Intel managed distribution of Istio

Intel managed distribution of Istio is a project aiming to showcase and integrate various Intel technologies into Istio and Envoy. The focus is in letting both upstream community and users know what Intel is working on, finding gaps in upstream project features in relation to hardware enablement, and testing and deploying Intel features for Istio service mesh.

Features

• TLS handshake acceleration with AVX512 (CryptoMB)

• TLS handshake acceleration with QAT2.0

• HTTP data compression acceleration with QAT2.0

• Istio mTLS Private Key Protection with SGX

• Istio Gateway Private Key Protection with SGX

• Grafana Dashboard

• Excluding Istio interfaces for 5G core

Supported versions

• Kubernetes v1.24

• Istio v1.16

• cert-manager v1.7 or later

• Linux kernel 5.18 or later

• Intel Device Plugins for Kubernetes v0.24

Install

Use the follwoing command for basic installation:

istioctl install --set hub=docker.io/intel --set tag=1.17.1-intel.1