Blog

Read articles from contributors and users on all things Istio.

Retirement of Kubernetes integration jobs for unsupported Kubernetes versions

Istio's continuous integration will no longer run integration tests against unsupported Kubernetes versions.

Istio Project Announces 2026 Technical Oversight Committee Election Results

Announcing the results of our annual election.

ACTION REQUIRED FOR GOOGLE CONTAINER REGISTRY USERS, scream tests, and our move to AWS

What you can do with your Helm charts and signing keys to ensure you are not impacted by the migration to AWS.

An Update on Our Container Registry Migration

What you can do today to ensure your clusters are not impacted by the retirement of `gcr.io/istio-release` and `registry.istio.io`.

Hardening Kubernetes Security with Istio Ambient Mode on Flat Networks

How to use Istio Ambient mode to secure your flat on-prem network.

Introducing the TrafficExtension API

A new unified API for extending Envoy proxies in Istio with WebAssembly and Lua, supporting both sidecar and ambient mode.

Simplifying Egress Routing to Wildcard Destinations

Istio now supports wildcard ServiceEntry with DYNAMIC_DNS resolution, allowing sidecars to route traffic directly to wildcard HTTPS destinations while simplifying egress configuration.

Istio Project Announces 2026 Steering Committee

Announcing the results of our Community Seat election and our Contribution Seat holders.

Istio is Migrating Container Registries

What you can do today to ensure your clusters are not impacted by the retirement of `gcr.io/istio-release`.

Security Considerations on Istio's CRDs with Namespace-based Multi-Tenancy

Addressing man-in-the-middle weaknesses in namespace-based multi-tenant setups.

Istio at KubeCon Europe 2026: Let’s Connect in Amsterdam!

Celebrate Istio at KubeCon + CloudNativeCon Europe 2026.

Ambient multi-network multicluster support is now Beta

Istio 1.29 arrives with ambient multi-network multicluster in Beta, with improvements in telemetry, connectivity and reliability.

Announcing Istio's 2026 Steering Committee Elections

With Contribution Seats allocated, members are now invited to stand for election to our four Community Seats.

Istio at KubeCon + CloudNativeCon North America 2025: A Week of Momentum, Community, and Milestones

Highlights from Istio Day and KubeCon North America 2025 in Atlanta.

Istio at KubeCon North America 2025: Let’s Connect in Atlanta!

Celebrate Istio at KubeCon + CloudNativeCon North America 2025.

Istio Project Announces 2025 Technical Oversight Committee Election Results

Announcing the results of our annual election.

Introducing multicluster support for ambient mode (alpha)

Istio 1.27 adds alpha ambient multicluster support, extending ambient's familiar lightweight, modular architecture to deliver secure connectivity, discovery and load balancing across clusters.

Bringing AI-Aware Traffic Management to Istio: Gateway API Inference Extension Support

A smarter, dynamic way to optimize AI traffic routing based on real-time metrics and the unique characteristics of inference workloads.

Istio Roadmap for 2025-2026

Looking ahead to what's next for Istio.

Istio at KubeCon Europe 2025

A quick recap of Istio at KubeCon Europe, at Excel London.

Istio publishes results of ztunnel security audit

Passes with flying colors.

Sail Operator 1.0.0 released: manage Istio with an operator

Dive in into the basics of the Sail Operator and check out an example to see how easy it is to use it to manage Istio.

Istio at KubeCon Europe, See you soon in London!

Celebrate Istio at KubeCon + CloudNativeCon Europe 2025.

Istio: The Highest-Performance Solution for Network Security

Ambient mode provides more encrypted throughput than any other project in the Kubernetes ecosystem.

Istio Project Announces 2025 Steering Committee

Announcing the results of our Community Seat election and our Contribution Seat holders.

Announcing Istio's 2025 Steering Committee Elections

With Contribution Seats allocated, members are now invited to stand for election to our four Community Seats.

Policy based authorization using Kyverno

Delegate Layer 7 authorization decision logic using Kyverno's Authz Server, leveraging policies based on CEL.

A new Phippy and Friends story: Izzy Saves the Birthday

The first illustrated children's book about Istio is now available.

Fast, Secure, and Simple: Istio’s Ambient Mode Reaches General Availability in v1.24

Our latest release signals ambient mode – service mesh without sidecars – is ready for everyone.

