This article summarizes a Kubernetes & Cloud Native meetup talk that reviews recent Service Mesh product releases, analyzes six emerging trends, explains the core value of separating business and non‑business logic, and highlights the technology's future direction within cloud‑native architectures.
The article introduces Apache Dubbo, a high‑performance Java RPC framework, outlines its history, current features, multi‑language ecosystem, recent releases, and future plans such as cloud‑native integration, service‑mesh support, reactive programming, and the roadmap toward Dubbo 3.0.
This article details how the KUN platform enhances Istio’s Service Mesh by extending EnvoyFilter with namespace-level isolation, custom traffic management strategies, fault injection examples, and validation mechanisms, illustrating code implementations and architectural insights for robust, scalable microservice networking.
This article explains the fundamentals of service mesh, details Istio's architecture and components, demonstrates traffic management, security, and telemetry features with practical examples, and presents performance testing results and Go client code for managing Istio CRDs in a Kubernetes environment.
The article recaps a Shanghai UCan afternoon tea tech salon where six seasoned experts shared practical Kubernetes and cloud‑native experiences, covering UCloud’s UK8S platform, network and storage integrations, tenant isolation, deployment automation, real‑world case studies from healthcare, workflow engines, service mesh, and small‑team adoption strategies.
Since 2017, Youzan transformed its monolithic Nginx‑PHP stack into a language‑agnostic service mesh by introducing Dubbo, the ZanPHP RPC framework, a custom NOVA protocol, and the Go‑based Tether sidecar that offloads discovery, load‑balancing and monitoring, later adding a Service Pretender for cross‑region traffic, and now migrates discovery to Istio Pilot on Kubernetes for seamless, containerized microservice orchestration.
This article explains Istio's security features, focusing on mutual TLS configuration at global, namespace, and service levels, demonstrates practical YAML examples, shows how sidecar presence affects traffic, and discusses TLS mode choices, certificate handling, and real‑world deployment considerations.
This article examines the evolution of Java microservices at Huajiao, compares existing PHP and Java solutions, justifies the adoption of Spring Boot 2 with MyBatis and Undertow, outlines incremental improvements such as CI/CD migration and service mesh adoption, and presents a roadmap for future microservice components.
This article examines the challenges of a PHP‑based microservice stack, compares open‑source Java solutions, explains the rationale for adopting Spring Boot 2 with MyBatis and Undertow, and outlines a roadmap toward CI/CD automation, service discovery, and Service Mesh adoption.
The article explains how microservice architectures introduce complexity, how Netflix OSS tools address these challenges, and why adopting the Sidecar design pattern with Istio’s service mesh can improve scalability, resilience, and observability in cloud‑native systems.
This roundup covers Gartner’s eight predicted cloud‑native infrastructure trends, a five‑year reflection on Kubernetes, recent upstream Kubernetes changes, and highlights two open‑source tools—ksniff for pod traffic capture and Flagger for service‑mesh‑based canary releases—providing developers with actionable insights into the evolving cloud‑native ecosystem.
Implementing a service mesh in production faces real‑world hurdles such as significant CPU consumption, 20‑50% performance loss, tangled sidecar responsibilities, missing registration support, and control‑plane bottlenecks, which can be mitigated by a central‑mesh fallback, IPC and lock‑free optimizations, staged sidecar splitting, and unified Pilot‑based service discovery.
This article analyzes Youzan Cloud's architecture for supporting multi‑language customizations, detailing the distinction between small and large SaaS customers, the role of tool, self‑use, and industry apps, and the service‑mesh‑based RPC framework that abstracts protocols, monitoring, and logging across Java, PHP, Python, and Node.js.
This article provides a detailed analysis of Envoy’s filter architecture within Istio 1.1, explaining the async event model, each filter type, their registration interfaces, and the key processing steps from listener selection to load‑balancing and Mixer integration.
This week’s roundup covers two high‑severity Docker CVEs (CVE‑2019‑5021 privilege escalation in Alpine images and CVE‑2018‑15664 TOCTOU flaw in docker cp), Kubernetes moving to Go modules, new Envoy request‑mirror and route‑debug features, Knative’s stateful‑serverless experiment, Istio 1.0 EOL, Cilium’s BPF‑based network policy, and emerging Service Mesh trends, all with reference links for deeper reading.
