12 posts with tag #istio
Blocking AI Crawlers on Istio: AuthorizationPolicy's Ceiling and Envoy's Full-String Regex Trap
Blocking ~160 known AI-crawler user agents at an Istio ingress gateway without Lua: why AuthorizationPolicy cannot do substring header matching, and why a single safe_regex alternation would silently never match anyway.
Istio AuthorizationPolicy & HTTP/2 Coalescing
Two Istio/Envoy pitfalls: AuthorizationPolicy IP matching (direct_remote_ip vs. remote_ip) and HTTP/2 connection coalescing across per-hostname listeners.
LLM Inference on OVH MKS: Terraform, Ansible, and Deployment
Provision an OVH MKS GPU node pool with Terraform, deploy vLLM, Istio, and cert-manager with Ansible, and walk through a first deployment. Part 2 of 6.
LLM Inference on OVH MKS: The Complete Guide
Index and reading guide for a six-part series on self-hosting LLM inference on OVH MKS — vLLM, GPU node pools, Terraform, observability, clients, and a gateway.
LLM Inference on OVH MKS: Introduction
When to self-host an LLM on Kubernetes, why vLLM, and what the stack looks like on OVH MKS. Covers use cases, cost framing, and architecture. Part 1 of 6.
SigNoz on OVH MKS: Access Log Reports with Vector and ClickHouse
Collect Envoy access logs with Vector into ClickHouse, generate monthly awffull reports, and serve them via Istio ExternalName route to S3. Part 3 of 3.
SigNoz on OVH MKS: The Complete Guide
A reading guide to the 3-part SigNoz on OVH MKS series: sovereign observability with Terraform, Ansible, Istio Ambient Mode, and ClickHouse S3 cold tiering.
SigNoz on OVH MKS: Infrastructure with Terraform + Ansible
Deploy SigNoz on OVH MKS with Terraform and Ansible: MKS cluster, ClickHouse hot-to-cold S3 tiering, Istio Ambient Mode, cert-manager DNS-01. Part 1 of 3.
SigNoz on OVH MKS: Metrics, Traces & Logs with Istio Ambient
Send Istio metrics, OTLP traces, and pod logs to SigNoz on OVH MKS. Verify ClickHouse S3 cold-tier and estimate 7-year storage costs. Part 2 of 3.
ClickHouse Use Case: Vector, Istio, nginx, Java on OVH MKS
Vector → ClickHouse on OVH MKS: Envoy/Istio, nginx, Java, Go and Kubernetes logs with hot-to-cold S3 tiering. Monthly awffull reports via SQL export. Part 5 of 5.