Reposted by Keith MattixJaz @jaz.sh · 02/12/2025Any moots know any great systems SWEs with networking focus looking for a new gig right now? A good gauge is if they've recently written any eBPF programs. Go background is also a plus. Figured I'd toss out a line. Company is ~30 people running our own HW in colo DCs doing IaaS. Thanks y'all! 07727
Keith Mattix @keithmattix.bsky.social · 13/11/2025This may need to be a blog post, but users tend to think ingress-nginx is simple because they can go to town with annotations. In reality, the features that they want are actually really complex to expose safely. This is why the project struggled with CVEs. “Simple for whom” is the question 022
Keith Mattix @keithmattix.bsky.social · 13/11/2025I’m going to sound like a grumpy maintainer here but everyone saying ingress-nginx is simpler than Gateway API is, in my opinion, wrong 110
Keith Mattix @keithmattix.bsky.social · 08/11/2025Same at DFW. Maintainer Summit is gonna get weird tomorrow 130
Keith Mattix @keithmattix.bsky.social · 20/10/2025Hey folks! I'm hiring a Software Engineer II in the U.S to help my team with our cloud-native networking efforts in the CNCF. Anyone who has experience with Istio, Envoy, Cilium, etc. should definitely apply! Please share for reach! jobs.careers.microsoft.com/global/en/sh...jobs.careers.microsoft.comSoftware Engineer II- Azure Container Upstream in Multiple Locations, Multiple Locations, United States | Software Engineering at MicrosoftApply for Software Engineer II- Azure Container Upstream in Multiple Locations, Multiple Locations, United States | Software Engineering at Microsoft 000
Reposted by Keith MattixKelsey Hightower @kelseyhightower.com · 12/08/2025KubeCon is coming to my home town, Atlanta, GA, in November from the 10th to the 13th, so it's only right I get a discount code for anyone looking to attend. Use code KELSEY20 for 20% off. events.linuxfoundation.org/kubecon-clou... 2568
Keith Mattix @keithmattix.bsky.social · 20/05/2025Slight clarification - CNCF counts contributions as "somebody who made a review, comment, commit, created PR or issue. Contribution is a review, comment, commit, issue or PR." So not exactly lines of code, but in the same vein 020
Keith Mattix @keithmattix.bsky.social · 20/05/2025So proud to be a part of the largest cloud contributor to the CNCF! Working in the Istio and Envoy communities have been a dream come true, and I'm excited to bring the best of the CNCF to Azure 020
Keith Mattix @keithmattix.bsky.social · 20/05/2025Lines of code according to all.devstats.cncf.io/d/5/companie...all.devstats.cncf.ioAll CNCF - DevStats 230
Reposted by Keith MattixDare Obasanjo @carnage4life.bsky.social · 12/12/2024 The legacy of crypto isn’t a technology revolution but instead that it created a culture where get rich quick mentality, grifting and Ponzi schemes were a virtue. Then made these people rich enough that they could influence elections. That and being the financial instrument for ransomware paymentstheatlantic.comCrypto’s Legacy Is Finally ClearAn anti-establishment technology for an anti-establishment age 417228
Reposted by Keith MattixJosh Berkus @fuzzychef.org · 09/12/2024Hey, #RedHat OSPO (open source practice office) is #hiring folks for several positions in OSS AI/ML. Exceptionally, some of these positions are in #SanFrancisco. Here's the #job listings: redhat.wd5.myworkdayjobs.com/en-US/jobs/j... redhat.wd5.myworkdayjobs.com/en-US/jobs/j... (1/4)redhat.wd5.myworkdayjobs.comPrincipal Program Manager - TechnicalJob title: Principal AI Community Architect Team: Open Source Program Office (OSPO) Location: US-San Francisco, US-Boston, US-Raleigh About Red Hat Red Hat is the world’s leading provider of enterpris... 21411
Keith Mattix @keithmattix.bsky.social · 09/12/2024Ack, I think there are some actionable steps we can take here. FWIW, this was one of the things we agonized over during the beta and GA planning: we definitely don’t want to give the impression that we are leaving sidecars behind. I’d love to continue to get your (and others’) feedback here! 110
Keith Mattix @keithmattix.bsky.social · 09/12/2024I’ll do my best to look into the draining issue soon; I should have some time as things slow down during the US holidays. Just to clarify though, the reason this hasn’t been fixed yet isn’t because of ambient. We’ve just had some maintainer churn recently and are trying to backfill the expertise 000
Keith Mattix @keithmattix.bsky.social · 09/12/2024Yeah I’m with you; I’ve followed one thread in particular where you’ve been active, and I feel for folks running into those issues just looking for a script to run to get unblocked. In the short term, I’ll make sure this gets brought up in the next WG meeting, and…. 100
