This article introduces Aeraki Mesh, a CNCF sandbox project that extends Istio by providing a non‑intrusive, scalable framework to manage traffic for any layer‑7 protocol—including Dubbo, Thrift, Redis, and Kafka—through its MetaProtocol architecture and dynamic routing capabilities.
This article explores Tencent’s evolution from monolithic LAMP/MVC stacks to a container‑based microservice architecture, detailing the open‑source Polaris Mesh service mesh, Spring Cloud Tencent framework, and their gateway, naming, and configuration components, while highlighting deployment benefits and practical usage examples.
This article walks through creating a simple Spring Boot microservice using gRPC, packaging it with Maven, containerizing it with Docker, and deploying both the server and client to a Kubernetes cluster with Istio sidecar injection, demonstrating how Istio removes service‑mesh logic from business code and enables seamless multi‑language microservice communication.
The article examines the evolution from monolithic to distributed architectures, contrasts Spring Cloud with Kubernetes and Istio, and explains how service mesh and sidecar proxies enable language‑agnostic, non‑intrusive microservice deployments in modern cloud‑native environments.
This comprehensive guide explains Kubernetes' networking model, covering core concepts such as network namespaces, virtual Ethernet pairs, pod-to-pod and pod-to-service communication, CIDR routing, NAT, iptables, IPVS, DNS, and how traffic flows between pods, services, and the external Internet.
This article explores the evolution of cloud computing into its second half, defining cloud native through CNCF's perspective, tracing its history from early Linux containers and Cgroups to Docker and Kubernetes, and detailing the core technologies—containers, service mesh, microservices, immutable infrastructure, and declarative APIs—while highlighting their practical benefits for rapid iteration, automated deployment, and efficient, scalable applications.
This article examines the evolution from large monolithic applications to distributed micro‑service systems, comparing Spring Cloud with Kubernetes and Istio, discussing the role of Service Mesh, and evaluating the benefits and trade‑offs of using Spring Boot on K8s versus a full Service Mesh solution.
This article examines the evolution from monolithic applications to distributed micro‑service architectures, compares Spring Cloud with Kubernetes and Istio, discusses the role of Spring Boot on K8s, and explains the value of Service Mesh and sidecar proxies for decoupling business logic from infrastructure.
This article chronicles Bilibili’s transition from a PHP monolith to a Go‑based bilizone monolith, its subsequent decomposition into microservices, the adoption of Backend‑for‑Frontend (BFF) layers, and the eventual consolidation into a unified API gateway that streamlines routing, security, and traffic management across the platform.
IDC’s recent China Cloud‑Native Market Analysis reports that Ant Group has become one of the most comprehensive domestic cloud‑native technology providers, with widespread enterprise adoption, major investment in cluster scheduling, mixed‑deployment, and Service Mesh, and ongoing open‑source and commercial initiatives driving industry innovation.
This article chronicles Alibaba's three‑stage evolution of Envoy Gateway—from the 1.0 incubation that powered Double‑11 traffic, through the 2.0 growth phase adding north‑south routing and hybrid‑cloud support, to the mature 3.0 release that unifies traffic and micro‑service gateways with high performance and community‑driven extensions.
This guide explains how to leverage Zadig v1.11.0’s environment self‑test mode to create isolated developer sub‑environments for large‑scale microservice projects, using Istio’s traffic routing and SkyWalking tracing, detailing prerequisite components, configuration of a PiggyMetrics Spring Boot example, and step‑by‑step verification via Kubernetes commands and curl requests.
This article explains the concept of cloud native, its definition by the CNCF, the history of containers and Docker, the role of Kubernetes as the orchestration backbone, and related technologies such as micro‑services, service mesh, immutable infrastructure and declarative APIs, highlighting their business value and evolution.
The Fourth Techo TVP Developer Conference highlighted current cloud‑native adoption, FinOps cost‑optimization, distributed‑cloud strategies, and maturity models on Day 1, then showcased practical best‑practice case studies—from automotive edge computing to service‑mesh migration, hybrid‑cloud PaaS evolution, observability standards, and high‑performance API‑gateway deployments—on Day 2.
This article outlines Huolala's journey through five architectural stages—monolith, RPC, SOA, microservices, and service mesh—detailing the motivations, challenges, and technical choices such as Dubbo, Spring Cloud, and Istio that shaped its high‑availability, cloud‑native backend platform.