This article introduces Istio as an open‑source service mesh, explains its data‑plane and control‑plane architecture, outlines its traffic management, security, and telemetry features, discusses performance considerations, and shows how Lingque Cloud ASM leverages Istio to solve typical microservice problems such as debugging, testing, release processes, and flexible network policies.
The article introduces Service Mesh Interface (SMI), a lightweight standard for Kubernetes service meshes, explains its design goals, details the core API objects for traffic specification, access control, traffic splitting, and monitoring, and reviews the ecosystem of vendors and contributors supporting the specification.
This article explains Kubernetes' origins, its pivotal role in the cloud‑native ecosystem, practical steps for migrating legacy applications, common operational challenges, and emerging trends such as service mesh, serverless, and data‑service integration.
This article introduces the fundamentals of Istio as a service mesh, explains its data‑plane and control‑plane architecture, and details the roles of the Pilot component—including pilot‑agent and pilot‑discovery—in providing service discovery, traffic management, and integration with Kubernetes for microservice deployments.
This article explains how Istio simplifies microservice management by providing a full service‑mesh solution—including service discovery, load balancing, fault recovery, telemetry, and traffic control—while detailing its architecture, the roles of the data and control planes, and the functions of the Pilot components.
In this interview, Lu Zhi, the technical lead of Ant Financial's SOFA middleware, discusses the evolution from SOFA4 to SOFA5, the strategic importance of Service Mesh and Serverless, the development of the Seata distributed‑transaction framework, and the team’s open‑source governance and community‑building approaches.
Dubbo 3.0 preview introduces a fully asynchronous Filter chain, native Reactive Streams support via RSocket, early Service‑Mesh integration, and tighter fusion with Alibaba’s internal systems, offering developers a modern, high‑throughput Java RPC framework for cloud‑native applications.
The Shanghai Go technology salon brought together senior architects from QuTouTiao, Qiniu, and Bilibili to share real‑world implementations of Service Mesh, full‑link tracing, and microservice governance using Go, highlighting practical challenges, solutions, and future directions.
The Shanghai Go Language Tech Salon, co‑hosted by Qutoutiao and Jikebang, gathered senior architects from Qutoutiao, Qiniu, and Bilibili to share real‑world implementations of Go, covering a self‑built Service Mesh, full‑link tracing, and microservice governance, followed by an interactive Lean Coffee discussion on Go’s future.
Looking ahead to 2019, the article forecasts that Kubernetes will mature and accelerate adoption, service meshes like Istio and Envoy will dominate multicloud networking, containerized micro‑service marketplaces will expand, SaaS providers will deepen enterprise app portfolios, and hybrid‑cloud and edge computing will grow, driven by cloud‑native architectures.
This article recounts the author’s year‑long experience transforming Sharding‑JDBC into the ShardingSphere ecosystem, detailing technical challenges, community building, Apache Incubator admission, and the project’s evolution into a financial‑grade distributed database solution.
This article examines the rising hype around Service Mesh, explains the three core service‑discovery patterns, compares their trade‑offs, details how Service Mesh (the sidecar model) works with Istio, and offers practical advice on when (or when not) to adopt it in production environments.
This article explains what a Service Mesh is, how FangDuoduo adopted Envoy and macvlan/overlay networks to solve Dubbo IP registration issues, built an XDS configuration service for both containers and VMs, and dramatically improved development efficiency and infrastructure agility.
This article traces the historical shift from program‑centric sockets to service‑oriented architectures, explaining how performance, stability, and access control drove the rise of load balancing, DNS, service governance, micro‑services, and ultimately cloud‑native service‑mesh solutions like Istio.
This page curates a collection of high‑quality technical articles and tutorials for developers working within the Vivo Mobile Internet ecosystem, covering Elasticsearch performance and search tuning, Jenkins CI/CD pipelines, Kubernetes scheduling and TensorFlow, service‑mesh resources, SparkSQL big‑data optimizations, Java concurrency, Quick‑App development, and Spring Cloud microservice frameworks.
This article details Ant Financial's progressive Service Mesh migration plan, explaining the challenges of moving massive legacy applications to Kubernetes and Istio, the evaluated evolution routes, key migration practices like network continuity and DNS-based addressing, and the implementation of custom CoreDNS plugins for dynamic DNS updates.
The article surveys thirty‑nine essential open‑source tools for constructing microservices—from API management, messaging, and monitoring to Kubernetes orchestration, programming languages, frameworks, and serverless platforms—highlighting how each solution supports communication, scalability, and rapid development across enterprise, government, education, and charitable applications.
