April 17, 2023 | Amstel Boathouse, Amsteldijk 223 1079 LK Amsterdam Netherlands
Start with equal parts API gateway, Kubernetes ingress and service mesh, then throw in security, observability, and multi-tenancy. The world of application networking is changing fast. Join us at this off-site co-located event to learn about what’s new with open source application networking technologies including Istio, Ambient, Cilium and eBPF, and how to use them together to better power your applications.
This event includes one full day of technical sessions presented by end users and industry leaders from across the cloud native ecosystem concurrent with live, hands-on workshops so you can try out the technologies as you learn.
Please note that this is an off-site Sponsor Hosted Co-located Event.
When: April 17, 2023 | 8:45am – 6:00pm
Location: Amstel Boathouse, Amsteldijk 223 1079 LK Amsterdam Netherlands
This event is currently at capacity. If you would like to be placed on the waitlist, Please provide your information on this page and you will be notified if a seat at the event becomes available.
For questions regarding this event, please contact: firstname.lastname@example.org
Register for the event
Click here to register for KubeCon + CloudNativeCon and add this workshop/event to your registration. If you are already registered for KubeCon + CloudNativeCon, please modify your registration to add-on this workshop/event.
08:30 - 09:00
09:00 - 09:05
Welcome and Overview
09:05 - 09:25
The Future of Application Networking with Istio, Ambient, eBPF, and Cilium
Speakers | Idit Levine, CEO, Solo.io
The last 5 years have been all about building Cloud-native 1.0, deploying Kubernetes, understanding how to containerize applications, and managing daily updates. Those early successes are now leading to a new set of challenges in scalability, security and observability. We’re now moving into the Cloud-native 2.0 era, which will require us to apply new technologies and architectures to solve bigger challenges. Learn how the evolution of Istio, Envoy and Cilium will play a critical role in this next stage of cloud-native applications.
09:30 - 10:40
WORKSHOP: Get Started with Istio: Sidecars or Sidecarless with Ambient Mesh
Speakers | Antonio Berben, Baptiste Collard
Microservices can be complicated and difficult to manage. These complexities have given rise to a new solution called service mesh. This workshop explains how to get started with Istio by incrementally adopting Istio and observing the benefits that Istio service mesh brings to you. We will explore various functions and benefits that Istio provides to your organization.
09:25 - 09:40
The Future of API Management
Speakers | Ep Heijting
09:40 - 10:10
GlooOps - Managing Gloo Platform the Gitops Way
Speakers | Jona Apelbaum
10:10 - 10:40
Automate Your Cloud Like a Service Mesh
Speakers | Scott Weiss
10:40 - 10:55
Break for Main Session
10:55 - 11:25
Multilayered Security: Combining Istio Authorization & CNI Network Policies
Speakers | Denis Jannot
Istio and Cilium both provide the ability to apply security policies directly to the network without any changes to the application code. This session will cover the differences and overlaps between the two and cover some best practices from the field for implementing both to work together and give you robust control over your entire network stack.
11:25 - 12:15
Panel Discussion: Application Networking, Istio, and Ambient in the Community
Speakers | Idit Levine (Solo.io), Louis Ryan (Solo.io), John Howard (Google), Keith Mattix II (Microsoft), Alessandro Vozza (Moderator)
12:15 - 13:15
13:15 - 14:45
WORKSHOP: Network Foundations
Speakers | Marino Wijay, Kevin Dorosh
Networking is the foundational fabric that allows for various computers, servers and everything in between to communicate, exchange data and information: understanding how data moves is critical. As many microservices are built and deployed onto container systems like Kubernetes, it’s sometimes challenging to understand where traffic goes, how we communicate with our applications, how we decipher network protocols and the various messaging that could be present. Many understand that a network is always going to be there but, how do we understand it better and interact with or modify it to our need? Join this workshop to find out.
