This article uses a straightforward refrigerator analogy to demystify Kubernetes controller concepts, covering core cluster components, the role of a unified entry point, controller and controller manager design, SharedInformer and ListWatcher mechanisms, and real‑world examples like Service and Route controllers.
This article explains the advanced usage of Traefik's IngressRoute, focusing on the cascade feature and how it enables blue‑green deployment and canary release strategies by chaining routes, rewriting paths, and assigning traffic weights across multiple namespaces.
This tutorial explains how to install the Contour Ingress controller backed by Envoy on Kubernetes, configure IngressRoute resources, examine Envoy's static and dynamic configuration, and integrate Prometheus and Grafana monitoring with proper RBAC and ServiceMonitor setup.
This guide introduces six practical open‑source Kubernetes utilities—including kubectl autocomplete, go‑template output customization, interactive clients, alias generators, manifest validators, and Kedge simplifiers—to help users improve cluster reliability, streamline command‑line interactions, and reduce the complexity of manifest files.
This article summarizes a Kubernetes & Cloud Native meetup talk that reviews recent Service Mesh product releases, analyzes six emerging trends, explains the core value of separating business and non‑business logic, and highlights the technology's future direction within cloud‑native architectures.
This guide details the preparation, configuration, and deployment steps for setting up an OpenShift 3.11 cluster on three CentOS 7.6 virtual machines, covering host mapping, SSH key setup, OS updates, image loading, Ansible playbooks, and troubleshooting common issues.
This article guides readers through the architecture, extension types, image construction steps, configuration details, and local debugging procedures for deploying PHP applications as container images on the Omega platform, highlighting best practices and common pitfalls.
This guide explains how to run Kafka on Kubernetes, covering runtime resource needs, storage considerations, network requirements, configuration with Pods, StatefulSets, Helm charts and Operators, performance testing, monitoring, logging, health checks, rolling updates, scaling, and backup strategies.
This guide explains how to configure a Docker proxy, apply the Tekton Dashboard manifest on an OpenShift cluster, and verify the deployment, providing step‑by‑step commands and screenshots for a successful Cloud Native CI/CD setup.
This article provides an in‑depth overview of logging strategies from Docker to Kubernetes, explains the security architecture of Kubernetes clusters, and outlines best‑practice deployment of the Kong microservice gateway within a Kubernetes environment, offering practical insights for cloud‑native DevOps engineers.
This article analyzes the lack of thread‑count limits in a Kubernetes‑based private cloud platform, reproduces the issue with a Python multiprocessing script, and proposes a solution that combines the cgroup pids subsystem with inotify to enforce per‑container thread limits and provide real‑time alerts.
This article explains how serverless and autoscaling complement Kubernetes by detailing resource‑capacity curves, stakeholder needs, core autoscaling components, key challenges, design philosophy, classic use cases, limitations of traditional scaling, and the emerging virtual‑kubelet‑autoscaler solution.
This article explains why Youzan chose Kubernetes, describes their multi‑IDC, multi‑cluster architecture with high‑availability master components, logging and monitoring solutions, custom service exposure, image building process, lifecycle hooks, continuous delivery pipeline, operational challenges faced, and future plans such as operators and auto‑scaling.
This article walks through practical planning, creation, and fine‑tuning of an Alibaba Cloud Kubernetes cluster, covering network design, API server exposure, security groups, master and worker sizing, deployment manifests, service decoupling, and operational best practices.
This week’s cloud‑native roundup covers the Helm 3 beta release, Cilium 1.6’s full kube‑proxy replacement, new Kubernetes apiserver request‑priority KEP, HA master StorageVersion API, scheduling framework redesign, etcd compact‑batch tweaks, knative performance work, plus recommended open‑source tools and reading material.
This guide provides a step‑by‑step tutorial for installing Minikube on a CentOS 7 virtual machine, including prerequisite setup, VirtualBox installation, Kubernetes cluster deployment, Dashboard and kubectl configuration, common commands, and troubleshooting tips for developers.