This article explains the concept of Proxyless Service Mesh, compares it with traditional sidecar‑based meshes, outlines its advantages and drawbacks, and details how the Dubbo-go framework integrates with Istio to provide interface‑level service discovery, traffic management, and cloud‑native tooling.
To meet rapid business growth, the team at 收钱吧 evolved its testing environments through several generations—from isolated physical setups to a Kubernetes‑based multi‑lane system powered by Istio and custom operators—significantly reducing resource usage, speeding deployments, and improving scalability and flexibility.
This article examines how Service Mesh and API Gateway differ in responsibilities, explores the east‑west versus north‑south traffic concepts, discusses two implementation philosophies, and traces the evolving integration of sidecars, BFF, and unified gateway solutions in modern microservice architectures.
This article examines how Service Mesh and API Gateway differ in function and deployment, explores the philosophical debate over east‑west versus north‑south traffic when a gateway accesses internal services, and traces the evolving integration of sidecars, BFF layers, and cloud‑native architectures.
This whitepaper explains Google’s BeyondProd security framework, detailing how cloud‑native microservice architectures replace traditional perimeter models with zero‑trust principles, mutual authentication, service mesh, and automated tooling such as ALTS, Binary Authorization, and gVisor to protect workloads across shared infrastructure.
This article examines the performance limitations of Kubernetes pod, service, and network‑policy layers built on the kernel Netfilter framework, explores eBPF‑based alternatives such as tc‑ebpf and Cilium, describes a Terway‑with‑eBPF implementation, and presents benchmark results showing significant latency and scalability improvements.
This article explains the concept of cloud native, its origins in CNCF, the evolution of containers, Docker and Kubernetes, the role of micro‑services, service mesh, immutable infrastructure and declarative APIs, and highlights the key benefits such as rapid iteration, automated deployment and independent scalability.
Zhihu describes its journey from a custom Kodor RPC framework to a full Istio service‑mesh deployment, detailing the background challenges, Consul‑based service discovery, migration strategy, traffic management, platform tooling, and the numerous operational pitfalls encountered along the way.
This article examines how eBPF can enhance service‑mesh data planes, compares four deployment models—including sidecar, node‑shared, service‑account‑shared, and micro‑proxy architectures—and evaluates each model’s memory, isolation, security, and upgrade trade‑offs while emphasizing Envoy’s continued L7 responsibilities.
The article examines how eBPF and WebAssembly are being explored as high‑performance, kernel‑level alternatives to traditional sidecar proxies in service mesh architectures, discussing their benefits, limitations, and the ongoing debate among major mesh providers.
This article provides a detailed source‑code walkthrough of Envoy's outbound request processing, explaining how the proxy receives client data, parses HTTP requests, selects routes and clusters, forwards traffic upstream, handles retries and shadowing, and finally returns responses to downstream clients.
This article provides an in‑depth analysis of Envoy's outbound request processing, covering listener initialization, the use of SO_REUSEPORT for load distribution, original destination handling, and the detailed steps of connection creation and filter chaining within the Envoy proxy architecture.
This article provides a detailed technical analysis of Envoy's traffic hijacking mechanisms, covering sidecar and gateway modes, REDIRECT and TPROXY interception, iptables rule generation, port handling, conntrack limitations, and eBPF acceleration within Kubernetes service meshes.
Merbridge, an open‑source project, replaces Istio’s iptables‑based traffic handling with eBPF sockops and redir, dramatically reducing kernel processing steps, improving latency and QPS, and providing seamless integration without modifying existing Istio configurations.
Roblox’s detailed post‑mortem reveals that a three‑day outage was caused by a Consul streaming bug and a design flaw in BoltDB’s freelist, which together created CPU contention and latency spikes on its massive on‑premises infrastructure, leading the team to disable streaming, add a second data‑center, and redesign their architecture.
The article explains how Intuit manages hundreds of Kubernetes clusters across multiple business units using Istio‑based service mesh and the Admiral multi‑control‑plane solution to achieve isolation, compliance, automated configuration, and fault‑tolerant cross‑cluster communication.
This article provides a concise reference of the most frequently used Linkerd CLI commands and their associated flags, detailing how each command interacts with the control plane, injects proxies, and offers diagnostic and management capabilities for Kubernetes service meshes.
This article details China Unicom Software Research Institute's multi‑year journey of adopting Kubernetes‑based service mesh, outlining the evolution from SDK‑driven microservices to sidecar‑based architectures, migration strategies with Baidu, performance optimizations, observability enhancements, and future product roadmaps.
