BestHub
Sign in
Tagged articles
438 articles
Page 1 of 5
Ops Community
Ops Community
May 17, 2026 · Cloud Native

Istio Service Mesh Basics: What Is the Sidecar Pattern and Why Microservices Need It?

The article explains how traditional microservice architectures embed network concerns such as time‑outs, retries, circuit breaking, traffic monitoring and mTLS in application code, why this leads to code coupling, upgrade difficulty and duplicated effort, and how Istio’s sidecar‑based service mesh cleanly separates those concerns while providing traffic management, observability and security features.

EnvoyIstioKubernetes
0 likes · 30 min read
Istio Service Mesh Basics: What Is the Sidecar Pattern and Why Microservices Need It?
Coder Trainee
Coder Trainee
May 2, 2026 · Cloud Native

Spring Cloud Microservices Series #10: Key Takeaways and Best Practices

This article reviews the entire Spring Cloud microservices series, presents a full technology stack diagram, outlines production‑grade best practices for service decomposition, configuration, remote calls, rate limiting, databases, logging and monitoring, lists common pitfalls, offers performance‑tuning tips, discusses the pros and cons of microservices, and points to future directions such as service mesh, serverless and cloud‑native adoption.

Configuration ManagementKubernetesMicroservices
0 likes · 14 min read
Spring Cloud Microservices Series #10: Key Takeaways and Best Practices
Ops Community
Ops Community
Apr 5, 2026 · Operations

Choosing the Right Ingress Controller: Nginx, Traefik, or Envoy?

This guide provides a deep technical comparison of Nginx Ingress Controller, Traefik, and Envoy Proxy, covering architecture, configuration, performance, feature sets, deployment patterns, security hardening, monitoring, and troubleshooting to help operators select the best solution for their Kubernetes clusters.

EnvoyIngressKubernetes
0 likes · 28 min read
Choosing the Right Ingress Controller: Nginx, Traefik, or Envoy?
Linux Ops Smart Journey
Linux Ops Smart Journey
Mar 3, 2026 · Cloud Native

Prevent Service Avalanches: Configuring Circuit Breaker & Connection Limits in Envoy Gateway

This tutorial explains how to use Envoy Gateway on Kubernetes to implement circuit breaker and connection‑limit policies, walks through the necessary YAML configurations, demonstrates verification with the hey load‑testing tool, and shows how these mechanisms improve system resilience in microservice architectures.

Cloud NativeConnection LimitEnvoy
0 likes · 12 min read
Prevent Service Avalanches: Configuring Circuit Breaker & Connection Limits in Envoy Gateway
DevOps Operations Practice
DevOps Operations Practice
Feb 4, 2026 · Cloud Native

How to Implement Canary Deployments with Istio on Kubernetes

This guide explains why gray (canary) releases are essential for production stability in internet companies, and provides step‑by‑step configurations using Istio’s VirtualService, Gateway, and DestinationRule resources to route traffic by percentage or request headers in a Kubernetes cluster.

IstioKubernetesService Mesh
0 likes · 6 min read
How to Implement Canary Deployments with Istio on Kubernetes
Java Tech Enthusiast
Java Tech Enthusiast
Feb 2, 2026 · Backend Development

Mastering High‑Concurrency Spring Boot: 7 Essential Load‑Balancing Strategies

To keep Spring Boot applications stable under tens of thousands to millions of requests per second, this guide explains why load balancing evolves from a simple traffic splitter to a multi‑layer system and details seven critical strategies—from edge CDN to service mesh—required for resilient, cost‑effective high‑concurrency deployments.

KubernetesService MeshSpring Boot
0 likes · 11 min read
Mastering High‑Concurrency Spring Boot: 7 Essential Load‑Balancing Strategies
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 15, 2026 · Cloud Native

Deploy Alibaba Cloud Service Mesh (ASM): Gateways, Traffic Management & Zero‑Trust

This guide explains how to set up Alibaba Cloud Service Mesh (ASM) on an ACK Kubernetes cluster, covering prerequisites, two methods of cluster registration, creation of north‑south and east‑west gateways, traffic routing with HTTPRoute, security policies using PeerAuthentication and AuthorizationPolicy, and observability configuration via Telemetry.

ASMAlibaba CloudGateway API
0 likes · 9 min read
Deploy Alibaba Cloud Service Mesh (ASM): Gateways, Traffic Management & Zero‑Trust
MaGe Linux Operations
MaGe Linux Operations
Jan 5, 2026 · Cloud Native

What Really Happens When You Deploy Istio? 6 Hard‑Learned Lessons from a Year‑Long Production Run

After a year of running Istio in production on a 80‑service, 200‑node Kubernetes fleet, we share six painful pitfalls—including unexpected latency, debugging complexity, upgrade nightmares, configuration explosion, compatibility issues, and mTLS challenges—plus practical mitigation steps and guidance on when Istio truly adds value.