This article explains the role of Kubernetes Service and kube-proxy, details each Service type (ClusterIP, NodePort, LoadBalancer, Ingress), compares iptables‑based and IPVS‑based load‑balancing implementations, and provides configuration examples for both modes.
This guide explains how to install, configure, and verify the open‑source kubernetes‑cronhpa‑controller for periodic pod scaling, demonstrating step‑by‑step commands, CRD definitions, and a demo that reduces resource waste by combining scheduled scaling with cluster‑autoscaler.
This article presents a comprehensive Kubernetes knowledge map, covering core concepts, container runtime principles, deployment tools, essential components, plugin extensions, image registries, best‑practice optimizations, and service‑mesh options, with curated reference links for each topic.
The article explains traditional release practices, contrasts monolithic and microservice architectures, highlights challenges of scaling microservices, and shows how Kubernetes provides automation, configuration management, fault handling, and elastic scaling to streamline cloud‑native deployments.
The author reflects on seven years of OpenStack, highlighting its declining community activity, lack of profitability, ineffective technical committee, poor enterprise value, competition from Kubernetes and PaaS, and argues that technical quality alone cannot reverse its downward trajectory.
This article details how the KUN platform enhances Istio’s Service Mesh by extending EnvoyFilter with namespace-level isolation, custom traffic management strategies, fault injection examples, and validation mechanisms, illustrating code implementations and architectural insights for robust, scalable microservice networking.
Facing growing business complexity, a two‑person SaaS team transitioned their monolithic application to a microservice architecture, adopting Spring Cloud, Docker, Kubernetes, CI/CD pipelines with Jenkins, automated testing, service splitting principles, and lightweight tracing, ultimately achieving scalable, observable, and maintainable cloud‑native operations.
This roundup covers major Kubernetes ecosystem news, including the CNCF archiving rkt, GitHub Actions support for Azure CI/CD, Intel's GPU plugin, security CVE details, upstream feature enhancements, open‑source tool recommendations, and curated reading on policy enforcement and virtual clusters.
This article explains Kubernetes RBAC fundamentals, demonstrates how to create roles, bindings, and service accounts, and introduces practical auditing commands and tools such as kubectl can‑i, who‑can, rakkess, rback, and RBAC‑View, helping you secure clusters with least‑privilege policies.
This guide introduces Tekton, a Kubernetes‑native CI/CD framework, and walks through installing it on an OKD cluster, creating and running a simple Task and TaskRun, handling image pull issues, and verifying pipeline execution, providing practical commands and YAML examples.
This guide explains how Knative Eventing's Sequence CRD enables multi‑step event pipelines, walks through its spec definition, and demonstrates four practical usage patterns—direct service calls, event‑driven processing, cascading sequences, and Broker/Trigger integration—complete with YAML examples and visual diagrams.
Meituan‑Dianping’s evolution from virtualization to the HULK‑2.0 Kubernetes platform enables a 100,000‑instance, multi‑region cluster to achieve high elasticity and availability, using scheduler optimizations, local‑optimal placement, enhanced kubelet features, and fine‑grained resource management to maximize throughput during traffic spikes.
This guide details how to configure OpenShift network access for Jenkins, set up persistent volumes and claims, define RBAC roles, label nodes for scheduling, and create Jenkins credentials and a Kubernetes‑based pipeline for CI/CD.
This article explains the rise of Tekton as a Kubernetes‑native CI/CD framework, compares it with alternatives like Jenkins X, Spinnaker and Argo Rollout, and presents a practical case study showing how Tekton can automate complex stateful middleware deployments across multi‑cloud clusters.
Kube‑OVN 0.7.0 introduces IPAM optimizations for StatefulSet, new Subnet CRD status fields, default traffic mirroring, IPv6 control‑plane support, updated documentation, and a detailed TCP performance test showing only a 4% throughput loss for packets larger than 2 KB compared to host networking.
