 17

09:25 - 09:40

Visionary/Ecosystem Track

The Future of API Management

Speakers | Ep Heijting

April 17

09:40 - 10:10

Visionary/Ecosystem Track

GlooOps - Managing Gloo Platform the Gitops Way

Speakers | Jona Apelbaum

April 17

10:10 - 10:40

Networking Track

Automate Your Cloud Like a Service Mesh

Speakers | Scott Weiss

April 17

10:40 - 10:55

Break for Main Session

April 17

10:55 - 11:25

Networking Track

Multilayered Security: Combining Istio Authorization & CNI Network Policies

Speakers | Denis Jannot

Istio and Cilium both provide the ability to apply security policies directly to the network without any changes to the application code. This session will cover the differences and overlaps between the two and cover some best practices from the field for implementing both to work together and give you robust control over your entire network stack.

April 17

11:25 - 12:15

Networking Track

Panel Discussion: Application Networking, Istio, and Ambient in the Community

Speakers | Idit Levine (Solo.io), Louis Ryan (Solo.io), John Howard (Google), Keith Mattix II (Microsoft), Alessandro Vozza (Moderator)

April 17

12:15 - 13:15


April 17

13:15 - 14:45

Networking Track

WORKSHOP: Network Foundations

Speakers | Marino Wijay, Kevin Dorosh

Networking is the foundational fabric that allows for various computers, servers and everything in between to communicate, exchange data and information: understanding how data moves is critical. As many microservices are built and deployed onto container systems like Kubernetes, it’s sometimes challenging to understand where traffic goes, how we communicate with our applications, how we decipher network protocols and the various messaging that could be present. Many understand that a network is always going to be there but, how do we understand it better and interact with or modify it to our need? Join this workshop to find out.

April 17

13:15 - 13:45

Istio/Ambient Track

Evolution of Istio - From Sidecars to Ambient

Speakers | Neeraj Poddar

April 17

13:45 - 14:15

Istio/Ambient Track

Istio Ambient Service Mesh Made Easy

Speakers | Lin Sun, Director of Open-Source

Istio ambient mesh introduces a new sidecar-less data plane mode designed for simplified operations, broader application compatibility, and reduced infrastructure cost. Lin has worked closely with the Istio maintainers on defining and evolving Istio ambient mesh and its APIs from the beginning. Since the initial launch of ambient mesh in 2022, there have been significant simplifications to the ambient design: introducing a custom, lightweight, highly scalable Rust-based ztunnel in favor of the original Envoy-based one; much simplified xDS configuration from Istio control plane to ztunnel; eliminating the consumer-side waypoint proxy; removing the need for Sidecar resource for sidecar-less; explicitly binding authorization policies to waypoint proxies; and many more!

We will discuss the new exciting updates through live demos and explain why the changes were made during an architectural deep dive. As ambient mesh will be released as an alpha feature in Istio 1.18, you’ll walk away knowing how to try Istio ambient mesh on your own and experience the simplification and benefits from the new architecture!

April 17

14:15 - 14:45

Istio/Ambient Track

Enhancing Istio Ambient Mesh with eBPF

Speakers | Yuval Kohavi

Istio’s new ambient mesh mode is designed to alleviate challenges associated with the long-standing sidecar-based approach. However, moving from sidecars to a node-level agent fundamentally changes the data path for traffic flowing within the service mesh. As part of the initial release of ambient mesh, a working implementation of the necessary networking configuration was created. Still, there is room for improvement, especially when considering the exciting Linux kernel technology eBPF. In this session we will explore how traditional Istio networking works, what changes were necessary for ambient mesh, and finally we will dig into how eBPF can be used to further enhance ambient mesh.

14:45 - 15:00

Break + Snacks

April 17

15:00 - 17:00

Cilium Track

WORKSHOP: Getting Started with eBPF and Cilium

Speakers | Krisztian Fekete and Jesus Munoz Rodriguez

In this course, we’re introducing eBPF and the different ways to create eBPF programs. You will be able to create your first eBPF program using BCC and libbpf to have a better understanding of the main concepts. We’ll also take you through several labs to build and deploy an eBPF program with BumbleBee. Along the way, you’ll deploy Prometheus and a web application on Kubernetes to display all the communications happening in the Kubernetes cluster.

April 17

15:00 - 15:30

Istio/Ambient Track

Understanding Istio Ambient Mesh Security

Speakers | Christian Posta

Istio ambient mesh is a new sidecarless data plane for Istio that brings some desirable operational benefits, but how does it impact security? In this talk, we will dig into the implementation of Istio ambient and understand how we maintain the properties of zero trust and even improve the security posture of the mesh overall.

April 17

15:30 - 16:00

Istio/Ambient Track

Adapting to Ambient with Gloo Platform

Speakers | Aaron Birkland & Nina Polshakova

Adopting or adapting to Istio Ambient mesh requires new kinds of decisions, engineering considerations, and procedures that might not be familiar to users of classic Istio with Sidecars. With Gloo Mesh, we aim to provide the same capabilities and APIs you are used to, while managing the practical differences between the Sidecar and Sidecarless worlds under the hood. We will explore how Gloo mesh achieves this goal, and explore a few additional knobs Gloo Mesh provides for fine-tuning ambient to optimize particular use cases.

April 17

16:00 - 16:30

Istio/Ambient Track

VMs Meet Their Mesh

Speakers | Eitan Yarmush

Just for Fun

Solo Card

April 17, 2023

AppNetworking Reception




Dutch Garden Room, Amstel Boathouse

We Are Hiring!

We believe that great architecture is the key to successful software development. And we make this possible by building great teams. If you are passionate about cloud native technologies like containers, Kubernetes, Istio, Envoy Proxy, GraphQL, eBPF, serverless functions, and more, then Solo.io is the place for you!

Solo is growing rapidly and we’re hiring for a number of positions. Be sure to check out the Careers page on our website, or chat with us in person!