The BEP Gateway architecture for YouZan’s e‑commerce cloud bridges the core domain’s Dubbo‑based service governance with the customized domain’s Kubernetes/Istio mesh by using sidecar proxies, converting Dubbo RPC to HTTP/2, providing network isolation, a generic provider, SDK authorization, and plans for multi‑language support and enhanced gateway features.
Medium transitioned from a monolithic Node.js app to a microservice architecture by adhering to three core principles—single purpose, loose coupling, and high cohesion—and implementing strategies such as dedicated services, avoiding shared storage, using Service Mesh, gRPC, Kubernetes, and comprehensive monitoring.
This article introduces Istio as a cloud‑native service mesh, explains its core components, features such as traffic management, security, and observability, and provides step‑by‑step commands to quickly deploy Istio on an Alibaba Cloud Kubernetes cluster.
This article presents a DNS‑based universal addressing solution that enables traditional SOA applications using interfaces such as Dubbo, HSF, and SOFA to run on a Service Mesh without code changes, by mapping interface names to Kubernetes ClusterIP through CoreDNS and leveraging Istio’s routing mechanisms.
The article reviews the evolution of Service Mesh and Dubbo, compares sidecar and SDK deployment models, discusses key technical challenges such as multi‑language support, performance, and operations, and explains how Dubbo integrates with Kubernetes to enable cloud‑native micro‑service architectures.
This article explains why UCloud introduced a Service Mesh, how Istio was chosen and adapted for the UAEK Kubernetes platform—including IPv6 challenges, performance testing, and future improvements—providing practical insights for building reliable micro‑service infrastructures.
This article outlines the progressive evolution of large-scale internet architectures, detailing the transition from simple monolithic designs through clustering, caching, read/write separation, static/dynamic separation, high‑availability clusters, distributed systems, SOA, microservices, and finally service mesh, highlighting their principles, benefits, and challenges.
This article provides a comprehensive technical overview of Ant Financial’s Service Mesh data‑plane SOFAMosn, covering its architectural background, layered design, core modules, performance optimizations, supported protocols, and future roadmap within a cloud‑native microservices ecosystem.
Istio 1.0, released on August 1, brings the first production‑ready service‑mesh platform with major enhancements in networking, policy & telemetry, out‑of‑process adapters, and security features such as mTLS and JWT, while introducing the IstioGateway to replace the legacy Ingress model.
In a detailed Q&A session at ArchSummit 2018, Ant Financial and Alibaba UC experts discuss the fundamentals, challenges, implementation strategies, and future directions of Service Mesh and Kubernetes, covering performance, multi‑language support, open‑source efforts, and practical advice for developers and operators.
This article walks through upgrading Consul to 1.2, configuring service‑mesh support, building two Go micro‑services, registering them with Consul, reloading the configuration, testing the mesh with curl, and provides a detailed analysis of Consul’s service‑mesh architecture, advantages, and limitations.
This article records and translates the first Service Mesher community meetup where Ant Financial’s Service Mesh evangelist Ao Xiaojian presented the exploration of Service Mesh for large‑scale microservice architectures, covering technical selection, architecture design, open‑source strategy, and community resources.
This article explores the evolution and core concepts of modern distributed architectures—including SOA, microservices, and service mesh—explains key theories such as CAP and BASE, and provides practical guidelines for achieving high availability, scalability, and efficient content delivery through techniques like load balancing, CDN, and gray‑release strategies.
This article describes Ant Financial's decade‑long service‑oriented architecture evolution, the challenges of multi‑language and legacy systems, the evaluation of Istio, Linkerd and Conduit, and the design and deployment of the internally built SOFA Mesh using a Golang sidecar and EdgeSidecar to achieve cloud‑native, high‑availability service mesh capabilities.
Ant Group engineers Yang Bing and Huang Ting discuss the evolution of their SOFA middleware platform—from early service‑oriented architecture to a full‑stack DevOps ecosystem—highlighting microservice governance, Service Mesh integration with Kubernetes/Istio, open‑source strategies, and the cultural emphasis on reliable, commercially‑savvy engineering talent.
In this interview, Ant Financial’s middleware leaders Yang Bing and Huang Ting discuss the evolution of the SOFA framework, the adoption of Service Mesh, open‑source strategies, cloud‑native transformation, and practical advice for engineers navigating large‑scale financial technology platforms.