This article introduces NGINX Service Mesh (NSM), a lightweight, highly integrated service‑mesh solution for Kubernetes that leverages NGINX Plus as a data plane, explains its security, traffic‑management, visualization, and hybrid‑deployment capabilities, outlines its architecture and components, and provides step‑by‑step commands for installation, verification, and sidecar injection.
During 2021, the service‑mesh ecosystem—centered on Istio—matured with performance optimizations, protocol extensions, diverse deployment models, eBPF integration, and a growing community of tutorials, conferences, and open‑source projects, solidifying its role as essential cloud‑native networking infrastructure.
This article examines the motivations for rewriting the Java‑centric Dubbo RPC framework in Go, discussing language efficiency, company‑level technology choices, the advantages of Go’s lightweight concurrency for gateways, and how Dubbo‑Go bridges Java and Go in modern microservice and service‑mesh architectures.
This tutorial explains the fundamentals of service mesh, explores Istio’s architecture and core components, and provides step‑by‑step instructions for installing Istio on Kubernetes, deploying a sample microservice application, and leveraging traffic management, mutual TLS, observability, and advanced use cases such as routing, circuit breaking, and JWT‑based access control.
This article examines the distinct responsibilities of Service Mesh and API Gateway, explores the philosophical debate over internal traffic classification, and details emerging integration patterns such as sidecar‑based gateways and BFF‑driven architectures, illustrated with real‑world examples from Ant Financial.
Facing large‑scale production demands, Ctrip’s Cloud Container team designed a multi‑data‑center Service Mesh architecture that isolates failures, employs dual‑active IDC, multi‑cluster deployments, and optimized xDS push mechanisms, ensuring high availability, rapid fault recovery, and efficient rollout across hundreds of services.
The article introduces Alibaba's open‑source Sentinel, a cloud‑native high‑availability protection component for distributed microservices that offers flow control, circuit breaking, concurrency limiting and adaptive overload protection, and highlights the new Sentinel Go v1.0.4 features such as Prometheus metrics, enhanced circuit‑breaker recovery, Apollo data source, and updated Kubernetes CRD support for version 1.22+.
This tutorial explains the fundamentals of service mesh, details Istio's architecture and core components, and provides step‑by‑step instructions for installing Istio on Kubernetes, deploying a sample microservice application, and leveraging traffic management, security, and observability features.
This tutorial explains the fundamentals of service mesh, outlines Istio’s architecture and core components, demonstrates how to install and configure Istio on Kubernetes, and showcases common use cases such as traffic management, security, observability, and alternatives, providing a comprehensive guide for modern micro‑service deployments.
This article describes Ctrip's cloud‑native Service Mesh deployment, detailing its multi‑IDC high‑availability design, fault‑scenario analysis, xDS push metrics, event‑handling optimizations, cold‑start improvements, and progressive canary release strategies to ensure reliable, scalable service traffic management.
This article explains the concept of gray release, outlines a simple architecture with essential components, describes common traffic-splitting strategies, shows how to implement control in Nginx and service layers, and discusses complex scenarios such as multi‑service and data‑centric deployments.
This article details the challenges Ctrip faced with Istio control‑plane performance at massive scale and explains the systematic methodology, concrete optimizations—including O(n²) to O(n) patching, Merkle‑tree based success‑rate metrics, and startup improvements—that reduced xDS push latency from minutes to seconds while enhancing reliability.
This article examines the motivations behind rewriting the popular Java RPC framework Dubbo in Go, discussing language efficiency, micro‑service architecture, RPC competition, thread‑pool challenges, and the emerging role of Dubbo‑Go in service‑mesh environments.
This guide explains how Tencent's open‑source PolarisMesh service mesh can be combined with the Go implementation of gRPC to add service discovery, health checking, dynamic routing, circuit breaking, graceful shutdown, and traffic limiting, providing step‑by‑step code examples and integration architecture.
The article examines the definition, pain points, and industry approaches to managing ultra‑complex microservice call networks, highlighting ByteDance's layered architecture, traffic identity marking, and practical recommendations for scaling and governing massive service ecosystems.
This article details Linkerd Service Profiles—a custom Kubernetes CRD that adds routing, request matching, response classification, and retry budgeting capabilities to services—by outlining the required top‑level fields, route structure, request/response match options, status range definitions, and providing concrete YAML examples.
This guide explains how to use Dubbo's cloud‑native features—service listings, dynamic routing (conditional, tag, and mesh), runtime configuration, testing, and mock support—providing step‑by‑step examples, YAML definitions, and Maven snippets for effective service governance.
