This article explains microkernel design, compares it with monolithic kernels, shows how plug‑in architecture maps to microservices, and explores service‑mesh communication patterns, performance trade‑offs, and hybrid solutions for building flexible, scalable cloud‑native applications.
Meituan’s rollout of a private‑cloud service mesh—built on an Envoy data plane, custom control plane, and language‑agnostic SDKs—overcame compatibility, scaling, and heterogeneity hurdles through isolation, standardized governance runtime, data sharding, and centralized health checks, now supporting hundreds of services with sub‑millisecond latency and unified multi‑language management.
Managing hundreds or thousands of tightly coupled services inevitably creates diverse operational challenges, so effective service governance—covering definition, lifecycle, versioning, registration, monitoring, ownership, testing, and security—is essential, and can be realized through a unified DevOps‑driven platform.
API gateways serve three core roles—API management, cluster ingress control, and gateway pattern—each with distinct responsibilities, and their relationship with service meshes is explored, helping readers understand how to choose and combine these components for optimal API infrastructure across various layers.
This article walks through the evolution of an online supermarket from a simple monolithic website to a fully split microservice architecture, highlighting the pitfalls of ad‑hoc growth, the need for service abstraction, monitoring, tracing, fault tolerance, testing, and the trade‑offs of frameworks versus service mesh.
This article explores cloud‑native software architecture, covering the 12‑factor app foundation, loose‑coupled design, API‑first and SOLID principles, event‑driven and service‑mesh patterns, observability, serverless runtimes, and emerging technologies such as Dapr, GraalVM and WebAssembly.
The article examines the challenges of exposing numerous backend microservices to clients and proposes using an API gateway to centralize traffic, handle authentication, rate limiting, protocol conversion, service discovery, performance optimization, and operational concerns, while also discussing the shift toward decentralized service‑mesh solutions.
This article explains why containers and Docker are popular, outlines the network and security challenges of building container cloud platforms, compares bridge, host, container and none networking modes, reviews major CNI solutions such as Calico, Flannel, Weave and Macvlan, and discusses how service mesh complements CNI in multi‑cluster environments.
This article explains how Alibaba’s shift from IaaS to a PaaS‑centric, cloud‑native approach changes application architecture, introduces new protocols, and accelerates delivery through standardized contracts, service mesh, lightweight containers, and automated lifecycle management.
This report recaps a technical closed‑door session where experts from Weibo and Ziroom shared real‑world API gateway implementations, discussed centralized versus decentralized designs, explored the evolution of Ziroom's gateway, introduced the Gamma‑RPC framework, and debated future trends like service mesh.
This article explains how service discovery has progressed from simple centralized proxies to client‑embedded libraries and finally to host‑level independent processes like Service Mesh, detailing each generation, their pros and cons, and how Kubernetes implements discovery and load balancing.
This article recounts Momo's journey from its early micro‑service framework MOA to the adoption of a self‑developed Service Mesh, detailing architectural evolution, identified governance challenges, evaluation phases, and the design of data‑plane and control‑plane components for a cloud‑native environment.
This article explains the origins, principles, advantages, disadvantages, adoption criteria, architectural stages, required infrastructure, design patterns, service splitting methods, and popular frameworks for building cloud‑native microservices, helping engineers decide when and how to transition from monoliths to microservice‑based systems.
This article explains Istio’s architecture, detailing how its control‑plane components (Pilot, Mixer, Citadel, Galley) manage traffic, policies, and security while the Envoy sidecar forms the data plane, and it walks through static and dynamic configuration methods with concrete examples.
This article walks through the evolution of an online supermarket from a simple monolithic web application to a fully decomposed microservice architecture, highlighting the challenges of scaling, the need for monitoring, tracing, service discovery, fault tolerance, and the eventual adoption of a service mesh.
This article details CTrip's journey from its early .Net‑based ESB architecture through a self‑developed Java microservice framework to the current CDubbo platform, covering registration, monitoring, dynamic configuration, protocol compatibility, performance gains, extensibility, and future Service Mesh integration.
Alibaba’s large‑scale Service Mesh deployment faces challenges such as smooth technology evolution, business‑technical balance, technical debt, massive sidecar operations, and scaling, which it addresses through staged architecture evolution, traffic‑transparent interception, hot upgrades, and open‑source contributions to Istio and Envoy.
