Service Mesh Lab
Service Mesh Routing Game
Configure traffic, secure communications, and authorise the right peers across an Istio/Envoy mesh. Each scenario shows a real configuration with a hidden flaw — the kind that causes 4xx storms, broken canaries, or wide-open authz at 03:00.
6 scenarios~12 minutesMedium
Medium
How the simulator works
- Each scenario shows an Istio CRD (PeerAuthentication, AuthorizationPolicy, VirtualService, DestinationRule) or an Envoy snippet.
- Identify the routing or security flaw from four plausible options — the wrong answers explain why they look reasonable but miss the issue.
- Read the production explanation, follow the link to the relevant lesson, and move to the next scenario.
- Score yourself across all six rounds — covering mTLS rollout, authz policy, JWT auth, traffic shifting, retries, and Envoy diagnostics.