Course Outline

Automate With DevOps

Service Mesh and API Gateway Essentials (Istio, Envoy, Kong) Training Course

Rating

9/10

Duration

2 Days

Course Overview

This specialized training course is a professional program crafted for DevOps engineers, backend developers, and platform architects who manage microservices at scale. It introduces the architecture, use cases, and implementation of service meshes and API gateways, focusing on tools like Istio, Envoy, and Kong. Through practical labs, participants will learn how to manage service discovery, observability, security, traffic control, and API governance in dynamic, distributed systems.

Format of Training

  • Hands-On Labs: Configure traffic routing, TLS, and observability in Istio.

  • Tool Comparisons: Understand Kong vs Istio vs Envoy use cases.

  • Security Integration: Apply mTLS and access policies between services.

  • Real-Time Scenarios: Solve service discovery, rate-limiting, and circuit-breaking.

Course Objectives

  1. Understand the role of API gateways and service meshes in microservices.

  2. Deploy Istio on Kubernetes and configure traffic routing and load balancing.

  3. Use Kong for API versioning, authentication, and rate-limiting.

  4. Secure service-to-service communication using mutual TLS (mTLS).

  5. Monitor microservice traffic with telemetry and tracing tools.

  6. Implement retries, circuit breakers, and fault injection for resilience.

  7. Compare and select the right tool based on architecture needs.

Prerequisites

Course Outline

Day 1: Service Mesh Fundamentals with Istio and Envoy

Session 1 – Introduction to Service Mesh and API Gateways

  • API gateway vs Service Mesh: key differences

  • When to use what in microservices environments

Session 2 – Deploying Istio in Kubernetes

  • Istio architecture: Pilot, Mixer, Citadel, etc.

  • Installing Istio using Helm or Istioctl

Session 3 – Traffic Management and Observability

  • VirtualServices, DestinationRules, and traffic shifting

  • Metrics with Prometheus, Jaeger, and Kiali

Day 2: Securing and Extending APIs with Kong

Session 4 – API Gateway Basics and Kong Setup

  • Kong Gateway architecture and plugin ecosystem

  • Declarative configuration and API authentication

Session 5 – Policy Enforcement and Fault Tolerance

  • Implementing mTLS, rate limiting, and IP filtering

  • Using retries, timeouts, and circuit breakers in service mesh

Session 6 – Final Lab: Routing, Securing, and Monitoring a Live App

  • Deploy a demo app with Istio or Kong

  • Secure, monitor, and troubleshoot traffic between services

Bespoke Option

We are open to customizing this program to align with your specific learning objectives. If your team has particular goals or areas they wish to focus on, we would be happy to tailor the course outline to meet those needs and ensure the program supports the achievement of your desired outcomes.

Further Learning Opportunities

Service Mesh and API Gateway Essentials (Istio, Envoy, Kong) Training Course

Course Name: Service Mesh and API Gateway Essentials (Istio, Envoy, Kong) Training Course

Request More Information