ConfigurationDebuggingIstio
0 likes · 22 min read
What Really Happens When You Deploy Istio? 6 Hard‑Learned Lessons from a Year‑Long Production Run
Ray's Galactic Tech
Ray's Galactic Tech
Dec 19, 2025 · Cloud Native

Mastering Kubernetes Networking: From Core Model to Production‑Ready Practices

This comprehensive guide explains Kubernetes' core networking model, CNI plugins, service networking, ingress, network policies, DNS, service mesh, advanced CNI features, kube‑proxyless alternatives, multi‑cluster setups, security, observability, and troubleshooting techniques for building high‑performance, secure, and observable clusters.

CNICloud NativeNetworkPolicy
0 likes · 10 min read
Mastering Kubernetes Networking: From Core Model to Production‑Ready Practices
Architect's Journey
Architect's Journey
Dec 3, 2025 · Cloud Native

Microservice Governance Guide: From Stable Operations to Maximum Efficiency

This comprehensive guide breaks down microservice governance into four pillars—node management, load balancing, routing, and fault tolerance—providing concrete configurations, algorithm choices, and service‑mesh recommendations to achieve 99.99% availability, cut wasted resources by over 30%, and halve iteration cycles.

MicroservicesService Meshfault tolerance
0 likes · 16 min read
Microservice Governance Guide: From Stable Operations to Maximum Efficiency
Linux Ops Smart Journey
Linux Ops Smart Journey
Nov 20, 2025 · Cloud Native

Mastering Envoy Request Mirroring: Safe Shadow Testing for Production Traffic

This article explains Envoy's request mirroring feature, shows how it copies live HTTP requests to a test backend without affecting the original response, and provides step‑by‑step configuration examples for mirroring all traffic, selective paths, percentage‑based sampling, and header‑driven routing, plus practical tips and typical use cases.

Cloud NativeEnvoyRequest Mirroring
0 likes · 11 min read
Mastering Envoy Request Mirroring: Safe Shadow Testing for Production Traffic
Instant Consumer Technology Team
Instant Consumer Technology Team
Nov 17, 2025 · Cloud Native

How We Built a Scalable Traffic Governance System for Thousands of Microservices

This article details a company’s step‑by‑step evolution from basic observability to a full‑stack traffic governance framework—including automated tracing, adaptive rate‑limiting, circuit‑breaking, and intelligent gray‑release—enabling stable operation of a microservice ecosystem with tens of thousands of instances while cutting MTTR to minutes and resource waste by over 20%.

Cloud NativeMicroservicesObservability
0 likes · 24 min read
How We Built a Scalable Traffic Governance System for Thousands of Microservices
IT Architects Alliance
IT Architects Alliance
Oct 21, 2025 · Backend Development

How to Crush Microservice Communication Bottlenecks: Protocols, Meshes, and Code

Microservice architectures face severe communication bottlenecks due to network overhead, serialization costs, and connection management, but by adopting high‑performance protocols like gRPC, leveraging service meshes, optimizing load balancing, caching, connection pools, and robust monitoring, teams can dramatically improve latency and throughput.

MicroservicesService MeshgRPC
0 likes · 12 min read
How to Crush Microservice Communication Bottlenecks: Protocols, Meshes, and Code
IT Architects Alliance
IT Architects Alliance
Oct 19, 2025 · Cloud Native

Mastering Cloud‑Native Autoscaling: HPA, VPA, CA, and Cost‑Aware Strategies

This article explores the challenges and best practices of cloud‑native scaling, covering Horizontal and Vertical Pod Autoscalers, Cluster Autoscaler cost optimization, event‑driven scaling with KEDA, traffic‑aware scaling in service meshes, and intelligent cost‑aware strategies backed by monitoring and future AI‑driven trends.

Cost OptimizationKubernetesService Mesh
0 likes · 11 min read
Mastering Cloud‑Native Autoscaling: HPA, VPA, CA, and Cost‑Aware Strategies
Alibaba Cloud Native
Alibaba Cloud Native
Oct 15, 2025 · Cloud Native

What’s New in Higress 2.0? 30 Updates Including RAG MCP Server and Performance Fixes

The Higress 2.0 release introduces 30 changes—13 new features such as a RAG MCP server and ECDS‑based configuration refactor, 7 bug fixes, 5 refactorings, documentation updates and a test improvement—providing developers with enhanced knowledge‑management capabilities, more stable routing, and clearer documentation for cloud‑native service‑mesh environments.

MCPRAGRelease Notes
0 likes · 20 min read
What’s New in Higress 2.0? 30 Updates Including RAG MCP Server and Performance Fixes
Architect's Guide
Architect's Guide
Oct 7, 2025 · Backend Development

Mastering Backend Architecture: From Microservices to Service Mesh and Message Queues

This article presents a comprehensive roadmap for backend architects, covering microservice fundamentals, design principles, gateway patterns, communication protocols, service registration, configuration management, observability pillars, service mesh options, and a detailed comparison of modern message‑queue technologies.

