0 views collected around this technical thread.
The Bilibili live‑streaming team’s S14 tournament support showcases how systematic business‑scenario analysis, precise resource forecasting, accelerated fault‑drill and stress‑test workflows, and optimized tooling can deliver stable, low‑cost performance for massive, high‑concurrency events like the 2024 League of Legends World Championship.
This article shares Soul's two‑year practice of using the cloud‑native Envoy proxy for high‑performance, high‑throughput, and highly available traffic management across north‑south and east‑west flows, covering architecture, dynamic service discovery, load balancing, health checks, WASM extensions, service‑mesh integration, Redis proxying, and future directions.
This article explains the fundamentals of Service Mesh and Istio, covering their architecture, control‑plane and data‑plane components, deployment modes, key capabilities such as traffic control and security, and the interaction workflow that enables modern cloud‑native microservice environments.
The article introduces the concept of an egress gateway, explains why iQIYI’s member‑cooperation services require a unified outbound gateway to handle IP‑whitelisting and external access, critiques the limitations of an Nginx proxy, and describes adopting APISIX with security, traffic‑control plugins and a UI‑driven URL translation layer.
This article explains how Kubernetes manages inbound traffic using Ingress and the newer Gateway API, compares their features and limitations, provides YAML examples for Ingress, GatewayClass, Gateway, and Route resources, and discusses the future direction of traffic management in cloud‑native environments.
The article explains, using a startup scenario, how a single‑server setup leads to performance bottlenecks and single‑point failures, prompting the adoption of load balancing with Nginx and an additional gateway layer for authentication, security, and traffic control, while also containing promotional material for development tools.
This article presents a Kafka‑Proxy solution that enhances cluster availability, traffic governance, seamless cluster switching, near‑source production/consumption, non‑disruptive offset resetting, and message flow control through metadata sharing and a lightweight proxy layer.
This article provides a comprehensive overview of Istio, explaining its role as an open‑source service mesh for cloud‑native microservices, detailing the data plane and control plane components, sidecar proxy functions, traffic management, security, and monitoring while also promoting related learning resources.
This article reviews Kubernetes traffic management, contrasting north‑south and east‑west flows, explains the limitations of Ingress, introduces the newly GA Gateway API, and demonstrates how its role‑based resources and richer expressiveness can become the future standard for cloud‑native networking.
This article explains how microservice traffic can be controlled and routed using Istio’s Service‑Mesh features—covering concepts such as header‑based routing, traffic splitting, canary releases, A/B testing, and traffic shading—along with practical YAML examples and Kubernetes deployment details.
This article explores essential microservice traffic management techniques—including canary releases, A/B testing, and traffic shading—detailing their value, implementation steps, and practical examples using Service Mesh and Istio, with code snippets and diagrams to illustrate routing based on request attributes.
This article details the evolution of 58.com’s deep learning inference platform, describing the transition from the original SCF‑based architecture to a cloud‑native Istio gateway (architecture 2.0), and explains design choices, traffic‑management, adaptive rate‑limiting, observability, model pre‑warming, and performance improvements.
This article shares Ctrip's practical experience in microservice governance, detailing the background, common pitfalls such as excessive service granularity and cyclic dependencies, and presenting concrete goals, principles, and strategies that led to significant improvements in stability, performance, and development efficiency.
This article reviews how Ant Financial’s Service Mesh has matured since its 2019 Double‑11 rollout, detailing the design and implementation of link encryption, adaptive rate limiting, fine‑grained traffic steering, and service self‑healing, and explains the operational value these capabilities bring to large‑scale microservice systems.
KubeGateway, a custom seven‑layer gateway built by ByteDance, eliminates kube‑apiserver load‑imbalance and adds comprehensive request governance—including routing, rate‑limiting, and degradation—by parsing HTTP2 traffic, supporting flexible policies, and transparently proxying requests without client changes.
By registering foreign clusters to the Tencent Distributed Cloud Center and linking them with Cloud Connect Network, the guide shows how to use Tencent Cloud Service Mesh to create a unified ingress gateway, configure DNS and Istio virtual services, and route traffic across multiple accounts and clusters securely.
This tutorial explains the fundamentals of service mesh, outlines Istio's architecture and core components, walks through installing Istio on Kubernetes, demonstrates a sample microservice deployment with traffic‑management, security, and observability features, and discusses when to adopt a service mesh and its alternatives.
This tutorial explains the fundamentals of service mesh, details Istio’s architecture and core components, demonstrates how to install and configure Istio on Kubernetes, and explores common use cases such as traffic management, security, observability, and alternatives.
This tutorial demonstrates how to install Aeraki Mesh, use its MetaRouter CRD to achieve request‑level load balancing, attribute‑based routing, and weighted traffic splitting for Dubbo and Thrift services in an Istio service mesh, including the underlying configuration principles and example commands.
This article introduces NGINX Service Mesh (NSM), a lightweight, highly integrated service‑mesh solution for Kubernetes that leverages NGINX Plus as a data plane, explains its security, traffic‑management, visualization, and hybrid‑deployment capabilities, outlines its architecture and components, and provides step‑by‑step commands for installation, verification, and sidecar injection.