BestHub
Sign in
Tagged articles

service mesh

470 articles · Page 1 of 5
Woodpecker Software Testing
Woodpecker Software Testing
Aug 24, 2026 · Cloud Native

Microservice Performance Testing: Emerging Trends for the Next Three Years

The article argues that microservice performance testing must evolve from isolated load‑generation to topology‑aware, chaos‑integrated, AI‑driven practices, highlighting upcoming trends such as service‑mesh‑based traffic modeling, built‑in chaos‑as‑a‑test, and large‑language‑model‑assisted root‑cause analysis to prevent cascading failures.

AIOpschaos engineeringmicroservices
0 likes · 7 min read
Microservice Performance Testing: Emerging Trends for the Next Three Years
Random Bulletin
Random Bulletin
Aug 20, 2026 · Cloud Native

TraceID Propagation: From Manual Hand‑coding to Automatic OpenTelemetry

The article explains why propagating TraceID and parent SpanID across services, processes, and asynchronous boundaries is essential for complete distributed tracing, outlines the pain points of manual header handling, and walks through the evolution toward standardized W3C Trace Context, automatic instrumentation, and OpenTelemetry‑based solutions while highlighting async and service‑mesh pitfalls.

OpenTelemetryW3C Trace Contextasynchronous context
0 likes · 18 min read
TraceID Propagation: From Manual Hand‑coding to Automatic OpenTelemetry
YiSu Grain
YiSu Grain
Aug 19, 2026 · Cloud Native

Day 60 Cloud‑Native Case Study: Service Governance, Reliable Messaging, and Observability

This Day 60 case study walks through a regional medical appointment platform that has been broken into micro‑services on a container cluster, asking you to select and justify service discovery, TCC/Saga, reliable messaging, Kubernetes, Service Mesh and observability measures, and to explain their benefits and trade‑offs.

KubernetesReliable Messagingdistributed transactions
0 likes · 36 min read
Day 60 Cloud‑Native Case Study: Service Governance, Reliable Messaging, and Observability
Random Bulletin
Random Bulletin
Aug 13, 2026 · Cloud Native

Canary Releases: From Simple Percentages to Precise, Attribute‑Based Deployments

The article examines how traditional percentage‑based canary releases evolve into fine‑grained, attribute‑driven deployments with session stickiness, automated SLO gating, traffic mirroring, and service‑mesh integration, highlighting five pain points, practical solutions, and the hidden prerequisites for large‑scale systems.

IstioKubernetesSLO
0 likes · 19 min read
Canary Releases: From Simple Percentages to Precise, Attribute‑Based Deployments
CodeSmart Hoops
CodeSmart Hoops
Aug 10, 2026 · Operations

How SkyWalking Instantly Reveals Service Topology and DB Bottlenecks: A Deep Dive into APM and Distributed Tracing

This article walks through a real‑world microservice latency incident, then explains how SkyWalking’s Java agent provides zero‑intrusion tracing, automatically builds service topology, offers built‑in alerting and profiling, and compares storage options and deployment patterns for production observability.

APMJava AgentSkyWalking
0 likes · 29 min read
How SkyWalking Instantly Reveals Service Topology and DB Bottlenecks: A Deep Dive into APM and Distributed Tracing
Golang Shines
Golang Shines
Jul 17, 2026 · Cloud Native

Building a Scalable Go Service Mesh from Scratch: Core Cloud‑Native Practices

This article walks through why Go is ideal for cloud‑native development and demonstrates step‑by‑step how to build a scalable service mesh, covering static compilation, HTTP services, Go modules, Gin/Gorilla APIs, configuration, logging, health checks, service registration, load balancing, sidecar proxies, traffic interception, circuit breaking, rate limiting, retries, and distributed tracing with OpenTelemetry.

GoKubernetescloud-native
0 likes · 16 min read
Building a Scalable Go Service Mesh from Scratch: Core Cloud‑Native Practices
Airbnb Technology Team
Airbnb Technology Team
Jul 16, 2026 · Backend Development

Viaduct Five‑Year Review: Modernizing a Data‑Driven Service Mesh

Over five years, Airbnb's Viaduct service mesh grew traffic eightfold, doubled the number of owning teams to over 130, tripled its codebase to 1.5 million lines, halved incident minutes, and kept operational costs linear with QPS, leading to a major redesign and open‑source release.

AirbnbGraphQLbackend architecture
0 likes · 14 min read
Viaduct Five‑Year Review: Modernizing a Data‑Driven Service Mesh
Su San Talks Tech
Su San Talks Tech
Jul 8, 2026 · Backend Development

How to Choose the Right API Gateway for Your Architecture?

The article analyzes why the gateway layer often becomes a bottleneck, compares four gateway architecture patterns, evaluates protocol choices between HTTP and gRPC, presents performance benchmarks of open‑source gateways, reviews industry case studies, and finally recommends an APISIX‑based gRPC‑only architecture with domain‑level aggregation.

API GatewayAPISIXBFF
0 likes · 14 min read
How to Choose the Right API Gateway for Your Architecture?
Mike Chen Rui
Mike Chen Rui
Jul 7, 2026 · Cloud Native

The 4 Most Common Microservice Architecture Patterns Explained

This article breaks down four key microservice architecture patterns—data‑sharing, aggregation, sidecar proxy, and asynchronous messaging—detailing their purpose, typical use cases, benefits, and why some are only suitable as short‑term solutions during system migration.