Keith Mattix @keithmattix.bsky.social · 09/12/2024I think what I’m hearing you say (correct me if I’m wrong!) is that you’re concerned that you and the collective of users you represent are being de-prioritized in favor of ambient and you feel that the reason for that is because certain vendors are incentivized to emphasize ambient more 100
Keith Mattix @keithmattix.bsky.social · 09/12/2024🤔 I think that’s true generally, but tbh I don’t think John or really anyone at Solo falls into this too much. For every proprietary thing they launch, I can usually find at least 3x the investment in OSS which is fairly rare, especially in a post-ZIRP U.S economy 010
Keith Mattix @keithmattix.bsky.social · 09/12/2024Oh that wasn’t at all what I intended to imply! To your point, your issues, advocacy, etc. are based on what’s important to you right? Whether the contributions are code or not, they usually can be derived by that individuals incentives, whether end user or vendor 100
Keith Mattix @keithmattix.bsky.social · 09/12/2024Ah in that case, I see this as less vendor tension and more roadmap tension because Ambient is similar to an Istio 2.0 in some ways. Sidecars and Ambient both exist under the Istio umbrella but their roadmaps are a bit different 000
Keith Mattix @keithmattix.bsky.social · 09/12/2024Just to make sure I understand your point: are you saying you don’t think vendors of an OSS project should have enterprise or closed source features for that project? If not, then what makes Solo’s telemetry stuff not an enterprise feature? 100
Keith Mattix @keithmattix.bsky.social · 09/12/2024I trying to be more nuanced than that. Look at the native sidecar api in Kubernetes for example. The reason it’s a restartPolicy vs something else is because of API backwards compatibility changes. With ambient, we can move a lot faster because there’s a lot less baggage 010
Keith Mattix @keithmattix.bsky.social · 09/12/2024I think that’s certainly one way to look at it. The way that I frame it is that the community is a group of individuals who work on the project for ~whatever incentives. If native sidecars is a big priority for someone, it’ll get fixed sooner. Ambient is a priority by several individuals so it GA’d 200
Keith Mattix @keithmattix.bsky.social · 08/12/2024I don’t think I’ve seen anyone who wants to contribute to Istio of all projects who wants to contribute for no other reason than fun. I think yes we as maintainers need to say no to some feature requests for stability’s sake, but IMO, we need to do more to empower users to extend Istio 100
Keith Mattix @keithmattix.bsky.social · 08/12/2024Let’s agree to disagree. Vendor customers aren’t inherently superior to community users. Lower barriers and dev velocity aren’t mutually exclusive with stable or even enterprise. Look at Kubernetes for example 130
Keith Mattix @keithmattix.bsky.social · 08/12/2024What I’m hearing/inferring from @karlstoney.com (please correct me if I’m wrong!) is that “if the vendors don’t do it, it doesn’t get done because they’ve hired/captured all of the expertise”. We need to do more to empower end users to make meaningful contributions in a timely manner 200
Keith Mattix @keithmattix.bsky.social · 08/12/2024And a big part of doing that well is supporting end users (like yourself) so that they can potentially make these sorts of changes/fixes themselves. IMO, this is our biggest opportunity for improvement, and I’m excited to make some progress here!! 000
Keith Mattix @keithmattix.bsky.social · 08/12/2024None of this is meant to imply that your concern is unwarranted or not important! One of the things I hope to focus on improving next year is Istio’s contributor experience and making sure there are avenues to escalate really important issues to make sure they get addressed 100
Keith Mattix @keithmattix.bsky.social · 08/12/2024Re: Ambient, the reason not everything is getting backported to sidecars is backwards compatibility, at least IMO. To be completely transparent, there are a lot of interesting things we could do in sidecars, but we MUST support the existing API surface. That does constrict things a bit 200
Keith Mattix @keithmattix.bsky.social · 08/12/2024I hear you on the unaddressed issues. From my POV, this has to do more with gaps in expertise (that we’re working to fill) rather than commercial capture. Re: native sidecars specifically, we just don’t have enough Envoy experts as maintainers to get that done in a timely manner (it’s on my backlog) 200
Keith Mattix @keithmattix.bsky.social · 07/12/2024+1 to vendors not shoving their product specific stuff into core, but IMO, the “vibrant” part of the project shouldn’t be the commercial ecosystem but rather the community. That’s where Istio can be better 110
