What's New

1

Support for clusters v1.30

ASM can manage clusters v1.25, v1.27, v1.28, v1.29 and v1.30.

This feature is only available in ASM 1.18.

Commercial use

Buying a Service Mesh

1

Support for clusters v1.29

ASM can manage clusters v1.25, v1.27, v1.28, and v1.29.

This feature is only available in ASM 1.18.

Commercial use

Buying a Service Mesh

2

EOM for ASM 1.3/1.6/1.8

ASM 1.8 and earlier versions reach the end of maintenance (EOM). Upgrade ASM 1.8 or earlier to the latest commercial version. 

Commercial use

End of Maintenance for ASM 1.8

1

Metric monitoring using AOM

ASM earlier than 1.18 can only work with Application Performance Management (APM) to monitor metrics. To improve metric monitoring, ASM earlier than 1.18 can now work with Application Operations Management (AOM) after being upgraded to 1.18. ASM 1.18 and later versions can only work with AOM for metric monitoring.

This feature is only available in ASM 1.18 and later versions.

Commercial use

Buying a Service Mesh

How Do I Query Application Metrics in AOM?

2

Support for clusters v1.28

ASM can manage clusters v1.25, v1.27, and v1.28.

This feature is only available in ASM 1.18.

Commercial use

Buying a Service Mesh

1

IPv4/IPv6 dual stack

ASM of the Basic edition (Istio 1.18) supports IPv4/IPv6 dual stack.

Open beta testing

Creating a Service Mesh with IPv4/IPv6 Dual Stack Enabled

2

Traffic interception settings

ASM of the Basic edition allows you to configure traffic interception policies to intercept or allow traffic from and to specified IP address ranges over specified ports for new service meshes. You can also modify the policies of existing service meshes.

This feature is only available in ASM 1.13 and later versions.

Commercial use

Traffic interception settings

3

Interconnection with Jaeger/Zipkin

ASM of the Basic edition allows you to use Jaeger and Zipkin for distributed tracing across services.

This feature is only available in ASM 1.15 and later versions.

Open beta testing

Interconnection with Jaeger/Zipkin

4

Access logging

ASM of the Basic edition can work with Huawei Cloud Log Tank Service (LTS) to collect and store access logs. If access logging is enabled, you can query key access records in a service mesh to locate exceptions.

This feature is only available in ASM 1.18 and later versions.

Open beta testing

Access logging

5

Istio-CNI

From ASM 1.18 (Basic edition) and later versions, the Istio-CNI add-on will be enabled by default.
In ASM 1.15 and earlier versions, the istio-init container is injected into pods by default, and the NET_ADMIN and NET_RAW permissions are used to configure iptables rules in the network namespace.
With Istio-CNI enabled, the istio-init container is no longer injected into pods. Once a service mesh is created, the DaemonSet istio-cni-node is deployed in the istio-system namespace of the cluster by default. The DaemonSet installs and configures the add-on on each node in the cluster. When a pod is created, kubelet executes the add-on so that iptables rules can be configured to redirect traffic. As a result, the NET_ADMIN and NET_RAW permissions are no longer required, which improves security.

Istio-CNI is only available in ASM 1.18 and later versions.

Open beta testing

Install the Istio CNI node agent

6

Support for Istio 1.18.5

ASM of the Basic edition supports Istio 1.18.5.

Open beta testing

Features in v1.18

7

Support for Istio 1.15.7

ASM of the Basic edition supports Istio 1.15.7-r1 where security vulnerabilities, such as CVE-2023-44487、CVE-2023-39325、CVE-2023-27487 , are fixed.

Commercial use

Istio 1.15.7

1

Traffic management and security policy configuration

ASM of the Basic edition supports traffic management (retries, timeouts, connection pools, outlier detection, load balancing, HTTP headers, and fault injection) and security policy configuration (access authorization and peer authentication).

Commercial use

Traffic Management

Configuring a Security Policy

2

Resource configuration using YAML

You can create Istio resources on the console or using YAML for Istio resource management. To avoid configuration conflicts, you are advised to:
- Use console to maintain resources created on the console.
- Use YAML to maintain resources created using YAML.
If resources created on the console are modified using YAML, some functions on the console will be unavailable. 

Commercial use

Handling Policy of Resource Configuration Using YAML

3

Support for Istio 1.13.3

ASM of the Basic edition supports Istio 1.13.3.

Commercial use

Features in v1.13

1

This is the first official release. ASM provides non-intrusive traffic management and grayscale release capabilities.

Application Service Mesh (ASM) is a service mesh platform developed based on Istio and seamlessly interconnects with Cloud Container Engine (CCE). With better usability, reliability, and visualization, ASM provides you with out-of-the-box features and enhanced experience.

Commercial use

What Is Application Service Mesh?