BackendCloud NativeMessage Queue
0 likes · 29 min read
Mastering Backend Architecture: From Microservices to Service Mesh and Message Queues
IT Architects Alliance
IT Architects Alliance
Oct 4, 2025 · Information Security

How Zero Trust and Service Mesh Secure Modern Microservices

This article examines the rising security risks in microservice architectures, explains why traditional perimeter defenses fall short, and presents a comprehensive zero‑trust strategy that combines service‑mesh mTLS, API‑gateway hardening, token‑exchange authentication, OPA policies, data‑level encryption, observability, and container‑level safeguards.

AuthenticationMicroservicesSecurity
0 likes · 11 min read
How Zero Trust and Service Mesh Secure Modern Microservices
IT Architects Alliance
IT Architects Alliance
Oct 2, 2025 · Cloud Native

Mastering Cloud‑Native Architecture: 6 Core Principles Every Engineer Should Know

This article outlines six fundamental cloud‑native architecture principles—immutable infrastructure, service mesh, observability, declarative APIs, resilient design, and shift‑left security—explaining their purpose, key practices, code examples, and how they interrelate to build scalable, reliable, and secure distributed systems.

Cloud NativeDeclarative APIObservability
0 likes · 11 min read
Mastering Cloud‑Native Architecture: 6 Core Principles Every Engineer Should Know
IT Architects Alliance
IT Architects Alliance
Sep 18, 2025 · Cloud Native

Why Containers, Kubernetes, and Service Mesh Are the Modern Cloud‑Native Trinity

An in‑depth look at how containers, Kubernetes, and Service Mesh together form the core of modern cloud‑native architectures, covering their evolution, practical adoption stages, trade‑offs in complexity, decision‑making matrices, best‑practice implementation tips, and emerging trends such as edge computing and WebAssembly.

Cloud NativeContainersKubernetes
0 likes · 10 min read
Why Containers, Kubernetes, and Service Mesh Are the Modern Cloud‑Native Trinity
Cloud Native Technology Community
Cloud Native Technology Community
Sep 18, 2025 · Cloud Native

Why Kubernetes Gateway API Is the Next‑Gen Solution Over Ingress

Gateway API replaces the traditional Ingress API with a more powerful, standardized, role‑oriented model that supports advanced L4/L7 routing, multi‑protocol traffic, and seamless service‑mesh integration, addressing Ingress’s limitations in scalability, portability, and complex configuration for both platform and application teams.

Gateway APIIngressKubernetes
0 likes · 11 min read
Why Kubernetes Gateway API Is the Next‑Gen Solution Over Ingress
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 12, 2025 · Cloud Native

Unlock Real Client IPs in Envoy: Step‑by‑Step Configuration Guide

This article explains why backend services often see proxy IPs instead of the true client address in modern cloud‑native architectures, and provides a detailed walkthrough of configuring Envoy—including X‑Forwarded‑For handling, code snippets, testing, and security recommendations—to ensure the original client IP is correctly propagated.

EnvoyIP addressService Mesh
0 likes · 6 min read
Unlock Real Client IPs in Envoy: Step‑by‑Step Configuration Guide
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 8, 2025 · Cloud Native

How Envoy’s Circuit Breakers and Outlier Detection Stop Service Avalanches

This article explains how Envoy’s circuit‑breaker and outlier‑detection features protect micro‑service architectures from avalanche failures by limiting concurrent connections, ejecting unhealthy instances, and provides configuration examples, testing methods, and best‑practice tips for building resilient cloud‑native systems.

Circuit BreakingCloud NativeEnvoy
0 likes · 11 min read
How Envoy’s Circuit Breakers and Outlier Detection Stop Service Avalanches
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 3, 2025 · Cloud Native

Mastering Envoy: Service Discovery, Load Balancing, and Health Checks Explained

Envoy, the high‑performance edge and service‑mesh proxy, offers three core mechanisms—service discovery, load balancing, and health checking—each with multiple configurable options and code examples, enabling operators and developers to optimize distributed systems for scalability, reliability, and performance in cloud‑native environments.

EnvoyService Meshhealth checks
0 likes · 9 min read
Mastering Envoy: Service Discovery, Load Balancing, and Health Checks Explained
Linux Ops Smart Journey
Linux Ops Smart Journey
Sep 1, 2025 · Cloud Native

Master Envoy Proxy in 5 Minutes: Build, Configure, and Test a Service Mesh

This tutorial introduces Envoy Proxy, explains its core building blocks—listeners, routes, clusters, and filters—demonstrates a quick Docker-based setup, and walks through a complete configuration that routes traffic based on URI paths, providing a practical five‑minute overview of service‑mesh fundamentals.

Cloud NativeDockerEnvoy
0 likes · 8 min read
Master Envoy Proxy in 5 Minutes: Build, Configure, and Test a Service Mesh
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Aug 28, 2025 · Cloud Native

How to Upgrade Ztunnel in ASM Ambient Mode Without Traffic Disruption

This article explains the Ztunnel upgrade process in Alibaba Service Mesh Ambient mode, details the rolling and graceful‑shutdown mechanisms, presents performance test results with and without graceful shutdown, and offers best‑practice recommendations to minimize traffic interruption during upgrades.