This guide explains Linkerd's Server and ServerAuthorization resources, their default inbound policies, spec fields, and practical YAML examples for controlling inbound traffic within a service mesh.
This article presents a comprehensive case study of how Industrial and Commercial Bank of China (ICBC) adopted Service Mesh technology to modernize its micro‑service architecture, detailing the platform’s design, deployment strategies, performance optimizations, enterprise‑level governance capabilities, and future development plans.
Baidu’s Aifanfan product migrated its entire suite to Kubernetes through a two‑phase, 11‑step process that standardized CI/CD, containerization, and traffic routing, enabling deployment of 200 + modules in under an hour, 99.99 % stability, cost‑effective operations, and laying groundwork for multi‑cluster, service‑mesh expansion.
The article explains Linkerd's architecture, detailing its control plane services, data‑plane sidecar proxies written in Rust, the proxy injector admission controller, and the init container that configures iptables for transparent TCP traffic within Kubernetes pods.
This tutorial introduces the fundamentals of service mesh, explains how Istio implements a mesh architecture, and walks through practical steps for installing Istio on Kubernetes, configuring traffic management, security, observability, and common use cases such as routing, circuit breaking, and mutual TLS.
Join Xiaohongshu’s cloud‑native engineer Wang Chengcheng on November 23 for a 45‑minute talk and Q&A about the company’s Service Mesh evolution, Istio adaptation, Aeraki production optimizations, large‑scale deployment experiences, and practical strategies for deploying community Istio in production.
This article traces the evolution of software architecture from early monolithic Web 1.0 applications through SOA and the rise of microservices, explaining how cloud‑native technologies like containers, Kubernetes, and service mesh reshape development, deployment, and traffic management while highlighting associated challenges and best practices.
This guide enumerates 43 practical tasks for installing, configuring, securing, and operating Linkerd 2.11 on Kubernetes, covering service injection, canary releases, TLS credential rotation, Prometheus integration, traffic policies, multicluster communication, and more, each linked to detailed instructions.
This article explains the concept of canary (gray) releases, demonstrates how to perform rolling updates and precise traffic splitting in Kubernetes, and shows how to achieve fine‑grained canary deployments using Istio’s VirtualService and DestinationRule resources with practical YAML and kubectl examples.
This article explains core service‑mesh concepts—including API gateway, cluster, container, control and data planes, distributed tracing, egress, ESB, golden metrics, ingress, init containers, latency, Linkerd's architecture, load balancing, mTLS, multi‑cluster support, observability, reliability, sidecar proxies, and success rate—providing a concise reference for developers working with Kubernetes‑based meshes.
This article explores the evolution of modern distributed applications, outlining the core primitives required for lifecycle, networking, resource binding, and state management, and examines how Kubernetes, microservices, service meshes, Knative, Dapr, and emerging trends reshape cloud‑native architectures.
Alibaba’s AServer access gateway, handling billions of users and millions of QPS, transitioned from a monolithic tengine‑based system to a cloud‑native, containerized architecture with Kubernetes, Pilot, and Envoy, improving operational complexity, dynamic routing, traffic isolation, and scalability for massive e‑commerce traffic.
The DeWu community runs all Go services in Kubernetes, using CoreDNS/Etcd for native discovery, Istio’s Envoy sidecar for L4/L7 load-balancing and gRPC support, and a Dubbo-go refactor that switches to Nacos-based IP publish-subscribe, all unified under a dual-gateway (Java JWT gateway and Istio Ingress) architecture.
This article provides a step-by-step guide to installing Istio on a Kubernetes cluster, including verifying node status, creating the istio-system namespace, copying the istioctl binary, selecting a profile, generating manifests, and checking deployed pods and services.
This article compares nine widely used open‑source service‑mesh frameworks, explains their core features and typical use cases, and provides practical criteria to help DevOps teams select the most suitable mesh for their micro‑service deployments on Kubernetes or other platforms.
This article provides an in‑depth overview of microservice concepts, motivations, architectural principles, design patterns, service splitting strategies, essential infrastructure, popular frameworks such as Spring Boot, Spring Cloud, Dubbo, and Service Mesh, and practical recommendations for adopting microservices in real‑world projects.
This article explains DataVisor's risk‑control system architecture, outlines the business challenges such as complex logic, massive data, high QPS and low latency, and demonstrates how OpenResty (Nginx + Lua) is used for high‑performance gateways, micro‑service style calls, hot‑loaded scripts, automatic circuit‑breakers, and progressive architectural evolution toward service‑mesh designs.