AggregationAsynchronous Messagingarchitecture patterns
0 likes · 5 min read
The 4 Most Common Microservice Architecture Patterns Explained
Airbnb Technology Team
Airbnb Technology Team
Jun 17, 2026 · Operations

How to Build Reliable Monitoring for Large‑Scale Systems

This article explains how Airbnb broke a dangerous circular dependency in its observability stack by isolating metric collection onto dedicated Kubernetes clusters, adding a custom L7 network layer to decouple from the service mesh, and implementing meta‑monitoring with a dead‑man’s‑switch to keep monitoring systems reliable during failures.

AirbnbKubernetesmeta-monitoring
0 likes · 11 min read
How to Build Reliable Monitoring for Large‑Scale Systems
Raymond Ops
Raymond Ops
Jun 11, 2026 · Cloud Native

Master Istio: Core Service Mesh Concepts and Hands‑On Deployment Guide

This comprehensive guide explains Istio’s sidecar architecture, traffic management, mutual TLS security, and observability features, then walks through prerequisite checks, installation with istioctl and Helm, sample Bookinfo deployment, advanced configuration, troubleshooting, monitoring, and backup strategies for production‑grade service meshes.

DevOpsIstioKubernetes
0 likes · 29 min read
Master Istio: Core Service Mesh Concepts and Hands‑On Deployment Guide
TechVision Expert Circle
TechVision Expert Circle
May 24, 2026 · Operations

Can Your Business Keep Running When an API Fails? Strategies for API Resilience

Recent high‑profile outages—from AWS DynamoDB to Cloudflare—show that API failures can cripple enterprises, yet most teams lack visibility into their dependencies; this article examines real‑world API outage scenarios, outlines a four‑layer resilience architecture, and offers concrete steps such as audits, multi‑vendor redundancy, and chaos testing.

API resilienceCircuit Breakerfault tolerance
0 likes · 12 min read
Can Your Business Keep Running When an API Fails? Strategies for API Resilience
Subtle Storm
Subtle Storm
May 21, 2026 · Cloud Native

Final Review: Breaking Down Service Mesh Architecture for the Software Architect Exam

The article explains Service Mesh as a cloud‑native architecture that separates control and data planes, details its sidecar proxies, core components like Istio Pilot and Citadel, and outlines key capabilities such as traffic management, security, observability, and resilience to help exam candidates master the topic.

Istiocloud-nativemicroservices
0 likes · 5 min read
Final Review: Breaking Down Service Mesh Architecture for the Software Architect Exam
LuTiao Programming
LuTiao Programming
May 20, 2026 · Backend Development

Why Underrated API Architecture Patterns Give Experts Unmatched Scalability

The article analyzes various API architecture patterns—monolithic API, microservice API, API Gateway, BFF, Service Mesh, API Mesh, Strangler Pattern, event‑driven API, and GraphQL Federation—explaining their origins, trade‑offs, hidden costs, and suitability for different team sizes and business scenarios, ultimately showing how the right pattern ensures long‑term system evolution and scalability.

API GatewayAPI architectureBFF
0 likes · 13 min read
Why Underrated API Architecture Patterns Give Experts Unmatched Scalability
Ops Community
Ops Community
May 17, 2026 · Cloud Native

Istio Service Mesh Basics: What Is the Sidecar Pattern and Why Microservices Need It?

The article explains how traditional microservice architectures embed network concerns such as time‑outs, retries, circuit breaking, traffic monitoring and mTLS in application code, why this leads to code coupling, upgrade difficulty and duplicated effort, and how Istio’s sidecar‑based service mesh cleanly separates those concerns while providing traffic management, observability and security features.

EnvoyIstioKubernetes
0 likes · 30 min read
Istio Service Mesh Basics: What Is the Sidecar Pattern and Why Microservices Need It?
Coder Trainee
Coder Trainee
May 2, 2026 · Cloud Native

Spring Cloud Microservices Series #10: Key Takeaways and Best Practices

This article reviews the entire Spring Cloud microservices series, presents a full technology stack diagram, outlines production‑grade best practices for service decomposition, configuration, remote calls, rate limiting, databases, logging and monitoring, lists common pitfalls, offers performance‑tuning tips, discusses the pros and cons of microservices, and points to future directions such as service mesh, serverless and cloud‑native adoption.

KubernetesSpring Cloudbest practices
0 likes · 14 min read
Spring Cloud Microservices Series #10: Key Takeaways and Best Practices
Cloud Architecture
Cloud Architecture
Apr 28, 2026 · Cloud Native

Kubernetes ‘Deadlock’ Explained: Guide to Diagnosing and Fixing Performance Issues

During a high‑traffic load test, a Kubernetes 1.28 cluster appeared to stall despite low CPU and memory usage, revealing hidden bottlenecks across container limits, conntrack saturation, CoreDNS latency, and control‑plane overload; the article walks through a systematic root‑cause analysis and step‑by‑step remediation.

KubernetesLoad TestingPerformance
0 likes · 34 min read
Kubernetes ‘Deadlock’ Explained: Guide to Diagnosing and Fixing Performance Issues
Ops Community
Ops Community
Apr 5, 2026 · Operations

Choosing the Right Ingress Controller: Nginx, Traefik, or Envoy?

This guide provides a deep technical comparison of Nginx Ingress Controller, Traefik, and Envoy Proxy, covering architecture, configuration, performance, feature sets, deployment patterns, security hardening, monitoring, and troubleshooting to help operators select the best solution for their Kubernetes clusters.