Cloud NativeGraceful ShutdownPerformance Testing
0 likes · 10 min read
How to Upgrade Ztunnel in ASM Ambient Mode Without Traffic Disruption
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Aug 11, 2025 · Cloud Native

Simplify Kubernetes Egress with ASM Ambient Mode and Waypoint

Learn how ASM's Ambient mode and the Waypoint component streamline L7 egress traffic management in Kubernetes by replacing complex Sidecar configurations with simple ServiceEntry and Waypoint labels, reducing configuration overhead while preserving powerful security and observability features.

Cloud NativeEgress TrafficKubernetes
0 likes · 7 min read
Simplify Kubernetes Egress with ASM Ambient Mode and Waypoint
Linux Ops Smart Journey
Linux Ops Smart Journey
Jun 27, 2025 · Cloud Native

Deploy a Production-Ready Consul Service Mesh on Kubernetes with Helm

Learn how to set up a production-grade HashiCorp Consul service mesh on Kubernetes using Helm, covering prerequisites, chart handling, configuration files, deployment commands, and verification steps to ensure reliable service discovery, health checks, and secure communication in a cloud-native environment.

Cloud NativeConsulKubernetes
0 likes · 6 min read
Deploy a Production-Ready Consul Service Mesh on Kubernetes with Helm
Architecture & Thinking
Architecture & Thinking
Jun 18, 2025 · Cloud Native

How Outlier Detection in Service Mesh Boosts Service Reliability

This article explains the concept, implementation principles, configuration details, and common use cases of Outlier Detection in Service Meshes, showing how it isolates faulty instances to improve stability, performance, and automated operations in cloud‑native environments.

Cloud NativeMicroservicesReliability
0 likes · 6 min read
How Outlier Detection in Service Mesh Boosts Service Reliability
Architect's Guide
Architect's Guide
Jun 10, 2025 · Cloud Native

How Microservices Evolve: From Monoliths to Cloud‑Native Service Governance

This article traces the evolution of internet architecture from monolithic and MVC designs through multi‑application and distributed systems, explains service‑oriented architecture and its benefits, introduces Dubbo‑based service governance, and outlines the core concepts, features, and implementation approaches of microservices.

Cloud NativeDubboService Mesh
0 likes · 12 min read
How Microservices Evolve: From Monoliths to Cloud‑Native Service Governance
Raymond Ops
Raymond Ops
Apr 24, 2025 · Cloud Native

Mastering Istio Security: Complete Guide to Mutual TLS, Authentication, and Authorization

This article explains how Istio secures micro‑service architectures by providing strong identity, fine‑grained access policies, transparent TLS encryption, and comprehensive AAA (authentication, authorization, audit) mechanisms, covering high‑level architecture, certificate management, peer and request authentication, and authorization policy design.

AuthenticationAuthorizationIstio
0 likes · 23 min read
Mastering Istio Security: Complete Guide to Mutual TLS, Authentication, and Authorization
IT Architects Alliance
IT Architects Alliance
Jan 22, 2025 · Cloud Native

Understanding Service Mesh: Concepts, Capabilities, Tools, and Challenges in the Cloud‑Native Era

The article explains what a service mesh is, its core components, key capabilities such as traffic management, security, observability, and resilience, reviews major tools like Istio, Linkerd and Consul Connect, and discusses the operational challenges and future directions within cloud‑native environments.

ObservabilityService Meshperformance
0 likes · 17 min read
Understanding Service Mesh: Concepts, Capabilities, Tools, and Challenges in the Cloud‑Native Era
Raymond Ops
Raymond Ops
Jan 21, 2025 · Cloud Native

How Istio Sidecar Hijacks Traffic: Deep Dive into iptables and xDS

This article explains how Istio's sidecar proxy uses Envoy, iptables rules, and the xDS API to intercept and redirect traffic between Kubernetes pods, detailing the startup injection, traffic hijacking process, and how configuration is dynamically generated by istiod.

EnvoyIstioService Mesh
0 likes · 19 min read
How Istio Sidecar Hijacks Traffic: Deep Dive into iptables and xDS
IT Architects Alliance
IT Architects Alliance
Jan 13, 2025 · Information Security

Microservice Security: Challenges and Key Strategies

The article examines how microservice architecture, as a subset of distributed systems, expands the attack surface and introduces data fragmentation and communication complexities, and outlines comprehensive security strategies—including API protection, service‑to‑service encryption, infrastructure hardening, authentication, vulnerability management, and emerging technologies like service mesh and serverless computing—to safeguard modern applications.

APIServerlessService Mesh
0 likes · 18 min read
Microservice Security: Challenges and Key Strategies
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 13, 2025 · Cloud Native

Extending Alibaba Cloud Service Mesh (ASM): EnvoyFilter, Lua, Wasm, External Processing, and Custom Authorization Services

This article explains how Alibaba Cloud Service Mesh (ASM) can be extended using EnvoyFilter, Lua scripts, WebAssembly plugins, External Processing filters, and custom authorization services, detailing their capabilities, limitations, and recommended use cases for cloud‑native microservice environments.