13:15 - 13:45
Evolution of Istio - From Sidecars to Ambient
Speakers | Neeraj Poddar
13:45 - 14:15
Istio Ambient Service Mesh Made Easy
Speakers | Lin Sun, Director of Open-Source
Istio ambient mesh introduces a new sidecar-less data plane mode designed for simplified operations, broader application compatibility, and reduced infrastructure cost. Lin has worked closely with the Istio maintainers on defining and evolving Istio ambient mesh and its APIs from the beginning. Since the initial launch of ambient mesh in 2022, there have been significant simplifications to the ambient design: introducing a custom, lightweight, highly scalable Rust-based ztunnel in favor of the original Envoy-based one; much simplified xDS configuration from Istio control plane to ztunnel; eliminating the consumer-side waypoint proxy; removing the need for Sidecar resource for sidecar-less; explicitly binding authorization policies to waypoint proxies; and many more!
We will discuss the new exciting updates through live demos and explain why the changes were made during an architectural deep dive. As ambient mesh will be released as an alpha feature in Istio 1.18, you’ll walk away knowing how to try Istio ambient mesh on your own and experience the simplification and benefits from the new architecture!
14:15 - 14:45
Enhancing Istio Ambient Mesh with eBPF
Speakers | Yuval Kohavi
Istio’s new ambient mesh mode is designed to alleviate challenges associated with the long-standing sidecar-based approach. However, moving from sidecars to a node-level agent fundamentally changes the data path for traffic flowing within the service mesh. As part of the initial release of ambient mesh, a working implementation of the necessary networking configuration was created. Still, there is room for improvement, especially when considering the exciting Linux kernel technology eBPF. In this session we will explore how traditional Istio networking works, what changes were necessary for ambient mesh, and finally we will dig into how eBPF can be used to further enhance ambient mesh.
14:45 - 15:00
Break + Snacks
15:00 - 17:00
WORKSHOP: Getting Started with eBPF and Cilium
Speakers | Krisztian Fekete and Jesus Munoz Rodriguez
In this course, we’re introducing eBPF and the different ways to create eBPF programs. You will be able to create your first eBPF program using BCC and libbpf to have a better understanding of the main concepts. We’ll also take you through several labs to build and deploy an eBPF program with BumbleBee. Along the way, you’ll deploy Prometheus and a web application on Kubernetes to display all the communications happening in the Kubernetes cluster.
15:00 - 15:30
Understanding Istio Ambient Mesh Security
Speakers | Christian Posta
Istio ambient mesh is a new sidecarless data plane for Istio that brings some desirable operational benefits, but how does it impact security? In this talk, we will dig into the implementation of Istio ambient and understand how we maintain the properties of zero trust and even improve the security posture of the mesh overall.
15:30 - 16:00
Adapting to Ambient with Gloo Platform
Speakers | Aaron Birkland & Nina Polshakova
Adopting or adapting to Istio Ambient mesh requires new kinds of decisions, engineering considerations, and procedures that might not be familiar to users of classic Istio with Sidecars. With Gloo Mesh, we aim to provide the same capabilities and APIs you are used to, while managing the practical differences between the Sidecar and Sidecarless worlds under the hood. We will explore how Gloo mesh achieves this goal, and explore a few additional knobs Gloo Mesh provides for fine-tuning ambient to optimize particular use cases.
16:00 - 16:30
VMs Meet Their Mesh
Speakers | Eitan Yarmush
Solo.io Featured Speakers
We are thrilled that so many Soloists will be speaking this year in Amsterdam! Stay tuned for the full agenda to attend their sessions.
Founder and CEO
VP, Global Field CTO
Director of Open-Source
Just for Fun
April 17, 2023
Dutch Garden Room, Amstel Boathouse
We Are Hiring!
We believe that great architecture is the key to successful software development. And we make this possible by building great teams. If you are passionate about cloud native technologies like containers, Kubernetes, Istio, Envoy Proxy, GraphQL, eBPF, serverless functions, and more, then Solo.io is the place for you!
Solo is growing rapidly and we’re hiring for a number of positions. Be sure to check out the Careers page on our website, or chat with us in person!
If you decline, your information won’t be tracked when you visit this website.