Author: Subhro

Modern applications are increasingly exposed over HTTPS to ensure secure communication between users and backend services. When deploying applications in Kubernetes using Istio Ingress Gateway, handling HTTPS requires a clear understanding of how certificates are configured, where they are stored, and how traffic flows through the system.

In this article, we will walk through the end-to-end flow of HTTPS traffic with Istio Ingress Gateway running on Azure Kubernetes Service (AKS), including how certificates are managed, how Azure Key Vault can be integrated, and how to ensure seamless certificate rotation without downtime.

Continue reading “HTTPS Traffic Handling in AKS with Istio Ingress Gateway”

When working with Kubernetes, one of the first things developers and platform engineers need is a way to expose applications running inside the cluster to the external world. Kubernetes provides a native solution called Ingress, but when using Istio service mesh, the recommended approach is to use the Istio Ingress Gateway.

Let’s take a deep dive and understand what Istio Ingress Gateway is, why it is preferred over native Kubernetes Ingress, and how it works with components like VirtualService and DestinationRule to route and control traffic in a secure and observable manner.

Continue reading “Istio Ingress Gateway : Comprehensive Guide”

Introduction to Service Mesh

Imagine you’re developing a microservices-based e-commerce application running on Azure Kubernetes Service (AKS). Your frontend, product catalog, payment service, and user authentication all need to communicate seamlessly. But soon, challenges emerge:

• • • Security: How do you ensure all internal traffic is encrypted?
    • Observability: Why is the checkout service slow? Where are requests failing?
    • Traffic Control: How can you roll out updates without downtime?

This is where Service Mesh comes in.

Continue reading “Istio Service Mesh for Kubernetes (AKS)”