ASMCloud NativeEnvoy
0 likes · 11 min read
Extending Alibaba Cloud Service Mesh (ASM): EnvoyFilter, Lua, Wasm, External Processing, and Custom Authorization Services
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 8, 2025 · Cloud Native

Designing AZ‑Level Disaster Recovery with Alibaba Cloud ACK and Service Mesh ASM

This guide explains how to achieve zone‑level disaster recovery on Alibaba Cloud by deploying multi‑AZ ACK clusters, configuring Service Mesh ASM for observability and traffic shifting, and using Prometheus‑based metrics and alerts to detect and isolate failures, including step‑by‑step instructions and sample YAML manifests.

KubernetesMulti‑AZPrometheus
0 likes · 24 min read
Designing AZ‑Level Disaster Recovery with Alibaba Cloud ACK and Service Mesh ASM
Alibaba Cloud Native
Alibaba Cloud Native
Jan 3, 2025 · Cloud Native

How We Unified a Complex Multi‑Gateway Architecture with Higress and Istio CRD

Facing thousands of heterogeneous gateway configurations across multiple tech stacks, a Chinese cloud‑native platform consolidated its gateway layer by adopting Higress, Istio CRD, and APISIX, introducing a two‑tier rule model and automated migration tools that cut maintenance effort by 90% while preserving service continuity.

APISIXCloud NativeConfiguration Management
0 likes · 14 min read
How We Unified a Complex Multi‑Gateway Architecture with Higress and Istio CRD
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jan 3, 2025 · Cloud Native

How to Enable LLM Traffic Observability with Alibaba Cloud Service Mesh (ASM)

This guide explains how to use Alibaba Cloud Service Mesh (ASM) to add infrastructure‑level observability for large language model (LLM) traffic, covering custom access‑log fields, new Prometheus metrics for token usage, and adding model dimensions to native Istio metrics, with step‑by‑step commands and configuration examples.

ASMKubernetesLLM
0 likes · 14 min read
How to Enable LLM Traffic Observability with Alibaba Cloud Service Mesh (ASM)
Raymond Ops
Raymond Ops
Dec 22, 2024 · Cloud Native

Expose Istio Mesh Services with Nginx Ingress: A Step‑by‑Step Guide

This article explains the relationship between API gateways and service meshes, compares exposure methods, and provides a detailed, step‑by‑step guide for exposing services inside an Istio mesh using an Nginx Ingress Controller, including required annotations and configuration details.

IngressIstioKubernetes
0 likes · 8 min read
Expose Istio Mesh Services with Nginx Ingress: A Step‑by‑Step Guide
Programmer DD
Programmer DD
Dec 5, 2024 · Backend Development

Key Microservice Patterns: Service Discovery, API Gateways, Event‑Driven Architecture

This article consolidates a series of ByteMonk videos covering essential microservice architecture patterns—including service registration and discovery with Eureka, API gateway design, event‑driven architecture, service mesh, aggregator pattern, per‑service databases, bulkhead and strangler patterns, and monolith decomposition case studies—providing practical insights for building scalable, resilient systems.

Architecture PatternsEvent-drivenService Mesh
0 likes · 7 min read
Key Microservice Patterns: Service Discovery, API Gateways, Event‑Driven Architecture
Tencent Cloud Developer
Tencent Cloud Developer
Dec 3, 2024 · Cloud Native

Tencent's PolarisMesh: Cloud-Native Microservice Governance Practices and Case Studies

Tencent's PolarisMesh showcases cloud-native microservice governance by detailing the shift from monoliths to containerized services, outlining service splitting principles, Kubernetes deployment, dynamic routing, fault isolation, and real-world case studies that demonstrate cost savings, reliability improvements, and open-source availability.

KubernetesMicroservicesPolarisMesh
0 likes · 31 min read
Tencent's PolarisMesh: Cloud-Native Microservice Governance Practices and Case Studies
Architecture & Thinking
Architecture & Thinking
Nov 28, 2024 · Cloud Native

How to Scale Istio Across Hundreds of Services: Real‑World Strategies & Performance Insights

This article shares practical guidance on rolling out Istio service mesh to over ten business lines, covering selection of pilot projects, benefit analysis using access logs, sidecar injection, performance and resource impact, multi‑region active‑active architecture benefits, and rapid fault‑recovery tactics.

Cloud NativeIstioMicroservices
0 likes · 9 min read
How to Scale Istio Across Hundreds of Services: Real‑World Strategies & Performance Insights
JavaEdge
JavaEdge
Nov 17, 2024 · Backend Development

How Netflix’s Data Gateway Simplifies Distributed Database Access

This article explains how Netflix built the Data Gateway platform to abstract and protect complex distributed databases, detailing its motivation, architecture, component overview, declarative runtime and deployment configurations, and real‑world case studies such as key‑value services, secure RDS, and seamless data migration.

