Skip to content

Commit 545c689

Browse files
Apply suggestions from code review
Co-authored-by: Keith Mattix II <[email protected]>
1 parent f1ca494 commit 545c689

File tree

1 file changed

+6
-6
lines changed
  • content/en/blog/2025/ambient-multicluster

1 file changed

+6
-6
lines changed

content/en/blog/2025/ambient-multicluster/index.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -6,20 +6,20 @@ attribution: Jackie Maertens (Microsoft), Keith Mattix (Microsoft), Mikhail Krin
66
keywords: [ambient,multicluster]
77
---
88

9-
Multicluster has been one of the most requested ambient features — and as of Istio 1.27, it's now available.
9+
Multicluster has been one of the most requested ambient features — and as of Istio 1.27, it is available in alpha status!
1010
We sought to capture the benefits and avoid the complications of multicluster architectures using the same modular design that ambient users love.
1111
While still in alpha, this release delivers the core functionality of a multicluster mesh and lays the groundwork for a full feature set in upcoming releases.
1212

13-
## Multicluster's Many Benefits (and Challenges)
13+
## The Power & Complexity of Multicluster
1414

15-
Multicluster architectures increase outage resilience, shrink the blast radii,
15+
Multicluster architectures increase outage resilience, shrink your blast radius,
1616
ease adoption of data residence policies, and simplify cost tracking.
17-
That said, integrating multiple clusters poses connectivity, security, and operation hurdles.
17+
That said, connecting multiple clusters poses connectivity, security, and operational challenges.
1818

1919
In a single Kubernetes cluster, every pod can directly connect to another pod via a unique pod IP or service VIP.
2020
We lose these guarantees when we start thinking of multicluster architectures.
2121
IP address spaces of different clusters might overlap.
22-
Even if they didn't, nodes in one cluster would not know how to route traffic from one cluster to another.
22+
Even if they didn't, nodes in one cluster may not know how to route traffic from one cluster to another (depending on how the underlying infrastructure is configured)
2323

2424
Establishing cross-cluster connectivity also presents security challenges.
2525
Cross-cluster connectivity means that pod-to-pod traffic can leave cluster boundaries -- and that pods may accept connections from outside the cluster.
@@ -36,7 +36,7 @@ securely connect clusters using the same lightweight, modular architecture.
3636
### East-West Gateways
3737

3838
Each cluster deploys an east-west gateway with a globally routable IP that acts as an entrypoint for cross-cluster communication.
39-
The east-west gateways are configured using GatewayAPI and controlled by istiod.
39+
The east-west gateways are configured using Gateway API and controlled by istiod.
4040
A ztunnel communicates across clusters by connecting to the remote cluster's east-west gateway and sending the destination service FQDN.
4141
The east-west gateway will then forward the connection to a cluster-local pod of its choosing.
4242
As such, overlapping IP spaces are of no concern because we never directly address a pod in a remote cluster.

0 commit comments

Comments
 (0)