This article explains the fundamentals of service mesh, details Istio's architecture and components, demonstrates traffic management, security, and telemetry features with practical examples, and presents performance testing results and Go client code for managing Istio CRDs in a Kubernetes environment.
The article recaps a Shanghai UCan afternoon tea tech salon where six seasoned experts shared practical Kubernetes and cloud‑native experiences, covering UCloud’s UK8S platform, network and storage integrations, tenant isolation, deployment automation, real‑world case studies from healthcare, workflow engines, service mesh, and small‑team adoption strategies.
This weekly roundup highlights the CNCF security audit of Kubernetes and related projects, the archiving of rkt, several Kubernetes enhancements such as readonly interfaces and ephemeral containers, Istio's HTTP/2 DDoS fix, Knative v0.8.0 features, the krew plugin manager, Alluxio, and curated reading on microservices, ARM containers, WebAssembly, Helm charts, and a cloud‑native transformation case study.
This article explains Alibaba Cloud’s Edge@ACK edge container solution, covering the rise of edge computing, the architecture and standardization of cloud‑edge‑device integration, autonomous edge node management, and real‑world IoT and CDN use cases, illustrating how cloud‑native Kubernetes enables a unified edge infrastructure.
This article explains how Ant Financial designs a highly reliable, end‑state‑driven Kubernetes management platform that handles lifecycle operations, node self‑healing, and risk‑controlled changes for clusters with tens of thousands of nodes, using operators, custom resources, and a meta‑cluster architecture.
The article traces the shift from physical‑server deployments to container‑cloud platforms, defines a newly coined “container ops pattern”, explains its core scenarios, compares declarative and imperative workflows, dissects Kubernetes API objects, controllers, and interfaces (CRI, CSI, CNI), and outlines the master‑node architecture that underpins modern cloud‑native operations.
This article explains how to set up and manage Jenkins CI/CD pipelines on Kubernetes, covering plugin installation, pod deployment, pipeline configuration, and best practices for continuous integration and delivery in a cloud‑native DevOps environment.
This week’s cloud‑native roundup covers Mesosphere’s rebranding to D2iQ, two critical Kubernetes CVEs with remediation steps, upcoming CNCF Kubernetes summits, the Knative 0.8 release, curated open‑source project recommendations, and a selection of in‑depth reading on multi‑cluster, serverless, and API‑gateway technologies.
Since 2017, Youzan transformed its monolithic Nginx‑PHP stack into a language‑agnostic service mesh by introducing Dubbo, the ZanPHP RPC framework, a custom NOVA protocol, and the Go‑based Tether sidecar that offloads discovery, load‑balancing and monitoring, later adding a Service Pretender for cross‑region traffic, and now migrates discovery to Istio Pilot on Kubernetes for seamless, containerized microservice orchestration.
This article introduces Alibaba's Cloud Toolkit IDE plugin, explaining how its one‑click deployment, Windows and EDAS Kubernetes support, SSH proxy capabilities, real‑time log viewing, and rapid Dubbo project creation can automate repetitive tasks and significantly improve developer productivity.
This guide explains how to configure Jenkins with dynamically generated slave nodes on OpenShift, set up Kubernetes integration, and provides Dockerfile and startup script details for Jenkins slaves, including credential and certificate handling.
This article explains the rise of multi‑cluster designs, outlines three common scenarios—cloud burst, disaster recovery, and active‑active—examines the complexities of application delivery across clusters, and details how Kubernetes and Alibaba Cloud’s ACK implement unified APIs, tunnel mechanisms, and high‑availability to enable true multi‑cloud operations.
This article explains Istio's security features, focusing on mutual TLS configuration at global, namespace, and service levels, demonstrates practical YAML examples, shows how sidecar presence affects traffic, and discusses TLS mode choices, certificate handling, and real‑world deployment considerations.
