Most popular programs
Trending now
This course is a practical introduction to Istio, designed for anyone who wishes to build on their knowledge of Linux, Docker, and Kubernetes to learn how to install and configure a service mesh and to understand the benefits of deploying and running distributed applications in a service mesh environment. LFS144x is intended for application developers, systems operators, and security professionals who already have familiarity and experience with Kubernetes and who wish to take their first steps towards learning and understanding Istio.
This course begins with an overview of service meshes in general and Istio in particular. We describe what problems service meshes solve, and explain Istio's architecture, how Istio functions, and how the environment around a deployed application is configured to allow the application to join the mesh. Through the course's lessons and labs, you will experience and learn how Istio facilitates system observability by collecting and publishing metrics and allows you to control how traffic is routed to your application. Learn how Istio supports canary deployments and other scenarios and makes your distributed applications more resilient through retries, timeouts, and circuit breakers. The final chapter covers more advanced topics, including onboarding workloads running on VMs (outside of Kubernetes) and how Istio provides for extensibility through WebAssembly plugins.
This course will prepare you for working with Istio as a developer whose applications are deployed to an Istio service mesh or as a service mesh operator with responsibilities for installing, upgrading, and configuring Istio as a security professional responsible for defining ingress, egress, authentication and authorization policies with Istio. You will develop an understanding of the concepts and, through the labs, have the chance to practice common scenarios, including installing Istio, deploying applications to the mesh, monitoring applications, configuring traffic management, including ingress, and applying security policies.
Before starting this course, you should be familiar with:
Basic Linux concepts and command line
Knowledge of Kubernetes fundamentals and Kubernetes CLI - we recommend Introduction to Kubernetes, free on edX
For hands-on lab exercise, access to a Kubernetes cluster is required. Lab exercises in this course have been tested in a GCP environment.
After completing this course, you will gain an understanding of the architecture and components of the Istio service mesh, and be able to do the following:
Install Istio on a Kubernetes cluster
Configure Ingress
Understand how sidecar injection works
Monitor your services using Grafana, Zipkin, and Kiali
Route traffic between multiple service versions
Perform blue-green and canary deployments
Inject failures and use resiliency features
Understand the concept of workload identity and “zero trust” architectures
Control access to your workloads
Extend the Istio mesh functionality using WebAssembly
Welcome to LFS144x!
Chapter 1. Overview of Service Mesh and Istio
Chapter 2. Installing Istio
Chapter 3. Observability
Chapter 4. Traffic Management
Chapter 5. Security
Chapter 6. Extending the Mesh
Chapter 7. Advanced Topics
Chapter 8. Istio Community
Final Exam (Verified Certificate track only)
Who can take this course?
Unfortunately, learners residing in one or more of the following countries or regions will not be able to register for this course: Iran, Cuba and the Crimea region of Ukraine. While edX has sought licenses from the U.S. Office of Foreign Assets Control (OFAC) to offer our courses to learners in these countries and regions, the licenses we have received are not broad enough to allow us to offer this course in all locations. edX truly regrets that U.S. sanctions prevent us from offering all of our courses to everyone, no matter where they live.
Who can take this course?
Unfortunately, learners residing in one or more of the following countries or regions will not be able to register for this course: Iran, Cuba and the Crimea region of Ukraine. While edX has sought licenses from the U.S. Office of Foreign Assets Control (OFAC) to offer our courses to learners in these countries and regions, the licenses we have received are not broad enough to allow us to offer this course in all locations. edX truly regrets that U.S. sanctions prevent us from offering all of our courses to everyone, no matter where they live.