EnvoyKubernetesTraefik
0 likes · 28 min read
Choosing the Right Ingress Controller: Nginx, Traefik, or Envoy?
Cloud Architecture
Cloud Architecture
Apr 2, 2026 · Cloud Native

Practical Guide to Kubernetes Service Discovery: Theory to Production-Ready Design

This comprehensive guide explains why Kubernetes service discovery is more than name‑to‑IP mapping, details the control‑plane and data‑plane components, compares Service types, explores CoreDNS caching, EndpointSlice, kube‑proxy modes, multi‑cluster strategies, and provides production‑grade code samples and troubleshooting steps.

CoreDNSEndpointSliceGateway API
0 likes · 46 min read
Practical Guide to Kubernetes Service Discovery: Theory to Production-Ready Design
Architect Practice
Architect Practice
Mar 18, 2026 · Cloud Native

Design and Implementation of Traffic Swimlanes for Full‑Link Isolation and Canary Releases

Traffic swimlanes provide logical isolation for microservice requests by tagging, propagating, and routing traffic based on lane metadata, enabling cost‑effective testing environments, canary releases, A/B testing, full‑link load testing, and parallel development while reducing resource consumption and improving stability.

JavaSpring Cloudcanary release
0 likes · 29 min read
Design and Implementation of Traffic Swimlanes for Full‑Link Isolation and Canary Releases
Linux Ops Smart Journey
Linux Ops Smart Journey
Mar 3, 2026 · Cloud Native

Prevent Service Avalanches: Configuring Circuit Breaker & Connection Limits in Envoy Gateway

This tutorial explains how to use Envoy Gateway on Kubernetes to implement circuit breaker and connection‑limit policies, walks through the necessary YAML configurations, demonstrates verification with the hey load‑testing tool, and shows how these mechanisms improve system resilience in microservice architectures.

Connection LimitEnvoyKubernetes
0 likes · 12 min read
Prevent Service Avalanches: Configuring Circuit Breaker & Connection Limits in Envoy Gateway
DevOps Operations Practice
DevOps Operations Practice
Feb 4, 2026 · Cloud Native

How to Implement Canary Deployments with Istio on Kubernetes

This guide explains why gray (canary) releases are essential for production stability in internet companies, and provides step‑by‑step configurations using Istio’s VirtualService, Gateway, and DestinationRule resources to route traffic by percentage or request headers in a Kubernetes cluster.

IstioKubernetescanary deployment
0 likes · 6 min read
How to Implement Canary Deployments with Istio on Kubernetes
Java Tech Enthusiast
Java Tech Enthusiast
Feb 2, 2026 · Backend Development

Mastering High‑Concurrency Spring Boot: 7 Essential Load‑Balancing Strategies

To keep Spring Boot applications stable under tens of thousands to millions of requests per second, this guide explains why load balancing evolves from a simple traffic splitter to a multi‑layer system and details seven critical strategies—from edge CDN to service mesh—required for resilient, cost‑effective high‑concurrency deployments.

API GatewayKubernetesSpring Boot
0 likes · 11 min read
Mastering High‑Concurrency Spring Boot: 7 Essential Load‑Balancing Strategies
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 15, 2026 · Cloud Native

Deploy Alibaba Cloud Service Mesh (ASM): Gateways, Traffic Management & Zero‑Trust

This guide explains how to set up Alibaba Cloud Service Mesh (ASM) on an ACK Kubernetes cluster, covering prerequisites, two methods of cluster registration, creation of north‑south and east‑west gateways, traffic routing with HTTPRoute, security policies using PeerAuthentication and AuthorizationPolicy, and observability configuration via Telemetry.

ASMAlibaba CloudGateway API
0 likes · 9 min read
Deploy Alibaba Cloud Service Mesh (ASM): Gateways, Traffic Management & Zero‑Trust
Subtle Storm
Subtle Storm
Jan 6, 2026 · Cloud Native

Canary Deployment: Making New Releases as Natural as Breathing

The article explains how Canary Deployment gradually rolls out new software to a small user subset, monitors performance, and rolls back quickly, offering lower risk, faster feedback, and higher release confidence for large‑scale, mission‑critical systems.

CI/CDGradual ReleaseKubernetes
0 likes · 11 min read
Canary Deployment: Making New Releases as Natural as Breathing
MaGe Linux Operations
MaGe Linux Operations
Jan 5, 2026 · Cloud Native

What Really Happens When You Deploy Istio? 6 Hard‑Learned Lessons from a Year‑Long Production Run

After a year of running Istio in production on a 80‑service, 200‑node Kubernetes fleet, we share six painful pitfalls—including unexpected latency, debugging complexity, upgrade nightmares, configuration explosion, compatibility issues, and mTLS challenges—plus practical mitigation steps and guidance on when Istio truly adds value.

ConfigurationIstioKubernetes
0 likes · 22 min read
What Really Happens When You Deploy Istio? 6 Hard‑Learned Lessons from a Year‑Long Production Run
LuTiao Programming
LuTiao Programming
Dec 23, 2025 · Cloud Native

Stop Fighting Microservice Complexity—Spring Boot 3.4.1 + Service Mesh Outsources the Burden

The article explains how microservice projects often become cluttered with retry, timeout, circuit‑breaker, TLS, logging and traffic‑splitting code, and shows that delegating these concerns to a Service Mesh such as Istio—combined with Spring Boot 3.4.1 and Gateway API—removes the burden from application code while providing traffic management, security and observability.

