Pattern 3: Hybrid (Istio + VPC Lattice)

Pattern 3: Hybrid (Istio + VPC Lattice) An architecture diagram generated by Archify. Istiod · Istio mesh control plane · Cluster 1 · us-east-1 (Istio Mesh) Istiod Istio mesh control plane Service A · via local Envoy · Cluster 1 · us-east-1 (Istio Mesh) Service A via local Envoy Service B · via local Envoy · Cluster 1 · us-east-1 (Istio Mesh) Service B via local Envoy Istiod · Istio mesh control plane · Cluster 2 · us-west-2 (Istio Mesh) Istiod Istio mesh control plane Service B · via local Envoy · Cluster 2 · us-west-2 (Istio Mesh) Service B via local Envoy Service A · via local Envoy · Cluster 2 · us-west-2 (Istio Mesh) Service A via local Envoy Service Network · Cross-cluster · AWS VPC Lattice Service Network Cross-cluster Full Istio features mTLS · Retry Full Istio features mTLS · Retry VPC Lattice VPC Lattice Cluster 1 · us-east-1 (Istio Mesh) Cluster 2 · us-west-2 (Istio Mesh) AWS VPC Lattice Legend Backend Cloud Security

Intra-cluster: Istio

  • • All advanced Istio features: Retry, Circuit Breaker, fine-grained routing
  • • Istio handles mTLS, AuthN/AuthZ and distributed tracing

Cross-cluster: VPC Lattice

  • • No East-West Gateway, so less operational complexity
  • • Cost optimization by minimizing cross-region traffic
  • • Cross-cluster traffic is limited to Lattice features