This week’s cloud‑native roundup covers Alibaba Cloud Container Service’s top Forrester ranking, the first production‑ready 1.0 release of Virtual Kubelet, key Kubernetes design proposals, Knative event‑type namespace discussions, Istio multi‑cluster enhancements, and several noteworthy open‑source projects.
This guide walks through preparing three CentOS 7.6 VMs as combined master‑node hosts, configuring password‑less SSH, updating the OS, installing Ansible, importing required Docker images, setting up the Ansible inventory, deploying the OpenShift 3.11 cluster, creating an admin account, and troubleshooting common issues.
This tutorial walks through installing NFS, creating PersistentVolume and PersistentVolumeClaim, deploying Jenkins as a Kubernetes Deployment with a Service, configuring Jenkins credentials and plugins, and building a complete CI/CD pipeline that builds, pushes Docker images and promotes deployments across dev, qa, and prod environments.
This article explains cloud‑native networking fundamentals, detailing the role of CNI, the high‑performance packet processing capabilities of DPDK and its UIO and poll‑mode drivers, and introduces the Contiv/VPP Kubernetes plugin that leverages VPP for efficient pod‑to‑pod communication.
This guide walks you through configuring Kubernetes Horizontal Pod Autoscaler using both autoscaling/v1 (CPU‑only) and autoscaling/v2beta1 (custom metrics), covering template creation, deployment, Metrics Server migration, custom metrics adapter setup, load testing, and verification of scaling behavior.
In an interview, Xinlai Technology’s CEO/CTO Li Wenqiang, a Tencent Cloud Valuable Professional, warns that high costs, expertise gaps and vendor lock‑in hinder cloud migration, urges multi‑cloud interoperability, praises Docker‑Kubernetes as the catalyst for cloud‑native development, and predicts rapid growth of edge, 5G, IoT and serverless workloads despite current low awareness in China, while highlighting the TVP program’s role in community knowledge sharing.
This week’s roundup covers Kubernetes 1.16 API deprecations, new managed Prometheus services from Azure and Alibaba Cloud, upcoming KEP enhancements, Knative serving updates, the Kopf operator framework, curated reading links, and a CNCF‑Alibaba cloud‑native course on networking and policies.
The article outlines Alibaba Cloud's ACK migration solution, detailing how ACK ensures reliability and security, the three key questions to address, comprehensive migration design—including cluster planning, data transfer, monitoring, and traffic switching—along with open‑source tools, hybrid management 2.0, edge integration, and real‑world case studies.
This article explains the core principles of Kubernetes Horizontal Pod Autoscaler, walks through a concrete scaling example, discusses noise handling, cooldown periods, boundary calculations, and traces the evolution of HPA across API versions with practical YAML snippets.
This article details Xiaomi's Ocean elastic scheduling platform's challenges in monitoring massive Kubernetes clusters, the transition from Open‑Falcon to a Prometheus‑based solution with remote storage, partitioned deployment strategies, performance testing, and future plans for automated scaling and data analytics.
The latest Kube-OVN release introduces traffic mirroring, IPv6 beta support, an IP‑conflict‑checking webhook, CRD‑based subnet management, and Go module dependency handling, while also summarizing the project’s core networking capabilities and its role in extending Kubernetes with OVN features.
Learn how to overcome the complexities of machine‑learning workflow management by installing Kubeflow Pipelines on Alibaba Cloud using Kustomize, including prerequisites, TLS setup, persistent storage with SSD disks, image registry replacement, and deployment verification steps.
The story follows a tiny PHP application named Phippy, who moves from a lonely shared host into a container, meets the wise Captain Kube, learns about Pods, Replication Controllers, services, volumes, and namespaces, and discovers how Kubernetes orchestrates isolated yet connected workloads, illustrated through a whimsical maritime metaphor.
This guide walks through building a Go REST‑API, containerizing it, deploying multiple Knative Service revisions, configuring traffic percentages for gray releases, validating revisions before traffic shift, and rolling back, while comparing Knative’s traffic‑driven model to traditional pod‑based deployments.