Gateway APIIstioKubernetes
0 likes · 8 min read
Stop Fighting Microservice Complexity—Spring Boot 3.4.1 + Service Mesh Outsources the Burden
Ray's Galactic Tech
Ray's Galactic Tech
Dec 19, 2025 · Cloud Native

Mastering Kubernetes Networking: From Core Model to Production‑Ready Practices

This comprehensive guide explains Kubernetes' core networking model, CNI plugins, service networking, ingress, network policies, DNS, service mesh, advanced CNI features, kube‑proxyless alternatives, multi‑cluster setups, security, observability, and troubleshooting techniques for building high‑performance, secure, and observable clusters.

NetworkPolicycloud-nativecni
0 likes · 10 min read
Mastering Kubernetes Networking: From Core Model to Production‑Ready Practices
Architect's Journey
Architect's Journey
Dec 3, 2025 · Cloud Native

Microservice Governance Guide: From Stable Operations to Maximum Efficiency

This comprehensive guide breaks down microservice governance into four pillars—node management, load balancing, routing, and fault tolerance—providing concrete configurations, algorithm choices, and service‑mesh recommendations to achieve 99.99% availability, cut wasted resources by over 30%, and halve iteration cycles.

fault tolerancegovernanceload balancing
0 likes · 16 min read
Microservice Governance Guide: From Stable Operations to Maximum Efficiency
Linux Ops Smart Journey
Linux Ops Smart Journey
Nov 20, 2025 · Cloud Native

Mastering Envoy Request Mirroring: Safe Shadow Testing for Production Traffic

This article explains Envoy's request mirroring feature, shows how it copies live HTTP requests to a test backend without affecting the original response, and provides step‑by‑step configuration examples for mirroring all traffic, selective paths, percentage‑based sampling, and header‑driven routing, plus practical tips and typical use cases.

EnvoyRequest MirroringShadow Testing
0 likes · 11 min read
Mastering Envoy Request Mirroring: Safe Shadow Testing for Production Traffic
Instant Consumer Technology Team
Instant Consumer Technology Team
Nov 17, 2025 · Cloud Native

How We Built a Scalable Traffic Governance System for Thousands of Microservices

This article details a company’s step‑by‑step evolution from basic observability to a full‑stack traffic governance framework—including automated tracing, adaptive rate‑limiting, circuit‑breaking, and intelligent gray‑release—enabling stable operation of a microservice ecosystem with tens of thousands of instances while cutting MTTR to minutes and resource waste by over 20%.

Traffic Managementcloud-nativemicroservices
0 likes · 24 min read
How We Built a Scalable Traffic Governance System for Thousands of Microservices
IT Architects Alliance
IT Architects Alliance
Oct 21, 2025 · Backend Development

How to Crush Microservice Communication Bottlenecks: Protocols, Meshes, and Code

Microservice architectures face severe communication bottlenecks due to network overhead, serialization costs, and connection management, but by adopting high‑performance protocols like gRPC, leveraging service meshes, optimizing load balancing, caching, connection pools, and robust monitoring, teams can dramatically improve latency and throughput.

gRPCload balancingmicroservices
0 likes · 12 min read
How to Crush Microservice Communication Bottlenecks: Protocols, Meshes, and Code
IT Architects Alliance
IT Architects Alliance
Oct 19, 2025 · Cloud Native

Mastering Cloud‑Native Autoscaling: HPA, VPA, CA, and Cost‑Aware Strategies

This article explores the challenges and best practices of cloud‑native scaling, covering Horizontal and Vertical Pod Autoscalers, Cluster Autoscaler cost optimization, event‑driven scaling with KEDA, traffic‑aware scaling in service meshes, and intelligent cost‑aware strategies backed by monitoring and future AI‑driven trends.

AutoscalingKubernetescloud-native
0 likes · 11 min read
Mastering Cloud‑Native Autoscaling: HPA, VPA, CA, and Cost‑Aware Strategies
Alibaba Cloud Native
Alibaba Cloud Native
Oct 15, 2025 · Cloud Native

What’s New in Higress 2.0? 30 Updates Including RAG MCP Server and Performance Fixes

The Higress 2.0 release introduces 30 changes—13 new features such as a RAG MCP server and ECDS‑based configuration refactor, 7 bug fixes, 5 refactorings, documentation updates and a test improvement—providing developers with enhanced knowledge‑management capabilities, more stable routing, and clearer documentation for cloud‑native service‑mesh environments.

MCPRAGbug fix
0 likes · 20 min read
What’s New in Higress 2.0? 30 Updates Including RAG MCP Server and Performance Fixes
Architect's Guide
Architect's Guide
Oct 7, 2025 · Backend Development

Mastering Backend Architecture: From Microservices to Service Mesh and Message Queues

This article presents a comprehensive roadmap for backend architects, covering microservice fundamentals, design principles, gateway patterns, communication protocols, service registration, configuration management, observability pillars, service mesh options, and a detailed comparison of modern message‑queue technologies.

Backendcloud-nativemessage queue
0 likes · 29 min read
Mastering Backend Architecture: From Microservices to Service Mesh and Message Queues
IT Architects Alliance
IT Architects Alliance
Oct 4, 2025 · Information Security

How Zero Trust and Service Mesh Secure Modern Microservices

This article examines the rising security risks in microservice architectures, explains why traditional perimeter defenses fall short, and presents a comprehensive zero‑trust strategy that combines service‑mesh mTLS, API‑gateway hardening, token‑exchange authentication, OPA policies, data‑level encryption, observability, and container‑level safeguards.

