Istio + VPC Lattice Hybrid Architecture

Istio + VPC Lattice Hybrid Architecture An architecture diagram generated by Archify. Frontend · Pod · VPC 1 · EKS Cluster (Istio Mesh) Frontend Pod Envoy · Frontend sidecar · VPC 1 · EKS Cluster (Istio Mesh) Envoy Frontend sidecar Envoy · Backend sidecar · VPC 1 · EKS Cluster (Istio Mesh) Envoy Backend sidecar Backend · Pod · VPC 1 · EKS Cluster (Istio Mesh) Backend Pod Service Network · VPC Lattice · VPC Lattice Service Network VPC Lattice Payment Service · Lattice service · VPC Lattice Payment Service Lattice service Notification Service · Lattice service · VPC Lattice Notification Service Lattice service Payment Service · ECS Task · VPC 2 · ECS Payment Service ECS Task Notification · Lambda · VPC 3 · Lambda Notification Lambda Istio mTLS Egress Gateway VPC 1 · EKS Cluster (Istio Mesh) VPC Lattice VPC 2 · ECS VPC 3 · Lambda Legend Frontend Backend Cloud Security

Within cluster: Istio

  • • mTLS between Envoy sidecars with rich traffic-control features

Between clusters/external: VPC Lattice

  • • Egress Gateway connects to the Service Network
  • • Simple connectivity to ECS Tasks and Lambda in other VPCs