• Ambient mode delivers unmatched encrypted throughput in Kubernetes, surpassing competitors. • Zero‑trust security is built on baseline encryption, balancing complexity and performance. • Istio’s ambient mode separates service mesh and security layers, enabling feature‑rich, uncompromised protection. • Benchmarking with iperf shows Istio 1.26 outperforms Linkerd, Cilium, and WireGuard by a wide margin. • The ztunnel data plane drives performance, achieving 75% improvement across four releases. • Ambient mode supports all Kubernetes networking modes, ensuring seamless integration and zero‑trust readiness.

Article Summaries:

  • Istio has released Ambient Mode, a user‑space data plane (ztunnel) that delivers the highest encrypted throughput in Kubernetes. Benchmarking with iperf shows Istio 1.26 outperforms competitors such as Linkerd, Cilium, Calico, and Kindnet, with ztunnel’s performance improving 75 % over four releases. The tests, run on 16‑core Linux machines, compare default settings across several network security implementations, including WireGuard and IPsec. Results indicate that user‑space solutions can surpass kernel‑based approaches, underscoring Istio’s focus on zero‑trust security without sacrificing performance.

Sources: