Securing Microservice Communication with Istio and Envoy Sidecars
Istio and Envoy sidecars provide a service mesh that secures, controls, and observes microservices communication across Kubernetes without changing application code.
Airbnb performs zero-downtime, canary-style Istio upgrades across Kubernetes and VMs using dual control planes, automated mutation (Krispr), mxagent for VMs, and coordinated rollouts.