Skip to content

Commit 53e8432

Browse files
committed
some more changes
1 parent 13700ed commit 53e8432

File tree

1 file changed

+10
-9
lines changed
  • content/en/blog/2025/ambient-multicluster

1 file changed

+10
-9
lines changed

content/en/blog/2025/ambient-multicluster/index.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Introducing multicluster support for ambient mode
3-
description: Introducing multicluster support for ambient mode.
2+
title: Introducing Alpha Support for Ambient Multicluster.
3+
description: Introducing Alpha Support for Ambient Multicluster.
44
date: 2025-08-04
55
attribution: Jackie Maertens (Microsoft), Keith Mattix (Microsoft), Mikhail Krinkin (Microsoft), Steven Jin (Microsoft)
66
keywords: [ambient,multicluster]
@@ -21,20 +21,21 @@ IP address spaces of different clusters might overlap,
2121
and even without overlap, the underlying infrastructure would need configuration to route cross-cluster traffic.
2222

2323
Cross-cluster connectivity also presents security challenges.
24-
Pod-to-pod traffic will leave cluster boundaries and pods need to accept connections from outside the cluster.
25-
Without strong controls, an attacker could exploit a vulnerable pod, or intercept unencrypted traffic.
24+
Pod-to-pod traffic will traverse cluster boundaries and pods will accept connections from outside the cluster.
25+
Without identity verification at the edge of the cluster and strong encryption,
26+
an outside attacker could exploit a vulnerable pod or intercept unencrypted traffic.
2627

2728
A multicluster solution must securely connect clusters and do so
2829
through simple, declarative APIs that keep pace with dynamic environments.
2930

30-
## Key components
31+
## Key Components
3132

3233
Ambient multicluster extends ambient with new components and minimal APIs to
3334
securely connect clusters using ambient's lightweight, modular architecture.
3435
It builds on the namespace sameness model -- a service in namespace `foo` in one cluster is treated as the same logical service as `foo` in another --
3536
so services keep their existing DNS names across clusters, allowing you to control cross-cluster communication without changing application code.
3637

37-
### East-west gateways
38+
### East-West Gateways
3839

3940
Each cluster has an east-west gateway with a globally routable IP acting as an entry point for cross-cluster communication.
4041
A ztunnel connects to the remote cluster's east-west gateway, identifying the destination service by its namespaced name.
@@ -53,7 +54,7 @@ At the same time, the HBONE layers allow ztunnel to effectively reuse cross-clus
5354

5455
{{< image link="./mc-ambient-traffic-flow.png" caption="Istio ambient multicluster traffic flow" >}}
5556

56-
### Service discovery and scope
57+
### Service Discovery and Scope
5758

5859
Marking a service global enables cross-cluster communication.
5960
Istiod configures east-west gateways to accept and route global service traffic to local pods and
@@ -80,7 +81,7 @@ By default, ztunnel load balances traffic uniformly across all endpoints --even
8081
but is configurable through the service's `trafficDistribution` field to only cross cluster boundaries when there are no local endpoints.
8182
Thus, users have control over whether and when traffic crosses cluster boundaries with no changes to application code.
8283

83-
## Limitations and roadmap
84+
## Limitations and Roadmap
8485

8586
Although the current implementation of ambient multicluster has the foundational features for a multicluster solution,
8687
there is still a lot of work to be done.
@@ -96,4 +97,4 @@ We are also looking to improve our reference documentation, guides, testing, and
9697

9798
If you would like to try out ambient multicluster, please follow [this guide](TODO).
9899
Remember, this feature is in alpha status and not ready for production use.
99-
We welcome your bug reports, thoughts, comments, and use cases -- you can reach us on [Github](https://github.com/istio/istio) or [Slack](https://istio.slack.com/).
100+
We welcome your bug reports, thoughts, comments, and use cases -- you can reach us on [GitHub](https://github.com/istio/istio) or [Slack](https://istio.slack.com/).

0 commit comments

Comments
 (0)