Service Mesh — Animate | AI Wisdom

← Back to topic
🎞 ANIMATE · Mode 3 of 5 · +100 XP— Service Mesh (Istio)
📋Sidecar
⚙️Traffic Split
🔄Canary
✅Resilience
🎯 Next: Test →
Step 1 / 4
Speed
Sidecar Proxy
Istio injects an Envoy sidecar proxy into every pod — no app code changes💡 Analogy
Like equipping every delivery truck with GPS and radio — without modifying what's in the truck.
Istio adds an Envoy proxy container (sidecar) to every pod automatically. All traffic flows through the proxy — enabling mTLS, observability, and traffic control without touching app code.
Console Output
> Pod created: product-service
> Istio MutatingWebhook: injecting envoy sidecar
> Pod containers: [product-service, istio-proxy]
> All traffic: flows through envoy
●istio-config.yaml
Sidecar ProxyL1–8
1# Istio service mesh configuration
2# VirtualService: traffic routing rules
3apiVersion: networking.istio.io/v1
4kind: VirtualService
5metadata:
6  name: product-service
7spec:
8  hosts:
9    - product-service
10  http:
11    - match:
12        - headers:
13            x-canary: { exact: "true" }  # canary header routing
14      route:
15        - destination:
16            host: product-service
17            subset: v2
18    - route:
19        - destination:
20            host: product-service
21            subset: v1           # stable version
22          weight: 90
23        - destination:
24            host: product-service
25            subset: v2
26          weight: 10             # 10% traffic to v2
27 
28---
29# DestinationRule: define subsets and load balancing
30apiVersion: networking.istio.io/v1
31kind: DestinationRule
32metadata:
33  name: product-service
34spec:
35  host: product-service
36  trafficPolicy:
37    connectionPool:
38      http: { http2MaxRequests: 1000 }
39    outlierDetection:
40      consecutive5xxErrors: 5
41      interval: 30s
42      baseEjectionTime: 30s      # eject unhealthy pods 30s
43  subsets:
44    - name: v1
45      labels: { version: "1.0" }
46    - name: v2
47      labels: { version: "2.0" }
47 lines
Timeline — 4 Steps
Sidecar Proxy
Istio injects an Envoy sidecar proxy into every pod — no app code changes💡 Analogy
Like equipping every delivery truck with GPS and radio — without modifying what's in the truck.
Istio adds an Envoy proxy container (sidecar) to every pod automatically. All traffic flows through the proxy — enabling mTLS, observability, and traffic control without touching app code.
Console Output
> Pod created: product-service
> Istio MutatingWebhook: injecting envoy sidecar
> Pod containers: [product-service, istio-proxy]
> All traffic: flows through envoy

Was this page helpful?

Discussion

Istio injects an Envoy sidecar proxy into every pod — no app code changes

💡 Analogy

Like equipping every delivery truck with GPS and radio — without modifying what's in the truck.

Istio adds an Envoy proxy container (sidecar) to every pod automatically. All traffic flows through the proxy — enabling mTLS, observability, and traffic control without touching app code.

Console Output

> Pod created: product-service
> Istio MutatingWebhook: injecting envoy sidecar
> Pod containers: [product-service, istio-proxy]
> All traffic: flows through envoy

Istio injects an Envoy sidecar proxy into every pod — no app code changes

💡 Analogy

Like equipping every delivery truck with GPS and radio — without modifying what's in the truck.

Istio adds an Envoy proxy container (sidecar) to every pod automatically. All traffic flows through the proxy — enabling mTLS, observability, and traffic control without touching app code.

Console Output

> Pod created: product-service
> Istio MutatingWebhook: injecting envoy sidecar
> Pod containers: [product-service, istio-proxy]
> All traffic: flows through envoy