Authenticationmicroservicessecurity
0 likes · 11 min read
How Zero Trust and Service Mesh Secure Modern Microservices
IT Architects Alliance
IT Architects Alliance
Oct 2, 2025 · Cloud Native

Mastering Cloud‑Native Architecture: 6 Core Principles Every Engineer Should Know

This article outlines six fundamental cloud‑native architecture principles—immutable infrastructure, service mesh, observability, declarative APIs, resilient design, and shift‑left security—explaining their purpose, key practices, code examples, and how they interrelate to build scalable, reliable, and secure distributed systems.

Declarative APIResiliencecloud-native
0 likes · 11 min read
Mastering Cloud‑Native Architecture: 6 Core Principles Every Engineer Should Know
IT Architects Alliance
IT Architects Alliance
Sep 18, 2025 · Cloud Native

Why Containers, Kubernetes, and Service Mesh Are the Modern Cloud‑Native Trinity

An in‑depth look at how containers, Kubernetes, and Service Mesh together form the core of modern cloud‑native architectures, covering their evolution, practical adoption stages, trade‑offs in complexity, decision‑making matrices, best‑practice implementation tips, and emerging trends such as edge computing and WebAssembly.

Kubernetesarchitecturecloud-native
0 likes · 10 min read
Why Containers, Kubernetes, and Service Mesh Are the Modern Cloud‑Native Trinity
Cloud Native Technology Community
Cloud Native Technology Community
Sep 18, 2025 · Cloud Native

Why Kubernetes Gateway API Is the Next‑Gen Solution Over Ingress

Gateway API replaces the traditional Ingress API with a more powerful, standardized, role‑oriented model that supports advanced L4/L7 routing, multi‑protocol traffic, and seamless service‑mesh integration, addressing Ingress’s limitations in scalability, portability, and complex configuration for both platform and application teams.

Gateway APIKubernetesingress
0 likes · 11 min read
Why Kubernetes Gateway API Is the Next‑Gen Solution Over Ingress
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 12, 2025 · Cloud Native

Unlock Real Client IPs in Envoy: Step‑by‑Step Configuration Guide

This article explains why backend services often see proxy IPs instead of the true client address in modern cloud‑native architectures, and provides a detailed walkthrough of configuring Envoy—including X‑Forwarded‑For handling, code snippets, testing, and security recommendations—to ensure the original client IP is correctly propagated.

EnvoyX-Forwarded-Forip-address
0 likes · 6 min read
Unlock Real Client IPs in Envoy: Step‑by‑Step Configuration Guide
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 8, 2025 · Cloud Native

How Envoy’s Circuit Breakers and Outlier Detection Stop Service Avalanches

This article explains how Envoy’s circuit‑breaker and outlier‑detection features protect micro‑service architectures from avalanche failures by limiting concurrent connections, ejecting unhealthy instances, and provides configuration examples, testing methods, and best‑practice tips for building resilient cloud‑native systems.

Circuit BreakingEnvoycloud-native
0 likes · 11 min read
How Envoy’s Circuit Breakers and Outlier Detection Stop Service Avalanches
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 3, 2025 · Cloud Native

Mastering Envoy: Service Discovery, Load Balancing, and Health Checks Explained

Envoy, the high‑performance edge and service‑mesh proxy, offers three core mechanisms—service discovery, load balancing, and health checking—each with multiple configurable options and code examples, enabling operators and developers to optimize distributed systems for scalability, reliability, and performance in cloud‑native environments.

Envoyhealth checksservice mesh
0 likes · 9 min read
Mastering Envoy: Service Discovery, Load Balancing, and Health Checks Explained
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Aug 28, 2025 · Cloud Native

How to Upgrade Ztunnel in ASM Ambient Mode Without Traffic Disruption

This article explains the Ztunnel upgrade process in Alibaba Service Mesh Ambient mode, details the rolling and graceful‑shutdown mechanisms, presents performance test results with and without graceful shutdown, and offers best‑practice recommendations to minimize traffic interruption during upgrades.

Graceful Shutdownambient modecloud-native
0 likes · 10 min read
How to Upgrade Ztunnel in ASM Ambient Mode Without Traffic Disruption
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Aug 11, 2025 · Cloud Native

Simplify Kubernetes Egress with ASM Ambient Mode and Waypoint

Learn how ASM's Ambient mode and the Waypoint component streamline L7 egress traffic management in Kubernetes by replacing complex Sidecar configurations with simple ServiceEntry and Waypoint labels, reducing configuration overhead while preserving powerful security and observability features.

Egress TrafficKubernetesWaypoint
0 likes · 7 min read
Simplify Kubernetes Egress with ASM Ambient Mode and Waypoint
Linux Ops Smart Journey
Linux Ops Smart Journey
Jun 27, 2025 · Cloud Native

Deploy a Production-Ready Consul Service Mesh on Kubernetes with Helm

Learn how to set up a production-grade HashiCorp Consul service mesh on Kubernetes using Helm, covering prerequisites, chart handling, configuration files, deployment commands, and verification steps to ensure reliable service discovery, health checks, and secure communication in a cloud-native environment.

