Blogs

Traffic management in ambient mode

Part 4 of our migrations series looks at traffic management, and specifically the shift towards Gateway API for configuring ingress, egress, and inter-service routing. This post details the key differences and migration considerations when moving from legacy Istio APIs to Gateway API, which is a recommended change when moving from sidecar to ambient mode.

Read more →

July 1, 2025

Security and policy when migrating to ambient mesh

In part 3, you will learn about how Istio's security features, particularly mutual TLS, are handled in ambient mesh's two-layer design. Considerations for migration of authorization policies are discussed in light of the fact that policies can now be enforced by either layer.

Read more →

June 18, 2025

Operational differences between sidecar and ambient mode

Part 2 of the sidecar to ambient migration series introduces the Istio CNI and talks about the mental model of Gateway API route and policy attachment.

Read more →

June 11, 2025

Migrating from sidecars to ambient mesh: everything you need to know

In part 1 of a series of articles, Craig Box walks you through the important differences between sidecar and ambient mesh, and what you need to know to upgrade.

Read more →

June 9, 2025