BestHub
Sign in
Tagged articles
17 articles
Page 1 of 1
Ops Community
Ops Community
May 17, 2026 · Cloud Native

Istio Service Mesh Basics: What Is the Sidecar Pattern and Why Microservices Need It?

The article explains how traditional microservice architectures embed network concerns such as time‑outs, retries, circuit breaking, traffic monitoring and mTLS in application code, why this leads to code coupling, upgrade difficulty and duplicated effort, and how Istio’s sidecar‑based service mesh cleanly separates those concerns while providing traffic management, observability and security features.

EnvoyIstioKubernetes
0 likes · 30 min read
Istio Service Mesh Basics: What Is the Sidecar Pattern and Why Microservices Need It?
Ray's Galactic Tech
Ray's Galactic Tech
Jan 14, 2026 · Information Security

From Simple HTTPS to Enterprise‑Grade mTLS: Build a Secure Nginx Infrastructure

This guide explains why HTTPS only encrypts traffic while mTLS authenticates both parties, and provides a step‑by‑step solution—including environment setup, CA design, certificate generation, Nginx mutual‑TLS configuration, role‑based access, Kubernetes deployment, logging, and best‑practice recommendations—to create a production‑ready, enterprise‑level security infrastructure.

Certificate AuthorityDevOpsMutual TLS
0 likes · 8 min read
From Simple HTTPS to Enterprise‑Grade mTLS: Build a Secure Nginx Infrastructure
MaGe Linux Operations
MaGe Linux Operations
Jan 5, 2026 · Cloud Native

What Really Happens When You Deploy Istio? 6 Hard‑Learned Lessons from a Year‑Long Production Run

After a year of running Istio in production on a 80‑service, 200‑node Kubernetes fleet, we share six painful pitfalls—including unexpected latency, debugging complexity, upgrade nightmares, configuration explosion, compatibility issues, and mTLS challenges—plus practical mitigation steps and guidance on when Istio truly adds value.

ConfigurationDebuggingIstio
0 likes · 22 min read
What Really Happens When You Deploy Istio? 6 Hard‑Learned Lessons from a Year‑Long Production Run
MaGe Linux Operations
MaGe Linux Operations
Oct 14, 2022 · Information Security

How Dapr Secures Service Calls and Pub/Sub with mTLS and Access Policies

This article explains Dapr's security foundation, covering end‑to‑end mTLS for service invocation, configurable access control policies for services and Pub/Sub components, trust domains, SPIFFE identities, and practical examples of policy configurations and deployment steps for both local and Kubernetes environments.

DaprSecurityService Invocation
0 likes · 17 min read
How Dapr Secures Service Calls and Pub/Sub with mTLS and Access Policies
Top Architect
Top Architect
May 30, 2022 · Information Security

Implementing Transparent Encrypted Communication with mTLS Using Nginx and OpenSSL

This article explains how to secure cross‑data‑center traffic by applying TLS principles, setting up a private Certificate Authority, generating self‑signed certificates with OpenSSL, configuring mutual TLS (mTLS) on Nginx proxies for both HTTP and TCP streams, and verifying the setup with curl and redis‑cli commands.

Certificate AuthorityNginxOpenSSL
0 likes · 24 min read
Implementing Transparent Encrypted Communication with mTLS Using Nginx and OpenSSL
Architect
Architect
May 13, 2022 · Information Security

Implementing Transparent Encrypted Communication with mTLS Using Nginx and Self‑Signed Certificates

This article explains how to secure cross‑data‑center traffic by encrypting it with TLS/mTLS, covering the principles of TLS, certificate authority roles, generating self‑signed certificates with OpenSSL, and configuring Nginx proxies for both HTTP and TCP streams to provide transparent encrypted channels without modifying applications.

Certificate AuthorityNginxOpenSSL
0 likes · 26 min read
Implementing Transparent Encrypted Communication with mTLS Using Nginx and Self‑Signed Certificates
Architect
Architect
Jan 17, 2022 · Cloud Native

Introducing NGINX Service Mesh: Features, Architecture, and Getting Started

This article introduces NGINX Service Mesh (NSM), a lightweight, highly integrated service‑mesh solution for Kubernetes that leverages NGINX Plus as a data plane, explains its security, traffic‑management, visualization, and hybrid‑deployment capabilities, outlines its architecture and components, and provides step‑by‑step commands for installation, verification, and sidecar injection.

KubernetesNGINX Service MeshService Mesh
0 likes · 10 min read
Introducing NGINX Service Mesh: Features, Architecture, and Getting Started
Top Architect
Top Architect
May 31, 2021 · Cloud Native

Why I Switched from Istio to Linkerd: A Practical Service Mesh Evaluation

After two years of using Istio in production, the author explains the operational complexities, reliability issues, and protocol limitations that led to abandoning Istio in favor of Linkerd, highlighting the pros and cons of both service meshes within Kubernetes environments.

IstioKubernetesLinkerd
0 likes · 10 min read
Why I Switched from Istio to Linkerd: A Practical Service Mesh Evaluation
Cloud Native Technology Community
Cloud Native Technology Community
Dec 25, 2020 · Cloud Native

How Istio Secures Service Mesh: Zero‑Trust, mTLS, and AAA Explained

This article examines Service Mesh security by outlining core requirements, detailing Istio’s built‑in zero‑trust mechanisms—including mutual TLS, AAA, and automatic certificate rotation—and comparing the security features of Linkerd and Alauda Service Mesh, offering practical insights for designing robust microservice protection.

Cloud NativeIstioLinkerd
0 likes · 11 min read
How Istio Secures Service Mesh: Zero‑Trust, mTLS, and AAA Explained
Cloud Native Technology Community
Cloud Native Technology Community
Jun 3, 2020 · Cloud Native

10 Common Istio Pitfalls and How to Resolve Them

This article outlines ten frequent Istio exceptions—from service port naming constraints and flow‑control ordering to mTLS‑induced connection drops—explaining their root causes, diagnostic steps, and practical best‑practice solutions for reliable mesh deployments.

IstioKubernetesObservability
0 likes · 17 min read
10 Common Istio Pitfalls and How to Resolve Them