Data GatewayDeclarative DeploymentKey-Value Service
0 likes · 20 min read
How Netflix’s Data Gateway Simplifies Distributed Database Access
Architecture & Thinking
Architecture & Thinking
Oct 12, 2024 · Cloud Native

Step-by-Step Guide to Deploying Istio and Configuring the BookInfo Demo

This tutorial walks you through connecting a test machine, downloading and installing Istio 1.8.6, configuring environment variables, deploying the BookInfo sample application, verifying pods and services, setting up inbound traffic, exposing dashboards, and introduces Istio’s core traffic‑management capabilities.

BookInfoCloud NativeDevOps
0 likes · 17 min read
Step-by-Step Guide to Deploying Istio and Configuring the BookInfo Demo
Soul Technical Team
Soul Technical Team
Sep 30, 2024 · Cloud Native

Practical Experience with Envoy in Soul: Cloud‑Native Traffic Management and Service Mesh

This article shares Soul's two‑year practice of using the cloud‑native Envoy proxy for high‑performance, high‑throughput, and highly available traffic management across north‑south and east‑west flows, covering architecture, dynamic service discovery, load balancing, health checks, WASM extensions, service‑mesh integration, Redis proxying, and future directions.

Cloud NativeEnvoyKubernetes
0 likes · 14 min read
Practical Experience with Envoy in Soul: Cloud‑Native Traffic Management and Service Mesh
JD Tech
JD Tech
Aug 31, 2024 · Cloud Native

Joylive Agent: Java Bytecode‑Based Proxyless Service Mesh for Microservice Governance

The article introduces Joylive Agent, a Java bytecode‑enhancement framework that implements a proxyless service‑mesh architecture for microservice governance, detailing its background, design principles, plugin system, bytecode manipulation techniques, traffic‑control strategies, multi‑active models, and deployment practices on Kubernetes.

Cloud NativeJava AgentService Mesh
0 likes · 37 min read
Joylive Agent: Java Bytecode‑Based Proxyless Service Mesh for Microservice Governance
JD Cloud Developers
JD Cloud Developers
Aug 28, 2024 · Cloud Native

How Java Bytecode Enhancement Powers a Proxyless Service Mesh for Microservice Governance

This article explains the challenges of microservice communication and fault tolerance, introduces service mesh and its drawbacks, and presents a Java bytecode‑enhancement solution that combines SDK performance with sidecar‑less governance, detailing the Joylive Agent architecture, plugin system, request abstraction, governance strategies, and Kubernetes deployment practices.

Java AgentMicroservicesService Mesh
0 likes · 40 min read
How Java Bytecode Enhancement Powers a Proxyless Service Mesh for Microservice Governance
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Aug 13, 2024 · Frontend Development

Traffic Hijacking and Request Interception Techniques for Unified Authentication Platforms

This article explores the concept of traffic hijacking, compares front‑end and back‑end interception methods, and provides practical proxy‑based implementations for fetch, XMLHttpRequest, and ReadableStream to achieve seamless request and response manipulation in a unified authentication system.

BackendProxyService Mesh
0 likes · 16 min read
Traffic Hijacking and Request Interception Techniques for Unified Authentication Platforms
Full-Stack DevOps & Kubernetes
Full-Stack DevOps & Kubernetes
Aug 7, 2024 · Cloud Native

Top 10 Must‑Know Kubernetes Features to Boost Your Cloud‑Native Apps

This article introduces ten essential Kubernetes technologies—including Helm Charts, Operators, Service Mesh, StatefulSets, CRDs, Network Policies, Pod Disruption Budgets, HPA, Persistent Volumes, and Ingress Controllers—explaining their core concepts, key capabilities, and how they improve application reliability, scalability, and security.

Cloud NativeDevOpsKubernetes
0 likes · 8 min read
Top 10 Must‑Know Kubernetes Features to Boost Your Cloud‑Native Apps
DataFunTalk
DataFunTalk
Jul 30, 2024 · Cloud Native

Baidu Jarvis2.0: Building One of the Industry’s Most Complex Microservice Systems with Cloud‑Native Multi‑Runtime Architecture

The article details how Baidu’s Jarvis2.0 platform evolved from a few modules to over a thousand microservices, introducing a cloud‑native multi‑runtime architecture, automated deployment pipelines, and an xDS‑based control plane that dramatically improve deployment speed, governance efficiency, and system stability across dozens of product lines.

Deployment AutomationKubernetesMicroservices
0 likes · 14 min read
Baidu Jarvis2.0: Building One of the Industry’s Most Complex Microservice Systems with Cloud‑Native Multi‑Runtime Architecture
Baidu Geek Talk
Baidu Geek Talk
Jul 29, 2024 · Cloud Native

How Baidu’s Jarvis2.0 Redefined Cloud‑Native Microservice Governance

This article examines Baidu's Jarvis2.0 platform, detailing how its multi‑runtime architecture, unified control plane, and automated deployment pipelines transformed a sprawling microservice ecosystem of over 1,000 services into a highly efficient, cloud‑native system that dramatically reduced release times, improved stability, and enabled seamless multi‑language support.

