Blogs
Traffic management in ambient mode
Part 4 of our migrations series looks at traffic management, and specifically the shift towards Gateway API for configuring ingress, egress, and inter-service routing. This post details the key differences and migration considerations when moving from legacy Istio APIs to Gateway API, which is a recommended change when moving from sidecar to ambient mode.
July 1, 2025
Security and policy when migrating to ambient mesh
In part 3, you will learn about how Istio's security features, particularly mutual TLS, are handled in ambient mesh's two-layer design. Considerations for migration of authorization policies are discussed in light of the fact that policies can now be enforced by either layer.
June 18, 2025
Operational differences between sidecar and ambient mode
Part 2 of the sidecar to ambient migration series introduces the Istio CNI and talks about the mental model of Gateway API route and policy attachment.
June 11, 2025
Migrating from sidecars to ambient mesh: everything you need to know
In part 1 of a series of articles, Craig Box walks you through the important differences between sidecar and ambient mesh, and what you need to know to upgrade.
June 9, 2025