The article explains how Alibaba merged its proprietary HSF framework with the open‑source Dubbo, outlines the technical challenges of cloud‑native migration, describes Dubbo 3.0’s new features such as the Triple protocol and Service Mesh integration, and shares a large‑scale production case from DingTalk.
Tencent Cloud announced the open‑source release of Polaris Mesh, a high‑performance service‑mesh platform that unifies service discovery, traffic routing, fault tolerance, access control, and mesh capabilities, offering a scalable solution for enterprises transitioning to micro‑service architectures.
Over the past year, the author chronicles a hands‑on journey from a fresh graduate to a cloud‑native specialist, detailing the design and implementation of an enterprise‑grade Kubernetes architecture—including multi‑cluster logging, CI/CD pipelines, Istio service mesh, monitoring, and private‑deployment strategies—while sharing practical lessons learned.
The article summarizes key insights from the 2021 GIAC Cloud Native conference, covering strategies to limit service explosion radius, SkyWalking-based Kubernetes event monitoring, Kuaishou's Service Mesh implementation, and Dubbogo 3.0's innovations such as proxyless mesh and adaptive throttling.
This article details Baidu's internal adoption of a service mesh built on Istio and Envoy, covering the motivations, architectural design, low‑invasion integration methods, extreme performance tuning, stability and traffic governance capabilities, surrounding ecosystem tools, and the resulting operational benefits.
This article reviews the evolution of software delivery, explains cloud‑native concepts, architecture principles, and key technologies such as containers, Kubernetes, micro‑services, serverless and service mesh, and then examines how JD.com’s iPaaS platform aligns with and advances cloud‑native practices.
This article introduces Apache APISIX, examines the challenges of using it as a data‑plane in a service‑mesh architecture, presents the apisix‑mesh‑agent as an intermediary solution, and outlines the advantages, design, and future roadmap of a APISIX‑based cloud‑native service mesh.
This article chronicles Qunar's multi‑year journey to adopt cloud‑native containerization, detailing the timeline, architectural redesign, CI/CD overhaul, middleware adaptations, migration strategies, encountered issues, and future plans for stability, resource efficiency, and service‑mesh implementation.
This article explains the origins, definitions from Pivotal and CNCF, core cloud‑native technologies such as containers, microservices, service mesh, immutable infrastructure and declarative APIs, the significance of cloud native, the current ecosystem, and a step‑by‑step implementation path for enterprises.
This article traces the evolution of software architecture from monolithic applications through vertical, distributed, and microservice stages to service mesh, compares SOA with microservices, contrasts Spring Cloud and Dubbo, examines their overlap with Kubernetes, and outlines the benefits and challenges of adopting a service mesh like Istio.
This article explains the concept of microservices, compares them with traditional monolithic web applications, outlines their advantages and challenges, and introduces first‑generation frameworks like Spring Cloud and Dubbo as well as next‑generation service‑mesh solutions such as Linkerd, Envoy, Istio, and Conduit, especially in Kubernetes environments.
The article describes a virtual environment solution that uses traffic coloring and routing to enable independent branch testing for micro‑services, improving development efficiency, reducing test costs, and supporting HTTP, RPC, and MQ protocols within a cloud‑native infrastructure.
Youzan’s service registration and discovery architecture progressed from fine‑grained interface‑level registration on Etcd, through an intermediate application‑level discovery layer using Istio Pilot and the Tether sidecar, to a fully application‑level, sidecar‑driven model with CRD metadata, enabling scalable, cloud‑native multi‑region service mesh.
This article traces the historical development of microservice architecture from monolithic to distributed services, outlines its advantages and drawbacks, and presents a comprehensive technology stack—including service communication, API gateways, authentication, fault tolerance, logging, configuration, containerization, orchestration, and CI/CD—to guide practitioners in building robust, scalable backend systems.
This article traces the evolution of software architecture from monolithic applications through vertical splitting and distributed services to modern microservice architectures, examines their advantages and drawbacks, and outlines a comprehensive technology stack—including service discovery, API gateways, authentication, logging, containerization, orchestration, and CI/CD tools—essential for building scalable, resilient systems.
This article explains that cloud native is not a fixed definition but an evolving vision and set of best‑practice methods—such as immutable infrastructure, automation, sidecar architecture, and Kubernetes—that enable software to be born, grow, and operate efficiently in the cloud while reducing cost and complexity.