BaiduCloud NativeJarvis2.0
0 likes · 15 min read
How Baidu’s Jarvis2.0 Redefined Cloud‑Native Microservice Governance
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jul 19, 2024 · Cloud Native

Integrating Dubbo Applications with Alibaba Cloud Service Mesh (ASM): Best Practices and Transition Scenarios

This guide explains how to connect Dubbo microservices to Alibaba Cloud Service Mesh (ASM) to obtain mTLS, observability, and traffic management, covering prerequisites, step‑by‑step deployment, code examples, a registry‑based transition approach, and recommended best‑practice configurations.

ASMCloud NativeDubbo
0 likes · 29 min read
Integrating Dubbo Applications with Alibaba Cloud Service Mesh (ASM): Best Practices and Transition Scenarios
Tencent Cloud Middleware
Tencent Cloud Middleware
Jul 17, 2024 · Cloud Native

How Polaris‑Mesh Server Handles Service Instance Heartbeats and Health Checks

This article explores Polaris‑Mesh’s server‑side health‑check mechanism, detailing how client heartbeat requests are received via gRPC, processed through Apiserver, Resource Auth Filter, Service, Healthcheck, and Checker Plugin, and how the system’s configuration, plugins, and time‑wheel ensure reliable instance health monitoring.

GoHeartbeatPolarisMesh
0 likes · 11 min read
How Polaris‑Mesh Server Handles Service Instance Heartbeats and Health Checks
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Jul 11, 2024 · Backend Development

Mastering Distributed Architecture: From Microservices to Service Mesh

This article explains the fundamentals of distributed architecture, covering its key characteristics, microservice principles, Spring Cloud implementations, Service Mesh concepts, and essential components like distributed storage, caching, and transaction management for building scalable, resilient backend systems.

Backend ArchitectureMicroservicesService Mesh
0 likes · 13 min read
Mastering Distributed Architecture: From Microservices to Service Mesh
Sanyou's Java Diary
Sanyou's Java Diary
Jul 8, 2024 · Backend Development

Unveiling Dubbo RPC: Step‑by‑Step Core Process Explained

This article walks through the complete lifecycle of a single RPC call in Dubbo 3.x, covering demo setup, provider exposure, consumer referencing, parameter packaging, filter chains, cluster decision, routing, load balancing, communication and serialization protocols, and finally how the provider processes the request.

Backend DevelopmentDubboRPC
0 likes · 17 min read
Unveiling Dubbo RPC: Step‑by‑Step Core Process Explained
Alibaba Cloud Infrastructure
Alibaba Cloud Infrastructure
Jun 26, 2024 · Cloud Native

Securing LLM Calls with Alibaba Cloud ASM Service Mesh Using a Wasm Plugin

This article demonstrates how to protect large language model (LLM) requests in a cloud‑native environment by using Alibaba Cloud ASM service mesh and a custom Wasm plugin to dynamically inject API keys, enforce custom denial patterns, and optionally route requests through a private LLM for intelligent data‑leak detection.

Cloud NativeKubernetesLLM
0 likes · 13 min read
Securing LLM Calls with Alibaba Cloud ASM Service Mesh Using a Wasm Plugin
Efficient Ops
Efficient Ops
May 19, 2024 · Operations

Why Observability Is the Key to Simplifying Modern Microservices

This article explains how containerization and Kubernetes gave rise to micro‑services, why observability (metrics, logging, tracing, profiling) became essential for managing their complexity, and how OpenTelemetry’s unified data model enables seamless integration of these signals across modern cloud‑native stacks.

ProfilingService Mesh
0 likes · 9 min read
Why Observability Is the Key to Simplifying Modern Microservices
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
May 2, 2024 · Cloud Native

Understanding Istio Architecture and Core Principles

This article provides a comprehensive overview of Istio, explaining its role as an open‑source service mesh for cloud‑native microservices, detailing the data plane and control plane components, sidecar proxy functions, traffic management, security, and monitoring while also promoting related learning resources.

Cloud NativeIstioKubernetes
0 likes · 4 min read
Understanding Istio Architecture and Core Principles
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
May 1, 2024 · Cloud Native

Comprehensive Introduction to Service Mesh

This article provides a detailed, English-language overview of Service Mesh, explaining its role in cloud‑native microservice architectures, the need for it, its core principles—including data and control planes—and key Istio components, while also offering promotional links to related resources.

Cloud NativeControl PlaneData Plane
0 likes · 5 min read
Comprehensive Introduction to Service Mesh
dbaplus Community
dbaplus Community
Apr 21, 2024 · Cloud Native

What Cloud‑Native Tech Stack Should You Use in 2024? A Real‑World Guide

In 2024 the author reflects on a decade of backend evolution and shares a practical, experience‑driven guide to the cloud‑native stack—including Kubernetes, multi‑cloud strategies, DevOps tooling, service mesh, observability, and message‑queue choices—tailored to teams of different sizes.

DevOpsObservabilityService Mesh
0 likes · 12 min read
What Cloud‑Native Tech Stack Should You Use in 2024? A Real‑World Guide
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Apr 10, 2024 · Cloud Native

What Is Cloud Native? Key Features, Technologies, and Real‑World Uses

This article explains cloud native fundamentals, covering its definition, core characteristics such as microservices, containerization, automation, storage, and networking, and introduces key technologies like Docker, Kubernetes, service mesh, CI/CD, and monitoring, while showing how they enable modern applications in AI, IoT, and big data.