This article analyzes why applications fail to start when the Istio sidecar proxy has not finished its xDS configuration, presents three practical solutions—including health‑check gating, pod container start order control, and Kubernetes startup dependencies—and recommends adopting design‑for‑failure principles for robust microservice deployments.
The article explains microservice fundamentals, the challenges of client‑to‑service communication, and how API gateways, Backend‑for‑Frontend patterns, and Service Meshes address these issues while outlining key gateway features, popular implementations, and selection criteria for robust backend architectures.
This article explains the fundamentals of cloud native computing, introduces service mesh architectures such as Istio and Envoy, explores chaos engineering with Chaos Mesh, and details how eBPF/XDP‑based user‑space container networking can accelerate data‑plane performance in modern microservice environments.
The article explains Microsoft’s Open Service Mesh (OSM), a lightweight, SMI‑compatible service mesh built on Envoy for Kubernetes, covering its design principles, features, deployment steps, and its role in the broader cloud‑native service‑mesh ecosystem.
NetEase Media transformed its infrastructure by containerizing services, establishing multiple resource pools, implementing a ServiceMesh with NSF, and isolating beta and production environments, resulting in higher CPU utilization, automated scaling, and improved stability, while sharing lessons learned and future plans.
This article explains the concept of Service Mesh, why it emerged from micro‑service challenges, its evolution, and compares the main open‑source implementations such as Linkerd, Envoy, Istio, and Conduit, helping readers grasp its role in modern cloud‑native architectures.
Google announced the transfer of the Istio trademark to the newly formed Open Usage Commons, establishing a neutral base for the project's branding while outlining continued open governance, community involvement, and future stewardship of the service‑mesh ecosystem.
This article examines the evolving relationship between Service Mesh and API Gateway, clarifying their original responsibilities, discussing traffic direction semantics, and detailing how sidecar integration, BFF layers, and real‑world Ant Financial practices are driving a convergence toward more decentralized, cloud‑native API management.
This article examines the limitations of traditional Kubernetes Service implementations, introduces Tencent TKE’s IPVS‑BPF mode that bypasses nf_conntrack using eBPF for SNAT, details its design and implementation steps, and presents extensive performance measurements showing significant latency and throughput improvements.
Linkerd 2.8 adds a multi‑cluster extension that securely connects Kubernetes clusters across any network topology, introduces an add‑on plugin system with Jaeger and Grafana support, and includes numerous performance and stability improvements for cloud‑native service mesh deployments.
This article explores the evolving concept of cloud native, comparing definitions from Pivotal and CNCF, detailing essential technologies such as containers, Kubernetes, Service Mesh, and IaC, and offers practical guidance on building, delivering, and adopting cloud‑native applications.
This article explains how Envoy, a lightweight high‑performance L7 proxy and communication bus, provides non‑intrusive sidecar architecture, multi‑layer networking, HTTP/2 support, dynamic configuration, gRPC and special protocol handling, and built‑in observability for cloud‑native systems.
This article outlines ten frequent Istio exceptions—from service port naming constraints and flow‑control ordering to mTLS‑induced connection drops—explaining their root causes, diagnostic steps, and practical best‑practice solutions for reliable mesh deployments.
This article walks through a practical, step‑by‑step transformation from a monolithic application to a cloud‑native, micro‑service architecture, covering planning, domain‑driven design, continuous integration, service registration, API gateways, databases, caching, logging, configuration management, containerization, performance monitoring, service governance, GitOps, traffic shading, service mesh, stress testing, and multi‑datacenter deployment.
The Istio 1.6 release introduces a fully migrated Istiod architecture, streamlined installation and upgrade processes, expanded observability features, native support for virtual‑machine workloads via WorkloadEntry, and several network enhancements including improved secret handling and experimental Service API support.
This article explains why a company using Dubbo with Zookeeper should adopt cloud‑native practices, compares Zookeeper‑based discovery with Kubernetes DNS, and provides a detailed migration plan to Nacos—including a dynamic registry, the nacosSync tool, and extensive performance optimizations.
This article explains how Istio injects sidecar containers into user‑space Pods using the istio‑sidecar‑injector component, covering automatic and manual injection methods, the underlying MutatingAdmissionWebhook configuration, the initContainer and sidecar containers added, and the associated ConfigMap and volume setups.
Meituan’s Naming Service 2.0 replaces the ZooKeeper‑based 1.0 design with a four‑layer, AP‑oriented architecture that leverages a service‑mesh sidecar, sharded KV storage, and a control service layer, delivering eight‑fold throughput gains, sub‑second latency, zero‑downtime migration for most services, and new business capabilities such as traffic isolation, elastic scaling, and data‑driven SLA monitoring.