Istio in Salt Lake City!

Celebrate Istio at KubeCon + CloudNativeCon North America 2024.

Scaling in the Clouds: Istio Ambient vs. Cilium

A Deep Dive into Performance at Scale.

More community leadership: Regularly electing the Istio Technical Oversight Committee

Announcing changes to our TOC charter and our first open election.

Can Your Platform Do Policy? Accelerate Teams With Platform L7 Policy Functionality

Is policy your core competency? Likely not, but you need to do right. Do it once with Istio and OPA and get back team focus on what matters most.

External post: The Istio Service Mesh for People Who Have Stuff to Do

Read about Luca Cavallin's experience getting started with Istio.

Introducing the Sail Operator: a new way to manage Istio

Introducing the Sail Operator to manage Istio, a project part of the istio-ecosystem organization.

Istio has deprecated its In-Cluster Operator

What you need to know if you are running the Operator controller in your cluster.

Happy 7th Birthday, Istio!

Celebrating Istio’s momentum and exciting future.

Say goodbye to your sidecars: Istio's ambient mode reaches Beta in v1.22

Layer 4 & Layer 7 features are both now ready for production.

Introducing Istio v1 APIs

Reflecting the stability of Istio's features, our networking, security and telemetry APIs are promoted to v1 in 1.22.

Gateway API Mesh Support Promoted To Stable

The next-generation Kubernetes traffic routing APIs are now Generally Available for service mesh use cases.

Istio joins Phippy and friends — Welcome Izzy!

Announcing the latest member of the CNCF family of mascots.

Istio's Steering Committee for 2024

Announcing the newest members and a proposed change to election timing.

Maturing Istio Ambient: Compatibility Across Various Kubernetes Providers and CNIs

An innovative traffic redirection mechanism between workload pods and ztunnel.

Istio in Paris! See you at KubeCon Europe 2024

Amazing lineup of Istio activities at KubeCon + CloudNativeCon.

Routing egress traffic to wildcard destinations

A generic approach to set up egress gateways that can route traffic to a restricted set of target remote hosts dynamically, including wildcard domains.

Istio at KubeCon North America 2023

A quick recap of Istio at KubeCon North America, at the McCormick Place in Chicago.

Secure Application Communications with Mutual TLS and Istio

Dive into securing application communications, mTLS and Istio to achieve end-to-end mTLS among your applications.

IstioCon China 2023 wrap-up

A quick recap of Istio at KubeCon + CloudNativeCon + Open Source Summit China in Shanghai.

Deep Dive into the Network Traffic Path of the Coexistence of Ambient and Sidecar

Deep Dive into the Traffic Path of the Coexistence of Ambient and Sidecar.

Istio Announces Winners of 2023 Steering Committee Election

Announcing the newest Istio Steering Committee members.

Kubernetes Native Sidecars in Istio

Demoing the new SidecarContainers feature with Istio.

Using Accelerated Offload Connection Load Balancing in Istio

Accelerate connection balancing using DLB connection balancing configuration in Istio gateways.

Announcing Istio's graduation within the CNCF

Istio Day North America 2023, Twice The Fun!

The call for session proposals is now open.

Istio at KubeCon Europe 2023

A quick recap of Istio at KubeCon Europe, at the RAI in Amsterdam.

Comprehensive Network Security at Splunk

Security from Layer 3 to Layer 7 with Istio and more.

Istio Ambient Waypoint Proxy Made Simple

Introducing the new destination oriented waypoint proxy for simplicity and scalability.

Using eBPF for traffic redirection in Istio ambient mode

An alternative approach to redirecting application pod traffic to the per-node ztunnel.

Support for Dual Stack Kubernetes Clusters

Experimental support for Dual Stack Kubernetes Clusters.

Istio Ambient Service Mesh Merged to Istio’s Main Branch

A significant milestone for ambient mesh.

Introducing Rust-Based Ztunnel for Istio Ambient Service Mesh

A purpose-built per-node proxy for Istio ambient mesh.

Announcing the Contribution Seat holders for 2023

The Istio Steering Committee welcomes contributors from Google, IBM, Huawei and Red Hat.

Istio publishes results of 2022 security audit