MicroservicesService Mesh
0 likes · 7 min read
What Is Cloud Native? Key Features, Technologies, and Real‑World Uses
58 Tech
58 Tech
Mar 15, 2024 · Cloud Native

Design and Implementation of a Service Mesh Architecture for HTTP Traffic Governance

This document details the motivation, technology selection, overall architecture, data‑plane and control‑plane design, key implementation challenges such as HTTPS interception, precise URL monitoring, and plugin extensibility, and outlines future directions for scaling service mesh within the organization.

Control PlaneData PlaneHTTP traffic
0 likes · 17 min read
Design and Implementation of a Service Mesh Architecture for HTTP Traffic Governance
Ops Development Stories
Ops Development Stories
Mar 8, 2024 · Cloud Native

How to Deploy and Test a Multi‑Cluster Istio Service Mesh with Kind and MetalLB

This guide explains why multi‑cluster deployments are needed for high‑availability, describes Istio's flat and non‑flat network models with single or multiple control planes, and provides step‑by‑step scripts to create Kind clusters, install MetalLB, configure root CAs, deploy Istio, set up gateways, and verify regional load balancing and failover.

IstioKubernetesMetalLB
0 likes · 29 min read
How to Deploy and Test a Multi‑Cluster Istio Service Mesh with Kind and MetalLB
Yang Money Pot Technology Team
Yang Money Pot Technology Team
Feb 27, 2024 · Cloud Native

Implementing SwimLane Isolation with Service Mesh and Kubernetes: Architecture, WASM Filters, and CRD Controllers

This article describes how to use Istio Service Mesh, Kubernetes CRDs, and custom WASM Envoy filters to create isolated swim‑lane call chains that prevent branch conflicts, enable full‑link header propagation, and support features such as Java remote debugging, middleware deployment, and hot code reload.

CRDIstioService Mesh
0 likes · 26 min read
Implementing SwimLane Isolation with Service Mesh and Kubernetes: Architecture, WASM Filters, and CRD Controllers
MaGe Linux Operations
MaGe Linux Operations
Jan 30, 2024 · Backend Development

How Does Envoy Proxy Process a Request? A Deep Dive into Its Lifecycle

This article walks through the complete lifecycle of a request handled by Envoy, covering terminology, network topology, configuration details, listener and filter chain processing, TLS transport sockets, HTTP/2 encoding/decoding, routing, load balancing, and post‑request cleanup, illustrated with diagrams and sample YAML configuration.

EnvoyProxyRequest Lifecycle
0 likes · 24 min read
How Does Envoy Proxy Process a Request? A Deep Dive into Its Lifecycle
MaGe Linux Operations
MaGe Linux Operations
Jan 27, 2024 · Cloud Native

Istio Observability Made Easy: Prometheus, Jaeger & Kiali Guide

This guide walks through Istio's observability stack, showing how to configure Prometheus for metrics collection, deploy Jaeger for distributed tracing, and set up Kiali for visualizing the service mesh, while covering annotations, TLS settings, weighted routing, and configuration validation.

IstioKialiPrometheus
0 likes · 18 min read
Istio Observability Made Easy: Prometheus, Jaeger & Kiali Guide
iQIYI Technical Product Team
iQIYI Technical Product Team
Jan 19, 2024 · Backend Development

Design and Optimization of Distributed and Local Shared Variables for Strategy Engine Services

By introducing distributed and local shared variables that propagate user profiles via trace context and cache parallel requests, the iQIYI strategy engine cuts redundant DMP calls, reduces traffic up to 25%, lowers P99 latency by nearly 50%, and achieves a 90% cost saving compared to step‑function micro‑services.

Service Meshcachingshared variables
0 likes · 19 min read
Design and Optimization of Distributed and Local Shared Variables for Strategy Engine Services
Architect
Architect
Nov 30, 2023 · Cloud Native

From Monolith to Resilient Microservices: A Step‑by‑Step Architecture Evolution

The article walks through a real‑world online supermarket project, showing how a simple monolithic system evolves into a fully‑featured microservice architecture, detailing each refactoring stage, the problems encountered, and the concrete solutions such as service extraction, database sharding, monitoring, tracing, gateways, service discovery, reliability patterns, testing, and service‑mesh adoption.

Cloud NativeService Mesharchitecture
0 likes · 25 min read
From Monolith to Resilient Microservices: A Step‑by‑Step Architecture Evolution
DevOps
DevOps
Nov 29, 2023 · Backend Development

Microservice Architecture Evolution: From Monolith to Service Mesh

This article walks through the journey of transforming a simple online supermarket from a monolithic application to a fully fledged microservice architecture, highlighting the motivations, design decisions, component breakdown, operational challenges, monitoring, tracing, resilience patterns, testing strategies, and the role of service meshes.

DevOpsMicroservicesService Mesh
0 likes · 21 min read
Microservice Architecture Evolution: From Monolith to Service Mesh