Explore the fundamentals of Envoy, the lightweight L7 proxy for modern SOA architectures, through a detailed walkthrough of its architecture, configuration structure, filter chain, and key components such as xDS, listeners, clusters, and runtime settings, illustrated with diagrams and practical examples.
This article provides a detailed overview of Istio’s architecture, explaining the roles and interactions of its data plane, control plane, and core components such as Envoy sidecar, Pilot, Mixer, Citadel, Galley, sidecar‑injector, and ingress gateway within a Kubernetes‑based service mesh.
This article explains how the Solar microservice framework, built on Spring Cloud, provides a fully automated, safe, and loss‑less blue‑green release system with intelligent monitoring, weight‑based traffic shifting, and namespace isolation, empowering large‑scale online education platforms to achieve rapid, reliable deployments without manual intervention.
This article provides a comprehensive introduction to Istio, explaining what a service mesh is, its core components and functions, the challenges it addresses in microservice architectures, and practical steps for adopting Istio in production environments.
This article explains what a service mesh is, outlines the operational challenges of microservice architectures, and details how Istio’s data‑plane and control‑plane components provide traffic control, security, and observability to simplify cloud‑native deployments.
This article traces the history of backend architecture from monolithic systems through distributed designs, Docker containers, microservices, Spring Cloud, and Kubernetes, culminating in a detailed overview of cloud‑native Service Mesh technologies such as Istio and their key capabilities.
This article examines the evolution of Tencent's TSF Mesh Service Mesh platform, detailing its architecture, the technical hurdles faced when supporting heterogeneous environments, multi‑tenant isolation, DNS and Spring Cloud interoperability, and the solutions implemented to achieve robust, cloud‑native service governance.
This article explains what Istio is, outlines the major updates in version 1.5—including the unified istiod control plane, WebAssembly extensibility, simplified installation, and improved observability—describes core control‑plane components, and provides step‑by‑step instructions for preparing a Kubernetes cluster and installing Istio.
This article examines the origins, principles, advantages, and drawbacks of microservice architecture, outlines when it should be adopted, describes its evolution stages, presents design patterns, service‑splitting strategies, and reviews popular frameworks and tools to help teams decide if microservices fit their system complexity and organizational capabilities.
This article explains Envoy's hot‑restart capability, various dynamic configuration options—including static, SDS/EDS, CDS, RDS, and LDS—and the initialization and drain processes that enable seamless updates and graceful connection handling in cloud‑native deployments.
This article introduces Istio as an open platform for connecting, securing, controlling, and observing services, explains the fundamentals of service mesh, outlines Istio’s architecture and components, and provides practical steps for adopting Istio in a Kubernetes environment.
The article explains Envoy's circuit‑breaking mechanisms, global rate‑limiting integration, and TLS support, detailing configuration options, limits, and example YAML snippets for deploying secure and resilient service‑mesh proxies.
Envoy provides active and passive health checks—including HTTP, L3/L4, and Redis types—configurable intervals and failure thresholds, along with a health‑check filter that can bypass, forward, or cache requests, and detailed connection‑pool handling for HTTP/1.1 and HTTP/2 to ensure reliable service routing.
The article summarizes insights from Tencent’s TVP closed‑door tech forum, explaining what cloud native means, its evolution, benefits such as platformization and automation, challenges in adoption, Kubernetes’s growing role in serverless, edge computing, and service mesh, and how developers and enterprises can navigate the shift.
At Tencent Cloud’s closed‑door TVP meeting, experts traced cloud‑native’s evolution from monolithic to PB‑scale distributed platforms, highlighted its ecosystem of infrastructure, service‑mesh and Kubernetes‑driven scheduling, noted widespread Fortune‑100 and Tencent adoption, and stressed that successful implementation hinges more on organizational and developer mindset shifts than on technology maturity.
This article traces the evolution of Service Mesh from early microservice communication challenges through multiple generations of architectures, explains its role as a transparent infrastructure layer for service-to-service traffic, and discusses its benefits, language-agnostic nature, and current performance and operational trade‑offs.
This article walks through the evolution of an online supermarket from a simple monolithic website to a fully decomposed micro‑service architecture, highlighting the motivations, design decisions, common pitfalls, and the essential components such as service discovery, monitoring, tracing, circuit breaking, testing, and service mesh.
