Istio Enables Global Availability for All Workloads — Traditional, Agentic and Beyond | CNCF

Enroll your company as a CNCF End User and save more than $10K in training and conference costs
Posted on November 10, 2026 by Mitch Connors, Istio Technical Oversight Committee
CNCF projects highlighted in this post
AI agent deployment alongside traditional cloud native applications is rising, and securing and managing network traffic across various workloads has become more complex. Platform operators need consistent security, visibility and control without introducing additional operational overhead. Istio is evolving to meet these demands, providing a unified networking foundation for workloads running across clusters, clouds and runtime environments.
At KubeCon + CloudNativeCon North America 2026, Istio is highlighting four capabilities that strengthen its role as a secure, scalable service mesh: Ambient Multi-Network General Availability (GA), sidecar-to-Ambient migration support, and the Traffic Extension API. Together, these advancements make it easier for organizations to secure workloads, improve resiliency and adopt Istio Ambient mode at scale.
Applications are expanding across regions and cloud providers and because of this, maintaining availability and consistent security policies is vital.
With Istio Ambient Multi-Network now generally available, platform operators can deploy resilient, active-active workloads across dozens of Kubernetes clusters spanning different networks, regions and clouds.
This capability enables organizations to distribute workloads geographically while maintaining consistent service connectivity and traffic management. For enterprises operating globally, Multi-Network support helps improve application resiliency and provides greater flexibility in where workloads run.
For organizations already using Istio’s traditional sidecar architecture, adopting Ambient mode is now more accessible.
New Sidecar-to-Ambient migration support, provides a path for existing users to transition their workloads without starting from scratch.
Ambient mode separates service mesh functionality from individual application pods, reducing the need to deploy and manage sidecar proxies. According to project-reported performance improvements, this architecture can deliver more than 60% improvement in resource utilization and a 75% reduction in latency.
For platform teams, these efficiencies translate into reduced infrastructure overhead, simplified operations and an opportunity to expand service mesh adoption across more workloads.
Network requirements vary across applications, particularly as organizations introduce new AI-driven services and architectures.
Istio’s new Traffic Extension API gives operators a streamlined way to customize how traffic moves through their environments. Using Lua and WebAssembly (Wasm), teams can modify, redirect and filter traffic without needing deep knowledge of Envoy’s internal implementation.
This makes advanced traffic customization more accessible while allowing organizations to address application-specific networking requirements.
Learn more about the Traffic Extension API.
From globally distributed applications to sandboxed AI agents, Istio continues to expand what’s possible with service mesh technology. These latest capabilities demonstrate how Ambient mode can simplify operations while delivering the security, efficiency and flexibility organizations need for production environments.
Find the Istio community and say hello at Booth P-6B during KubeCon + CloudNativeCon North America 2026. You can visit istio.io to learn more about the project.
Subscribe for updates, event info, webinars, and the latest community news
By submitting this form, I consent to receive marketing emails from the LF and its projects regarding their events, training, research, developments, and related announcements. I understand that I can unsubscribe at any time using the links in the footers of the emails I receive. Privacy Policy.
Copyright © 2026 The Linux Foundation®. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our Trademark Usage page. Linux is a registered trademark of Linus Torvalds. Privacy Policy and Terms of Use.
Cookie Settings Accessibility Statement Submit an issue with this page