UCloud integrated GitLab with its custom Kubernetes‑based container service platform KUN to achieve daily automated deployments, detailing CI/CD goals, branch strategy, pipeline design, Kaniko image building, runner execution, and a specialized YAML editor for seamless cloud‑native development.
KT Connect is a lightweight, open‑source Kubernetes developer tool that creates bidirectional tunnels between a local machine and a cluster, offering commands like connect, exchange, and mesh plus a visual dashboard to accelerate local development, testing, and continuous delivery workflows.
The talk from KubeCon 2019 details how a major commercial bank adopted a container‑based PaaS platform, covering digital transformation drivers, agile and DevOps practices, a multi‑cluster Kubernetes architecture, the custom Kube‑OVN networking solution, and the resulting operational and business benefits.
This article examines the limitations of Prometheus's original V2 time‑series storage, proposes a block‑oriented V3 architecture that tackles series churn, write amplification, and indexing inefficiencies, and validates the new design with extensive benchmarks showing dramatic reductions in memory, CPU, and disk usage.
This article provides a comprehensive walkthrough of using Go's crypto library for hashing, symmetric and asymmetric encryption, certificate generation, and TLS/HTTPS server and client implementation, illustrating how these techniques are applied in kubeadm to simplify Kubernetes cluster security.
The article examines the limitations of traditional threshold‑based autoscaling in Kubernetes, explains three core challenges—percentage fragmentation, capacity‑planning pitfalls, and resource‑utilization dilemmas—then expands the autoscaling concept across four workload types and outlines the cloud‑native components that address them.
This article explains the practical motivations behind creating Kube-OVN, outlines its design principles, describes its overall architecture and network model, and details key features such as subnet management, IP allocation, QoS, gateway handling, traffic mirroring, and future development plans.
Through the whimsical story of a lonely PHP app named Phippy, the article introduces core Kubernetes concepts—containers, Pods, Replication Controllers, Services, Volumes, and Namespaces—using vivid metaphors to help readers grasp how container orchestration works in modern cloud-native environments.
This article describes Ctrip’s large‑scale continuous delivery system, its benefits for efficiency, quality, reliability and team collaboration, the evolution of its deployment models, the design of a unified Jenkins‑based build platform, and practical experiences running Jenkins on Kubernetes with elastic scheduling and workspace management.
This article introduces the 58 self‑developed Faas serverless function compute platform, explaining its background, key features, architecture components, function build and deployment processes, scaling mechanisms, and its role in enabling rapid development of mini‑program cloud solutions.
This page introduces Alibaba’s free‑downloadable book “Alibaba Cloud‑Native Practice: 15 Lectures,” which compiles key insights from nine years of cloud‑native engineering, covering Kubernetes migration, large‑scale container reliability, serverless, GPU sharing, image distribution, and other real‑world solutions for developers.
This article explains the concept of cloud native computing, covering its definitions, the role of containers and orchestration, the benefits and challenges of micro‑service architectures, and practical tools like Docker and Kubernetes for building scalable, portable applications.
This article details Xiaomi's end‑to‑end, highly available Kubernetes monitoring solution that combines Prometheus, OpenTSDB, and Falcon to handle massive dynamic metrics, ensure persistent storage, and support seamless scaling across multiple clusters.
An in‑depth look at Didi’s Jianshu Machine Learning Platform reveals its end‑to‑end AI workflow—from experiment environments and batch training to high‑availability online serving—highlighting resource‑efficient Kubernetes scheduling, Docker‑based reproducible environments, a custom parameter server, and the IFX inference engine that together accelerate development, training, and deployment.
This article explains the core concepts of Knative Build, outlines its most important features, and provides detailed YAML examples for steps, templates, sources, service accounts, volumes, and timeout configuration, helping developers create native Kubernetes pipelines without pre‑provisioned build environments.