This article explains the fundamentals of Service Mesh, why it is needed in micro‑service environments, compares the two leading implementations Istio and AWS App Mesh, and shares practical deployment experiences and best‑practice recommendations for cloud‑native applications.
This article walks through the transformation of an online supermarket from a simple monolithic website to a fully fledged microservice architecture, highlighting the motivations, design decisions, common pitfalls, and essential components such as monitoring, tracing, logging, gateways, service discovery, circuit breaking, testing strategies, and service mesh adoption.
This article explains the fundamentals of Linux iptables—including its role with netfilter, rule ordering, tables and chains—then walks through packet‑processing flows and three practical scenarios such as Envoy traffic hijacking, massive long‑connection handling, and bastion‑host security.
This article explains what a Service Mesh is, how it simplifies inter‑service communication in microservice architectures, outlines its core features, and reviews the two most popular open‑source implementations, Linkerd and Istio.
This article details the design and implementation of a Kubernetes‑native API Gateway built with OpenResty, covering its architecture, controller logic, HTTP/gRPC load balancing, custom ingress handling, rate‑limiting, service proxying, and future plans for service‑mesh integration.
The article forecasts seven pivotal cloud‑native technology trends for 2020—including Serverless, Service Mesh, Kubernetes, edge computing, container instances, infrastructure evolution, and application development—while explaining how these shifts will reshape software lifecycles, operational efficiency, and business value.
This article walks through the evolution of an online supermarket from a simple monolithic website to a fully split microservice system, highlighting the motivations, architectural changes, common pitfalls, and practical solutions such as monitoring, tracing, service discovery, circuit breaking, testing, and the eventual adoption of a service mesh.
This article walks through the complete lifecycle of a microservice migration for an online supermarket, covering initial monolithic requirements, incremental refactoring, service decomposition, monitoring, tracing, fault isolation, testing, and the eventual adoption of service mesh, while highlighting practical challenges and solutions.
This article details Youzan's design and implementation of a traffic‑control system built on Istio/Envoy, describing the protocols, architecture, and concrete JSON routing rules for gray releases and blue‑green deployments, along with observability features and future multi‑service release plans.
The article reflects on Docker's early hype, Kubernetes' rise as the new core platform, and the proliferation of Cloud‑Native concepts such as GitOps, Service Mesh, and Application abstractions, discussing their challenges, integration efforts, and future directions.
The second Youzan PaaS Innovative Meetup in Hangzhou gathered experts from Tencent Cloud, Youzan, and Ant Financial to share Service Mesh technical practices—including TKE Mesh architecture, multi‑language Dubbo integration, Istio‑based gray releases, and large‑scale deployment strategies—followed by discussion and networking.
This article details Alibaba's large‑scale Service Mesh deployment for Double‑11 core applications, covering the three‑plane architecture, key challenges such as SDK‑free mesh, complex routing, rate limiting, Envoy overhead, and the performance impact on latency, CPU and memory, while outlining future roadmap and open‑source collaboration.
The Youzan PaaS Innovative Meetup (2nd edition) in Hangzhou gathered experts from Tencent Cloud, Youzan and Ant Financial to share Service Mesh practices—including TKE Mesh architecture, Istio evolution, Dubbo integration, gray‑green releases, and large‑scale deployment strategies—aiming to build an active local PaaS technical community.
On December 7, Youzan’s Mobile Technology Salon gathered over 100 participants and six speakers to showcase the company’s quality‑and‑efficiency initiatives, including a mobile basic guarantee system and code‑coverage‑driven testing practices, with session videos released, full PPTs available, and a follow‑up PaaS meetup announced for December 21.
Meituan’s OCTO Mesh transforms its massive service governance by adopting a Service Mesh architecture with sidecar proxies, a custom control plane, and meta‑server driven routing, addressing multi‑language support, middleware coupling, heterogenous integration, and scalability challenges while detailing design choices, health‑check strategies, and operational tooling.
The article recounts how Ant Financial's SOFAStack and its SOFAMesh service mesh powered Alibaba's 2019 Double 11 shopping festival, detailing the massive scale, technical challenges, intensive testing, and rapid resource scheduling that enabled a record‑breaking, financially‑grade cloud‑native deployment.
Alibaba’s 2019 Double 11 campaign saw a record 54.4 k orders per second and 970 PB of data, prompting a full cloud‑native transformation that migrated 100% of core applications to the cloud using Kubernetes, containers, the Shenlong bare‑metal servers, service mesh, and OAM, delivering scalable, resilient performance.