ConsulHelmKubernetes
0 likes · 6 min read
Deploy a Production-Ready Consul Service Mesh on Kubernetes with Helm
Architecture & Thinking
Architecture & Thinking
Jun 18, 2025 · Cloud Native

How Outlier Detection in Service Mesh Boosts Service Reliability

This article explains the concept, implementation principles, configuration details, and common use cases of Outlier Detection in Service Meshes, showing how it isolates faulty instances to improve stability, performance, and automated operations in cloud‑native environments.

cloud-nativemicroservicesoutlier detection
0 likes · 6 min read
How Outlier Detection in Service Mesh Boosts Service Reliability
Subtle Storm
Subtle Storm
Jun 12, 2025 · Cloud Computing

What Is a VPC and How Does It Strengthen Cloud Isolation and Security?

The article explains what a Virtual Private Cloud (VPC) is, how it creates an isolated, customizable network on a cloud provider, outlines its core components such as subnets, gateways, and peering, and details security designs, traffic flows, and advanced scenarios like high‑availability and hybrid cloud integration.

Cloud NetworkingNAT gatewaySecurity Groups
0 likes · 5 min read
What Is a VPC and How Does It Strengthen Cloud Isolation and Security?
Architect's Guide
Architect's Guide
Jun 10, 2025 · Cloud Native

How Microservices Evolve: From Monoliths to Cloud‑Native Service Governance

This article traces the evolution of internet architecture from monolithic and MVC designs through multi‑application and distributed systems, explains service‑oriented architecture and its benefits, introduces Dubbo‑based service governance, and outlines the core concepts, features, and implementation approaches of microservices.

Distributed ArchitectureDubboService Governance
0 likes · 12 min read
How Microservices Evolve: From Monoliths to Cloud‑Native Service Governance
Raymond Ops
Raymond Ops
Apr 24, 2025 · Cloud Native

Mastering Istio Security: Complete Guide to Mutual TLS, Authentication, and Authorization

This article explains how Istio secures micro‑service architectures by providing strong identity, fine‑grained access policies, transparent TLS encryption, and comprehensive AAA (authentication, authorization, audit) mechanisms, covering high‑level architecture, certificate management, peer and request authentication, and authorization policy design.

AuthenticationAuthorizationIstio
0 likes · 23 min read
Mastering Istio Security: Complete Guide to Mutual TLS, Authentication, and Authorization
IT Architects Alliance
IT Architects Alliance
Jan 22, 2025 · Cloud Native

Understanding Service Mesh: Concepts, Capabilities, Tools, and Challenges in the Cloud‑Native Era

The article explains what a service mesh is, its core components, key capabilities such as traffic management, security, observability, and resilience, reviews major tools like Istio, Linkerd and Consul Connect, and discusses the operational challenges and future directions within cloud‑native environments.

Performanceobservabilityservice mesh
0 likes · 17 min read
Understanding Service Mesh: Concepts, Capabilities, Tools, and Challenges in the Cloud‑Native Era
Raymond Ops
Raymond Ops
Jan 21, 2025 · Cloud Native

How Istio Sidecar Hijacks Traffic: Deep Dive into iptables and xDS

This article explains how Istio's sidecar proxy uses Envoy, iptables rules, and the xDS API to intercept and redirect traffic between Kubernetes pods, detailing the startup injection, traffic hijacking process, and how configuration is dynamically generated by istiod.

EnvoyIstioservice mesh
0 likes · 19 min read
How Istio Sidecar Hijacks Traffic: Deep Dive into iptables and xDS
IT Architects Alliance
IT Architects Alliance
Jan 13, 2025 · Information Security

Microservice Security: Challenges and Key Strategies

The article examines how microservice architecture, as a subset of distributed systems, expands the attack surface and introduces data fragmentation and communication complexities, and outlines comprehensive security strategies—including API protection, service‑to‑service encryption, infrastructure hardening, authentication, vulnerability management, and emerging technologies like service mesh and serverless computing—to safeguard modern applications.

APIServerlessservice mesh
0 likes · 18 min read
Microservice Security: Challenges and Key Strategies
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 13, 2025 · Cloud Native

Extending Alibaba Cloud Service Mesh (ASM): EnvoyFilter, Lua, Wasm, External Processing, and Custom Authorization Services

This article explains how Alibaba Cloud Service Mesh (ASM) can be extended using EnvoyFilter, Lua scripts, WebAssembly plugins, External Processing filters, and custom authorization services, detailing their capabilities, limitations, and recommended use cases for cloud‑native microservice environments.

ASMEnvoyExtension
0 likes · 11 min read
Extending Alibaba Cloud Service Mesh (ASM): EnvoyFilter, Lua, Wasm, External Processing, and Custom Authorization Services
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 8, 2025 · Cloud Native

Designing AZ‑Level Disaster Recovery with Alibaba Cloud ACK and Service Mesh ASM

This guide explains how to achieve zone‑level disaster recovery on Alibaba Cloud by deploying multi‑AZ ACK clusters, configuring Service Mesh ASM for observability and traffic shifting, and using Prometheus‑based metrics and alerts to detect and isolate failures, including step‑by‑step instructions and sample YAML manifests.

KubernetesMulti‑AZPrometheus
0 likes · 24 min read
Designing AZ‑Level Disaster Recovery with Alibaba Cloud ACK and Service Mesh ASM
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 3, 2025 · Cloud Native

How to Enable LLM Traffic Observability with Alibaba Cloud Service Mesh (ASM)

This guide explains how to use Alibaba Cloud Service Mesh (ASM) to add infrastructure‑level observability for large language model (LLM) traffic, covering custom access‑log fields, new Prometheus metrics for token usage, and adding model dimensions to native Istio metrics, with step‑by‑step commands and configuration examples.

