KubeCon + CloudNativeCon India 2024

Cloud Load Balancers (CLBs) have evolved significantly, now featuring advanced capabilities such as proxying, SSL/TLS termination, and auto-scaling. The underlying data-path technologies have advanced from traditional Linux networking to include eBPF, DPDK, VPP, and P4. Each of these technologies offers unique advantages and trade-offs: eBPF excels in real-time processing but lacks some comprehensive features, DPDK provides high performance with reduced transparency, VPP offers modular packet handling with strong Linux compatibility, and P4-based solutions, while still evolving, promise enhanced flexibility and performance. This session will delve into these data-path technologies, examining their maturity, limitations, and suitability for modern data centers. As specialized hardware units become increasingly integral to large data centers, we will highlight how these units effectively leverage data-path technologies to perform numerous tasks, thereby enhancing overall efficiency.

As EarnIn, one of the leading fintech companies, rapidly scaled in the number of microservices and user base, we recognized the need to ensure our network layer could keep pace with our scale. Initially relying on an enterprise service mesh that eventually became a bottleneck for our applications as well as our operators, we explored all the available service mesh out in the market, ultimately choosing Linkerd. This talk will delve into our decision-making process, focusing on why we chose LinkerD and how it has transformed our network and application architectures. We'll cover the crucial aspects of Linkerd that enhanced our system's performance, robustness, and security, all while simplifying operations and ensuring reliabilityᅳensuring our operators can rest easy. Join us to learn how LinkerD can elevate your service mesh strategy to meet the demands of substantial growth while keeping your architecture simple.

This talk will explain new options for proxyless service mesh to enable secure authentication with serverless-based backends. Vanity URLs and reverse proxies have historically posed an issue for proxyless service mesh, making it difficult to use them, and the speaker will talk about upcoming new features in gRPC that make this possible, while also ensuring robust security and preventing misrouted traffic. The audience will discover how proxyless service meshes secure authentication with serverless backends, opening up new possibilities for modern architectures. The audience will also come to know how the client can intelligently determine the control plane's support for these new features, enhancing adaptability and streamlining deployment.