This newsletter covers Docker Enterprise’s acquisition by Mirantis, Red Hat’s open‑source registry launch, KubeCon North America details, key Kubernetes 1.17‑1.18 upstream changes such as PreSidecars, Kubectl v2, IP type split, hidden metrics, plus curated open‑source project and reading recommendations for cloud‑native practitioners.
This article explains how cloud‑native technologies—including containers, Kubernetes, serverless platforms, service‑mesh architectures, standardized application management, and edge computing—are reshaping digital transformation by delivering extreme elasticity, security isolation, and seamless cloud‑to‑edge integration.
This article provides a comprehensive overview of Service Mesh technology, covering its origins, the problems it solves in microservice governance, architectural patterns such as sidecar and local gateways, the evolution from early projects like Linkerd to modern solutions like Istio and Envoy, and the remaining performance, portability, and standardization challenges that shape its future.
This article presents Ant Financial’s extensive Service Mesh deployment, detailing its evolution from research to a global‑scale mesh of over 100 k pods, performance measurements, optimization techniques, operational practices, migration strategies, and practical recommendations for organizations considering Service Mesh adoption.
This article presents Ant Financial's extensive Service Mesh journey, detailing its multi‑stage large‑scale rollout, performance measurements during the 618 and upcoming Double‑11 events, the technical challenges encountered, optimization techniques applied to the data‑plane and control‑plane, and practical advice for organizations considering Service Mesh adoption.
Sun Wei outlined Amap’s transformation of its traffic access layer—from handling 600,000‑plus QPS with sub‑2 ms latency through a fully asynchronous, stream‑based pipeline and reactive Vert.x/WebFlux experiments, to API aggregation, traffic tagging, and a roadmap toward distributed sidecar or SDK gateways for billion‑scale, low‑latency services.
This article explains what an API gateway is, why it’s crucial for microservice architectures, outlines its core functions such as authentication, load balancing, traffic control, and logging, describes its typical three‑layer architecture, dives into technical principles like protocol conversion and asynchronous processing, and compares popular open‑source gateways such as Kong, Traefik, Ambassador, and Zuul.
This article introduces Kubernetes' fundamental components such as Pods, Deployments, Services, compares it with Docker Swarm, shares practical usage of the Wayne dashboard, provides deployment best‑practice notes, and presents performance test results of a self‑built cluster versus bare‑metal Java workloads.
This article presents a detailed, step‑by‑step illustration of microservice architecture, covering its motivations, component breakdown, migration from monoliths, common pitfalls, monitoring, tracing, logging, gateway, service discovery, resilience patterns, testing strategies, frameworks, and the emerging service‑mesh approach.
This roundup covers the Helm team’s push for v3 migration, the 2020 KubeCon schedule, Contour v0.15’s leader‑election feature, Google’s Cloud Dataproc on Kubernetes, several Kubernetes Enhancement Proposals, bug fixes, and a curated list of open‑source service‑mesh and tooling projects.
This article summarizes a Kubernetes & Cloud Native meetup talk that reviews recent Service Mesh product releases, analyzes six emerging trends, explains the core value of separating business and non‑business logic, and highlights the technology's future direction within cloud‑native architectures.
The article introduces Apache Dubbo, a high‑performance Java RPC framework, outlines its history, current features, multi‑language ecosystem, recent releases, and future plans such as cloud‑native integration, service‑mesh support, reactive programming, and the roadmap toward Dubbo 3.0.
This article details how the KUN platform enhances Istio’s Service Mesh by extending EnvoyFilter with namespace-level isolation, custom traffic management strategies, fault injection examples, and validation mechanisms, illustrating code implementations and architectural insights for robust, scalable microservice networking.
This article explains the fundamentals of service mesh, details Istio's architecture and components, demonstrates traffic management, security, and telemetry features with practical examples, and presents performance testing results and Go client code for managing Istio CRDs in a Kubernetes environment.
The article recaps a Shanghai UCan afternoon tea tech salon where six seasoned experts shared practical Kubernetes and cloud‑native experiences, covering UCloud’s UK8S platform, network and storage integrations, tenant isolation, deployment automation, real‑world case studies from healthcare, workflow engines, service mesh, and small‑team adoption strategies.