Alibaba’s fourth middleware performance challenge invites developers to create a high‑performance Service Mesh Agent for Dubbo, leveraging Docker containers, etcd registration, load balancing, protocol translation, and offering optimization tips such as coroutines, async communication, and caching to achieve superior QPS scores.
An extensive overview of JD.com's microservice component platform explains its underlying architecture, communication technologies, service mesh (ContainerMesh), design tools based on DDD, service evaluation, migration challenges, and the platform's evolution toward a cloud‑native, self‑evolving ecosystem supporting distributed tracing, API gateways, and plugin‑based development.
The article details Alibaba's fourth Middleware Performance Challenge, explaining the Dubbo‑based Service Mesh problem, the Docker‑driven test scenario, scoring methodology, and optimization suggestions such as coroutines, async communication, and caching, offering participants a comprehensive guide to excel in the competition.
This article explains why microservice architectures need reliable communication, load balancing, fault tolerance, monitoring, tracing and circuit breaking, and shows how Istio—a cloud‑native service mesh built on Envoy—provides these capabilities, enabling blue‑green and canary deployments, traffic routing, retries, and observability within Kubernetes.
UCloud’s CTO emphasizes stable services while embracing change, leading to a lightweight Service Mesh solution that replaces costly API gateways with Istio‑derived components, enabling efficient gray releases, reduced maintenance, and seamless integration with existing services through Docker‑compose sidecars and ETCD‑based discovery.
The JD Microservice Component Platform is a comprehensive ecosystem that integrates core infrastructure, ecosystem toolchains, and foundational data services to provide communication, service discovery, flow control, security, and collaborative tools for internal and external developers, product managers, and decision makers.
This article explains microservice fundamentals, compares RPC/gRPC/HTTP/REST communication, evaluates Dubbo and Spring Cloud frameworks—including their architectures, features, advantages, and drawbacks—and discusses related technologies such as ZooKeeper, Eureka, and Service Mesh to help developers choose the right solution.
This article examines the limitations of traditional microservice frameworks, introduces service mesh as a solution with sidecar architecture, outlines its definition, evolution stages, and timeline, and concludes with resources for further learning and practical implementation.
This article reviews the challenges of early microservice frameworks—high technical barriers, limited multi‑language support, and intrusive code—and explains how service mesh architectures with sidecar proxies, exemplified by Linkerd, Envoy, and Istio, provide a dedicated, language‑agnostic infrastructure layer that simplifies service governance and operations.
This article introduces the concept of Service Mesh, highlights Istio as a leading solution, explains the Sidecar pattern—its isolation benefits, typical implementations such as NGINX reverse proxies, and discusses when to adopt this architecture in cloud-native environments.
With large organizations moving to self‑organized microservice teams, this article explains how service mesh and microgateway technologies provide decentralized, consistent service‑to‑service communication, detailing gateway functions, data‑plane and control‑plane roles, and the evolution of low‑invasive components, reverse proxies, sidecar patterns, and native infrastructure such as Istio.
The article outlines the challenges faced by JD’s Java Service Framework (JSF) amid rapid microservice growth and containerization, and presents a comprehensive, multi‑layer redesign—including infrastructure, service framework, system extension, and application layers—to transform JSF into a cloud‑native microservice platform.
This article outlines three increasingly complex Envoy deployment patterns for service‑mesh environments—service‑to‑service, service with a front‑proxy, and service‑to‑service with front‑proxy and double‑proxy—detailing listener configurations, external service handling, discovery integration, and provided configuration templates.
Envoy is a cloud‑native L7 proxy and communication bus designed for modern service‑oriented architectures, offering out‑of‑process deployment, language‑agnostic operation, modern C++11 implementation, extensive L3/L4 and HTTP L7 filtering, HTTP/2, gRPC, database protocol support, service discovery, health checking, advanced load balancing, edge proxy capabilities, observability, and dynamic configuration.
The 2017 KubeCon+CloudNativeCon in Austin showcased over 4,000 attendees, highlighted Kubernetes as the "Linux of the cloud," explored multi‑cloud strategies, service mesh adoption, storage challenges on Kubernetes, and underscored China's growing influence in the cloud‑native ecosystem.
Istio, an open-source service mesh created by IBM, Google, and Lyft, offers a uniform platform for integrating microservices, managing traffic, enforcing policies, and collecting telemetry, with a control plane that abstracts underlying cluster platforms like Kubernetes, illustrated through developer presentations and slide decks.