Keith Mattix @keithmattix.bsky.social · 07/12/2024I strongly disagree. In my opinion, nobody wants Istio to be commercial software. Not existing users, new users, nor vendors if they know what’s good for them 110
Keith Mattix @keithmattix.bsky.social · 07/12/2024Speaking for @microsoft.com, we are committed to making sure the Istio project is healthy and sustainable. Are there specific things you’re seeing that concern you? 110
Keith Mattix @keithmattix.bsky.social · 24/11/2024I completely agree with this! Even within the service mesh space, I worry we set unrealistic expectations for users when it comes to running distributed software 020
Keith Mattix @keithmattix.bsky.social · 24/11/2024If you need a service mesh, you’re past the point of “simple Kubernetes” 150
Reposted by Keith MattixMark Cuban @mcuban.bsky.social · 21/11/2024Why are Trump supporters not wanted ? You dont have to follow them. You can block them. You can filter words. Don’t you want @bsky.app to have all perspectives ? I certainly do. As long as it’s civil. Why not welcome different viewpoints ? 882614990948
Reposted by Keith MattixBridget Kromhout @bridgetkromhout.bsky.social · 13/11/2024Deep dive into how Istio’s ambient mode works, by @keithmattix.bsky.social & @howardjohn.info at #KubeCon. (Ztunnel is built in! You can use it today!) istio.io/latest/blog/... 082
Keith Mattix @keithmattix.bsky.social · 11/11/2024I guess the corollary to this is to implement client-side retries. If you have an abrupt connection termination due to the serving pod finally shutting down, then the client should ideally recover gracefully 000
Keith Mattix @keithmattix.bsky.social · 11/11/2024It’s time to get excited for #IstioDay! We’re kicking off tomorrow Nov.12 at 1:25 PM: sched.co/1jJgh. Come check out THE #KubeCon co-located event for Istio maintainers and practitioners to learn from each other!! Hope to see you there 😄sched.coCNCF-hosted Co-located Events North America 2024: Istio Day | Welcome + Opening Remarks -...View more about this event at CNCF-hosted Co-located Events North America 2024 011
Reposted by Keith MattixJohn Howard @howardjohn.info · 11/11/2024I'll be speaking this week in the coveted Friday afternoon time slot. Come by if you want to learn about simulating Kubernetes for testing! I am confident you will learn something new, but no promises it will be useful 🙂. sched.co/1i7qhsched.coKubeCon + CloudNativeCon North America 2024: Testing Kubernetes Without Kubernetes: A...View more about this event at KubeCon + CloudNativeCon North America 2024 042
Keith Mattix @keithmattix.bsky.social · 10/11/2024Excited to be heading to #KubeCon today! Come find me to talk about anything related to service mesh or cloud native networking! 030
Keith Mattix @keithmattix.bsky.social · 08/11/2024It’s been a privilege working on Istio’s ambient mesh; we’re so excited for it to be generally available! I truly think it’s a game changer for networking and security, but don’t take my word for it! Give it a try and let us know what you think!! 272
Reposted by Keith MattixAndy Randall @ahrkrak.bsky.social · 06/11/2024I created a starter pack for Cloud Native projects. While we're all mostly here to follow people, I'd like to encourage all the @cncf.bsky.social projects (and related) to set up BSky accounts. Let me know any I'm missing and I'll add them to the starter pack! go.bsky.app/GbZUjphgo.bsky.appCloud Native ProjectsJoin the conversation 95818
Keith Mattix @keithmattix.bsky.social · 07/11/2024Hyperlight is transformative technology for secure function execution. It's blazing fast and truly impressive engineering. Congrats to the team for a successful launch! 000
Keith Mattix @keithmattix.bsky.social · 06/11/2024Minority voters are more socially conservative than the current Democratic platform. A lot of the assumptions Democrats have made about how minorities vote have been shattered after ~40 years 131
Keith Mattix @keithmattix.bsky.social · 05/11/2024Kubernetes is on Bluesky, @istio.io is on bluesky, @cilium.bsky.social, etc. are there others!? Feeling tempted to put together a CNCF Project starter pack if someone hasn’t already 020
Keith Mattix @keithmattix.bsky.social · 04/11/2024The ether: Raise your hand if you're scrambling to get your KubeCon slides finished the week before the conference Me:media.tenor.coma man in a yellow jacket is waving his handAlt: Nick Jonas raising his hand sheepishly 000
Keith Mattix @keithmattix.bsky.social · 02/11/2024Do I know any security folks on here who can explain how this can happen?? Like not even trying to assign blame; I’m truly puzzled how this could be 000