Effective serverless governance requires comprehensive observability, traffic management, and service registration built on Kubernetes, using either a mesh sidecar with Istio or an embedded SDK, to simplify complex operational tasks such as discovery, fault tolerance, gray releases, and metric correlation for large‑scale function deployments.
This article traces the evolution of software architecture from monolithic applications through vertical splitting, distributed services, and SOA to modern microservices, and then details the essential technology stack—including service communication, API gateways, authentication, fault tolerance, logging, configuration, containers, orchestration, and CI/CD—required to build scalable, resilient cloud‑native systems.
This article explains the origins and evolution of Service Mesh and Data Mesh, outlines the three stages of big‑data platform development, describes Data Mesh principles and components, and discusses its practical challenges and future prospects for business teams.
This article explains the evolving role of API gateways by defining APIs, describing API management, cluster ingress gateways, and the API gateway pattern, and finally discussing how these concepts intersect with service mesh technologies to help architects choose the right solution for their cloud‑native environments.
This article explains the evolution from monolithic to microservice architectures, the challenges of service governance, the concept and benefits of service mesh, and details the practical adoption of Istio‑based service mesh—including traffic ingress, smooth migration, downgrade strategies, and future enhancements—within the platform.
This article compiles Baidu experts' presentations at QCon 2021, covering unified quality‑efficiency delivery for feed recommendation, software engineering capabilities, AIOps fault‑management practices, Apache Doris real‑time analytics, large‑scale Service Mesh deployment, massive service‑governance techniques, and deep‑learning platform innovations, with speaker details and audience benefits.
This article details Baidu’s internal service‑mesh deployment, explaining why traditional RPC‑based governance fell short, how a sidecar‑based mesh decouples governance from frameworks, and the technical challenges and solutions for low‑intrusion, high‑performance, fault‑tolerant traffic management across tens of thousands of microservices.
Baidu created an internally‑built, Istio‑based service mesh that decouples governance from language‑specific RPCs, offering low‑intrusion integration, ultra‑low latency via a brpc coroutine data plane, advanced fault‑tolerance and fine‑grained traffic scheduling, and now powers over 80 % of its core microservices handling more than a trillion daily requests.
This article provides an in‑depth overview of microservices, covering its origins, core principles, advantages and drawbacks, adoption criteria, architectural stages, prerequisite infrastructure, design patterns, service decomposition strategies, and a comparison of popular frameworks such as Spring Cloud, Dubbo, Service Mesh, and related tooling.
This article explains the three main roles of API gateways—API management, cluster ingress, and gateway patterns—defines what an API is, compares gateways with service meshes, and provides examples of implementations to help architects choose the right solution for cloud‑native environments.
Baidu iFanFan migrated all its Java‑based services to a native Kubernetes + Istio service mesh within three months, replacing fragmented, manual governance with automated rate‑limiting, canary releases, chaos testing and observability, which cut governance cycles from months to minutes, reduced CI time by ~20 % and dramatically improved system stability and multi‑cloud readiness.
This article, based on a Volcano Engine developer community meetup, explains how a self‑developed Service Mesh provides unified traffic management for TikTok’s massive Spring Festival Red Packet event, covering architecture, stability, security, and efficiency strategies across multi‑language microservices in complex environments.
Didi evolved testing environments from an All‑in‑One monolith to Fastdev traffic replay, Test‑in‑Production (TiP) with side‑car proxies, and offline simulation (OSim), each addressing scaling, fidelity, and safety, and all remain necessary for reliable testing as the platform grows.
This article explains the evolution of cloud native practices—from Docker containerization and Kubernetes orchestration to service mesh technologies—highlights Alibaba Cloud's strategic commitment, and introduces a comprehensive 14‑chapter handbook that guides readers through core Kubernetes concepts, configuration management, and networking strategies.
This interview details Baidu's practical approach to microservice governance, covering its definition, the evolution from ad‑hoc scaling to automated capacity, traffic, and stability engineering, and the challenges of data collection, standardized interfaces, and decision‑making policies for large‑scale systems.
This article details Ant Group's evolution from monolithic applications to microservices and its large‑scale adoption of Service Mesh, describing the motivations, challenges, architecture, multi‑mesh capabilities, and the design of a cloud‑native application runtime built on MOSN to decouple applications from infrastructure.
The CNCF 2020 China Cloud Native Survey of 439 participants reveals rapid growth in serverless adoption, a surge in container and Kubernetes usage, expanding service mesh deployment, and increasing reliance on open‑source automation tools, highlighting China’s emerging role as a major CNCF contributor.