Since 2017, Youzan transformed its monolithic Nginx‑PHP stack into a language‑agnostic service mesh by introducing Dubbo, the ZanPHP RPC framework, a custom NOVA protocol, and the Go‑based Tether sidecar that offloads discovery, load‑balancing and monitoring, later adding a Service Pretender for cross‑region traffic, and now migrates discovery to Istio Pilot on Kubernetes for seamless, containerized microservice orchestration.
This article explains Istio's security features, focusing on mutual TLS configuration at global, namespace, and service levels, demonstrates practical YAML examples, shows how sidecar presence affects traffic, and discusses TLS mode choices, certificate handling, and real‑world deployment considerations.
This article examines the evolution of Java microservices at Huajiao, compares existing PHP and Java solutions, justifies the adoption of Spring Boot 2 with MyBatis and Undertow, outlines incremental improvements such as CI/CD migration and service mesh adoption, and presents a roadmap for future microservice components.
This article examines the challenges of a PHP‑based microservice stack, compares open‑source Java solutions, explains the rationale for adopting Spring Boot 2 with MyBatis and Undertow, and outlines a roadmap toward CI/CD automation, service discovery, and Service Mesh adoption.
The article explains how microservice architectures introduce complexity, how Netflix OSS tools address these challenges, and why adopting the Sidecar design pattern with Istio’s service mesh can improve scalability, resilience, and observability in cloud‑native systems.
This roundup covers Gartner’s eight predicted cloud‑native infrastructure trends, a five‑year reflection on Kubernetes, recent upstream Kubernetes changes, and highlights two open‑source tools—ksniff for pod traffic capture and Flagger for service‑mesh‑based canary releases—providing developers with actionable insights into the evolving cloud‑native ecosystem.
Implementing a service mesh in production faces real‑world hurdles such as significant CPU consumption, 20‑50% performance loss, tangled sidecar responsibilities, missing registration support, and control‑plane bottlenecks, which can be mitigated by a central‑mesh fallback, IPC and lock‑free optimizations, staged sidecar splitting, and unified Pilot‑based service discovery.
This article analyzes Youzan Cloud's architecture for supporting multi‑language customizations, detailing the distinction between small and large SaaS customers, the role of tool, self‑use, and industry apps, and the service‑mesh‑based RPC framework that abstracts protocols, monitoring, and logging across Java, PHP, Python, and Node.js.
This article provides a detailed analysis of Envoy’s filter architecture within Istio 1.1, explaining the async event model, each filter type, their registration interfaces, and the key processing steps from listener selection to load‑balancing and Mixer integration.
This week’s roundup covers two high‑severity Docker CVEs (CVE‑2019‑5021 privilege escalation in Alpine images and CVE‑2018‑15664 TOCTOU flaw in docker cp), Kubernetes moving to Go modules, new Envoy request‑mirror and route‑debug features, Knative’s stateful‑serverless experiment, Istio 1.0 EOL, Cilium’s BPF‑based network policy, and emerging Service Mesh trends, all with reference links for deeper reading.
This article introduces Istio as an open‑source service mesh, explains its data‑plane and control‑plane architecture, outlines its traffic management, security, and telemetry features, discusses performance considerations, and shows how Lingque Cloud ASM leverages Istio to solve typical microservice problems such as debugging, testing, release processes, and flexible network policies.
The article introduces Service Mesh Interface (SMI), a lightweight standard for Kubernetes service meshes, explains its design goals, details the core API objects for traffic specification, access control, traffic splitting, and monitoring, and reviews the ecosystem of vendors and contributors supporting the specification.
This article explains Kubernetes' origins, its pivotal role in the cloud‑native ecosystem, practical steps for migrating legacy applications, common operational challenges, and emerging trends such as service mesh, serverless, and data‑service integration.
This article introduces the fundamentals of Istio as a service mesh, explains its data‑plane and control‑plane architecture, and details the roles of the Pilot component—including pilot‑agent and pilot‑discovery—in providing service discovery, traffic management, and integration with Kubernetes for microservice deployments.
This article explains how Istio simplifies microservice management by providing a full service‑mesh solution—including service discovery, load balancing, fault recovery, telemetry, and traffic control—while detailing its architecture, the roles of the data and control planes, and the functions of the Pilot components.
In this interview, Lu Zhi, the technical lead of Ant Financial's SOFA middleware, discusses the evolution from SOFA4 to SOFA5, the strategic importance of Service Mesh and Serverless, the development of the Seata distributed‑transaction framework, and the team’s open‑source governance and community‑building approaches.