This article explains why Jaeger is a popular cloud‑native tracing solution, describes its architecture, sampling options, and deployment strategies on Kubernetes—including DaemonSet and Sidecar modes—followed by a step‑by‑step Django integration example and guidance on monitoring, alerting, and resource cleanup.
This article introduces Helm as a Kubernetes package manager, explains the Chinese Helm Hub alternative AppHub, guides readers through installing Helm v3, adding the AppHub repository, and quickly deploying the Guestbook example with step‑by‑step commands and optional one‑click UI.
Alibaba Cloud’s Kubernetes service integrates four native monitoring services—SLS, ARMS, AHAS, and Cloud Monitor—while offering enhanced open‑source components and autoscaling mechanisms such as HPA, VPA, cronHPA, Resizer, Cluster‑Autoscaler, and virtual‑kubelet‑autoscaler, enabling cloud‑native apps to achieve robust observability and elastic scaling.
On June 29, the Apache Flink Beijing Meetup presented a comprehensive analysis of Flink 1.9’s major architectural changes, new Table API & SQL capabilities, runtime and core enhancements, and future roadmap, with slides and resources made available for download.
This article summarizes the SOFAStack Cloud Native Workshop held at KubeCon China 2019, detailing Ant Financial’s journey from centralized to cloud‑native architectures, the open‑source SOFAStack ecosystem, and a hands‑on five‑hour demo that builds a micro‑service‑based online bookstore using Kubernetes, Service Mesh, Serverless, and distributed transaction technologies.
OpenKruise, announced at KubeCon Shanghai 2019, is Alibaba's open‑source cloud‑native automation engine that extends Kubernetes with custom controllers for deployment, upgrade, scaling, and sidecar management, offering in‑place updates, parallel upgrades, and a GitHub repository for community contributions.
The Kubernetes 1.15 release introduces 25 enhancements—including stable, beta, and alpha features—focused on sustainability, API extensibility, admission webhook improvements, cluster lifecycle stability, CSI storage advances, and deprecations, providing a comprehensive overview of the new capabilities and updates.
This article details the design and evolution of a highly available, persistent, and dynamically adjustable Kubernetes monitoring solution at Xiaomi, covering initial Falcon‑based approaches, the transition to Prometheus with remote storage via OpenTSDB, federation‑based partitioning, deployment strategies, performance testing, and future enhancements.
The article analyzes a slowdown issue in the 58 Cloud Platform caused by an overloaded API Server and uneven Etcd load, explains the root causes—including load‑balancing failure and missing namespace segmentation—and presents concrete remediation steps such as DNS round‑robin, namespace partitioning, Etcd client upgrade, and cache‑enabled queries.
This article explains how container technology, including Docker and Kubernetes, empowers modern frontend development by improving build isolation, accelerating testing, enabling rapid rollbacks, and providing stable, scalable deployment pipelines for web, mobile, and mini‑program applications.
The article explains how Docker and Kubernetes use Linux namespaces to isolate processes, network, IPC, mounts, UTS and users, and employ cgroups to enforce CPU, memory and I/O limits, detailing Docker’s architecture, Kubernetes’s millicore‑based resource model, QoS classes, and the hierarchical pod‑level cgroup structure.
Kube-OVN 0.5 introduces full Kubernetes NetworkPolicy support via Openflow, customizable container interfaces and MTU, automatic system parameter tuning, auto‑computed default gateways, and additional CLI options, while its open‑source design brings comprehensive OVN‑based networking features to Kubernetes across diverse platforms.
This roundup covers Gartner’s eight predicted cloud‑native infrastructure trends, a five‑year reflection on Kubernetes, recent upstream Kubernetes changes, and highlights two open‑source tools—ksniff for pod traffic capture and Flagger for service‑mesh‑based canary releases—providing developers with actionable insights into the evolving cloud‑native ecosystem.