ASMKubernetesLLM
0 likes · 14 min read
How to Enable LLM Traffic Observability with Alibaba Cloud Service Mesh (ASM)
Raymond Ops
Raymond Ops
Dec 22, 2024 · Cloud Native

Expose Istio Mesh Services with Nginx Ingress: A Step‑by‑Step Guide

This article explains the relationship between API gateways and service meshes, compares exposure methods, and provides a detailed, step‑by‑step guide for exposing services inside an Istio mesh using an Nginx Ingress Controller, including required annotations and configuration details.

API GatewayIstioKubernetes
0 likes · 8 min read
Expose Istio Mesh Services with Nginx Ingress: A Step‑by‑Step Guide
Programmer DD
Programmer DD
Dec 5, 2024 · Backend Development

Key Microservice Patterns: Service Discovery, API Gateways, Event‑Driven Architecture

This article consolidates a series of ByteMonk videos covering essential microservice architecture patterns—including service registration and discovery with Eureka, API gateway design, event‑driven architecture, service mesh, aggregator pattern, per‑service databases, bulkhead and strangler patterns, and monolith decomposition case studies—providing practical insights for building scalable, resilient systems.

API Gatewayarchitecture patternsevent-driven
0 likes · 7 min read
Key Microservice Patterns: Service Discovery, API Gateways, Event‑Driven Architecture
Tencent Cloud Developer
Tencent Cloud Developer
Dec 3, 2024 · Cloud Native

Tencent's PolarisMesh: Cloud-Native Microservice Governance Practices and Case Studies

Tencent's PolarisMesh showcases cloud-native microservice governance by detailing the shift from monoliths to containerized services, outlining service splitting principles, Kubernetes deployment, dynamic routing, fault isolation, and real-world case studies that demonstrate cost savings, reliability improvements, and open-source availability.

KubernetesPolarisMeshTencent
0 likes · 31 min read
Tencent's PolarisMesh: Cloud-Native Microservice Governance Practices and Case Studies
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Nov 28, 2024 · Cloud Native

Mastering Microservice Deployment: Multi‑Instance, Container, Serverless & Service Mesh

This article explains four common microservice deployment approaches—multi‑instance, containerized, serverless, and service‑mesh—detailing their architectures, advantages, disadvantages, and suitable scenarios to help engineers choose the right strategy for scalable, resilient systems.

ContainerizationServerlessdeployment
0 likes · 4 min read
Mastering Microservice Deployment: Multi‑Instance, Container, Serverless & Service Mesh
Architecture & Thinking
Architecture & Thinking
Nov 28, 2024 · Cloud Native

How to Scale Istio Across Hundreds of Services: Real‑World Strategies & Performance Insights

This article shares practical guidance on rolling out Istio service mesh to over ten business lines, covering selection of pilot projects, benefit analysis using access logs, sidecar injection, performance and resource impact, multi‑region active‑active architecture benefits, and rapid fault‑recovery tactics.

IstioPerformancecloud-native
0 likes · 9 min read
How to Scale Istio Across Hundreds of Services: Real‑World Strategies & Performance Insights
JavaEdge
JavaEdge
Nov 17, 2024 · Backend Development

How Netflix’s Data Gateway Simplifies Distributed Database Access

This article explains how Netflix built the Data Gateway platform to abstract and protect complex distributed databases, detailing its motivation, architecture, component overview, declarative runtime and deployment configurations, and real‑world case studies such as key‑value services, secure RDS, and seamless data migration.

Data GatewayDeclarative DeploymentKey-Value Service
0 likes · 20 min read
How Netflix’s Data Gateway Simplifies Distributed Database Access
Architecture & Thinking
Architecture & Thinking
Oct 12, 2024 · Cloud Native

Step-by-Step Guide to Deploying Istio and Configuring the BookInfo Demo

This tutorial walks you through connecting a test machine, downloading and installing Istio 1.8.6, configuring environment variables, deploying the BookInfo sample application, verifying pods and services, setting up inbound traffic, exposing dashboards, and introduces Istio’s core traffic‑management capabilities.

BookInfoDevOpsIstio
0 likes · 17 min read
Step-by-Step Guide to Deploying Istio and Configuring the BookInfo Demo
Soul Technical Team
Soul Technical Team
Sep 30, 2024 · Cloud Native

Practical Experience with Envoy in Soul: Cloud‑Native Traffic Management and Service Mesh

This article shares Soul's two‑year practice of using the cloud‑native Envoy proxy for high‑performance, high‑throughput, and highly available traffic management across north‑south and east‑west flows, covering architecture, dynamic service discovery, load balancing, health checks, WASM extensions, service‑mesh integration, Redis proxying, and future directions.

EnvoyKubernetesTraffic Management
0 likes · 14 min read
Practical Experience with Envoy in Soul: Cloud‑Native Traffic Management and Service Mesh
JD Tech
JD Tech
Aug 31, 2024 · Cloud Native

Joylive Agent: Java Bytecode‑Based Proxyless Service Mesh for Microservice Governance

The article introduces Joylive Agent, a Java bytecode‑enhancement framework that implements a proxyless service‑mesh architecture for microservice governance, detailing its background, design principles, plugin system, bytecode manipulation techniques, traffic‑control strategies, multi‑active models, and deployment practices on Kubernetes.

Java Agentbytecode enhancementcloud-native
0 likes · 37 min read
Joylive Agent: Java Bytecode‑Based Proxyless Service Mesh for Microservice Governance
JD Cloud Developers
JD Cloud Developers
Aug 28, 2024 · Cloud Native

How Java Bytecode Enhancement Powers a Proxyless Service Mesh for Microservice Governance

This article explains the challenges of microservice communication and fault tolerance, introduces service mesh and its drawbacks, and presents a Java bytecode‑enhancement solution that combines SDK performance with sidecar‑less governance, detailing the Joylive Agent architecture, plugin system, request abstraction, governance strategies, and Kubernetes deployment practices.

Java Agentbytecode enhancementmicroservices
0 likes · 40 min read
How Java Bytecode Enhancement Powers a Proxyless Service Mesh for Microservice Governance
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Aug 13, 2024 · Frontend Development

Traffic Hijacking and Request Interception Techniques for Unified Authentication Platforms

This article explores the concept of traffic hijacking, compares front‑end and back‑end interception methods, and provides practical proxy‑based implementations for fetch, XMLHttpRequest, and ReadableStream to achieve seamless request and response manipulation in a unified authentication system.

BackendProxyTraffic Hijacking
0 likes · 16 min read
Traffic Hijacking and Request Interception Techniques for Unified Authentication Platforms
Full-Stack DevOps & Kubernetes
Full-Stack DevOps & Kubernetes
Aug 7, 2024 · Cloud Native

Top 10 Must‑Know Kubernetes Features to Boost Your Cloud‑Native Apps

This article introduces ten essential Kubernetes technologies—including Helm Charts, Operators, Service Mesh, StatefulSets, CRDs, Network Policies, Pod Disruption Budgets, HPA, Persistent Volumes, and Ingress Controllers—explaining their core concepts, key capabilities, and how they improve application reliability, scalability, and security.

DevOpsHelmKubernetes
0 likes · 8 min read
Top 10 Must‑Know Kubernetes Features to Boost Your Cloud‑Native Apps
DataFunTalk
DataFunTalk
Jul 30, 2024 · Cloud Native

Baidu Jarvis2.0: Building One of the Industry’s Most Complex Microservice Systems with Cloud‑Native Multi‑Runtime Architecture

The article details how Baidu’s Jarvis2.0 platform evolved from a few modules to over a thousand microservices, introducing a cloud‑native multi‑runtime architecture, automated deployment pipelines, and an xDS‑based control plane that dramatically improve deployment speed, governance efficiency, and system stability across dozens of product lines.

Deployment AutomationKubernetescloud-native
0 likes · 14 min read
Baidu Jarvis2.0: Building One of the Industry’s Most Complex Microservice Systems with Cloud‑Native Multi‑Runtime Architecture
Baidu Geek Talk
Baidu Geek Talk
Jul 29, 2024 · Cloud Native

How Baidu’s Jarvis2.0 Redefined Cloud‑Native Microservice Governance

This article examines Baidu's Jarvis2.0 platform, detailing how its multi‑runtime architecture, unified control plane, and automated deployment pipelines transformed a sprawling microservice ecosystem of over 1,000 services into a highly efficient, cloud‑native system that dramatically reduced release times, improved stability, and enabled seamless multi‑language support.

BaiduJarvis2.0Kubernetes
0 likes · 15 min read
How Baidu’s Jarvis2.0 Redefined Cloud‑Native Microservice Governance
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jul 19, 2024 · Cloud Native

Integrating Dubbo Applications with Alibaba Cloud Service Mesh (ASM): Best Practices and Transition Scenarios

This guide explains how to connect Dubbo microservices to Alibaba Cloud Service Mesh (ASM) to obtain mTLS, observability, and traffic management, covering prerequisites, step‑by‑step deployment, code examples, a registry‑based transition approach, and recommended best‑practice configurations.

ASMDubboKubernetes
0 likes · 29 min read
Integrating Dubbo Applications with Alibaba Cloud Service Mesh (ASM): Best Practices and Transition Scenarios
Tencent Cloud Middleware
Tencent Cloud Middleware
Jul 17, 2024 · Cloud Native

How Polaris‑Mesh Server Handles Service Instance Heartbeats and Health Checks

This article explores Polaris‑Mesh’s server‑side health‑check mechanism, detailing how client heartbeat requests are received via gRPC, processed through Apiserver, Resource Auth Filter, Service, Healthcheck, and Checker Plugin, and how the system’s configuration, plugins, and time‑wheel ensure reliable instance health monitoring.

GoPolarisMeshhealth-check
0 likes · 11 min read
How Polaris‑Mesh Server Handles Service Instance Heartbeats and Health Checks
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Jul 11, 2024 · Backend Development

Mastering Distributed Architecture: From Microservices to Service Mesh

This article explains the fundamentals of distributed architecture, covering its key characteristics, microservice principles, Spring Cloud implementations, Service Mesh concepts, and essential components like distributed storage, caching, and transaction management for building scalable, resilient backend systems.

backend architecturemicroservicesservice mesh
0 likes · 13 min read
Mastering Distributed Architecture: From Microservices to Service Mesh
Sanyou's Java Diary
Sanyou's Java Diary
Jul 8, 2024 · Backend Development

Unveiling Dubbo RPC: Step‑by‑Step Core Process Explained

This article walks through the complete lifecycle of a single RPC call in Dubbo 3.x, covering demo setup, provider exposure, consumer referencing, parameter packaging, filter chains, cluster decision, routing, load balancing, communication and serialization protocols, and finally how the provider processes the request.

DubboRPCbackend development
0 likes · 17 min read
Unveiling Dubbo RPC: Step‑by‑Step Core Process Explained