The article chronicles the historical shift from low‑level functions through object‑oriented, interface‑driven, and component‑based designs to WebServices, microservices, and finally serverless cloud‑native applications, highlighting key industry milestones, Amazon's architectural principles, and the role of DevOps, Docker, and Kubernetes.
This tutorial walks through setting up Knative Eventing to capture Kubernetes events, covering the Broker/Trigger model, required prerequisites, creating service accounts, defining an ApiServerSource, deploying a simple event‑display service, configuring a Broker and Trigger, and verifying event delivery.
This article explains why modern enterprises need a middle platform, how to construct a cloud‑native technical middle platform using Kubernetes and .NET Core, and the advantages of these technologies for fast, cost‑effective development and operations in startup environments.
This article explains how incorporating hosted‑cloud physical servers into UCloud's UK8S cluster enables seamless hybrid‑cloud operation by improving resource utilization during low‑traffic periods, simplifying network, storage, and load‑balancing configurations, and reducing the operational overhead of managing separate Kubernetes clusters.
This article summarizes OPPO's comprehensive Docker security strategy, covering the container ecosystem, key vulnerabilities, image and runtime protection, Kubernetes hardening, deep image scanning, host hardening, logging, traffic analysis, and future challenges in large‑scale container deployments.
This week’s roundup covers two high‑severity Docker CVEs (CVE‑2019‑5021 privilege escalation in Alpine images and CVE‑2018‑15664 TOCTOU flaw in docker cp), Kubernetes moving to Go modules, new Envoy request‑mirror and route‑debug features, Knative’s stateful‑serverless experiment, Istio 1.0 EOL, Cilium’s BPF‑based network policy, and emerging Service Mesh trends, all with reference links for deeper reading.
This guide walks you through creating a Kubernetes cluster on Alibaba Cloud, installing Istio and Knative components, deploying a Go Hello World service, and using scripts and load‑testing tools to observe Knative’s zero‑scale‑to‑one and automatic scaling behavior.
The article explains the evolution of server-centric models from IaaS, PaaS, and SaaS to modern Serverless concepts such as BaaS and FaaS, discusses their technical mechanisms, practical implementations with Flask, and surveys public, private, and packaging frameworks within the cloud computing ecosystem.
This talk shares Kuaishou's practical experience in building a private Kubernetes container cloud, optimizing Docker image layers, using Helm for application deployment, implementing GitLab CI/CD pipelines, and adopting Istio service mesh for multi‑cluster service governance, highlighting challenges and solutions for real‑world adoption.
This article introduces Istio as an open‑source service mesh, explains its data‑plane and control‑plane architecture, outlines its traffic management, security, and telemetry features, discusses performance considerations, and shows how Lingque Cloud ASM leverages Istio to solve typical microservice problems such as debugging, testing, release processes, and flexible network policies.
Facing scaling and resource‑management limits of a legacy Java‑centric ops platform, a team rebuilt their deployment system from 2018 onward, adopting Docker, Kubernetes, Prometheus, and kube‑router, while ensuring seamless migration for thousands of services and addressing networking, memory, and debugging challenges.
The 2019 Enterprise‑Level DevOps Empowerment Forum in Chengdu gathered experts from major Chinese banks and telecoms to share practical experiences, including China Merchants Bank’s K8s‑based pipeline, measurement challenges, and collaborative Q&A, illustrating how organizations can accelerate DevOps adoption and improve delivery efficiency.
At KubeCon EU 2019, Alibaba Cloud expert Deng Hongchao dissected key application‑management advances—including automated ConfigMap‑driven upgrades, server‑side apply, GitOps workflows, and automated canary rollouts—offering practical analysis and guidance for modern Kubernetes deployments.
This article explains Kubernetes native NetworkPolicy, covering its purpose, supported CNI plugins, detailed field definitions, default behaviors, example policies, and historical changes, providing a comprehensive guide for configuring pod communication rules in a cloud‑native environment.
