Tetrate, the company bringing Istio and Envoy to the enterprise, has announced the general availability of Tetrate Istio Subscription (TIS), the fully upstream service based on open source Istio.
“Istio started life as an open source project created by engineers at Google, who then left to start Tetrate,”said Varun Talwar, founder of Tetrate. “When Istio became a CNCF project, it began a steady march toward maturity. Now, with the project graduated, we have a mature and proven application networking technology that’s standardized by NIST and acceptable to a wide array of Federal and large enterprise decision makers. A supported, open source, enterprise ready version of Istio is a big deal, and Tetrate has one.”
The offering combines always-on expert support and best practices with continuous and extended protection from CVEs of open source components, as well as a fast-track to a verifiably compliant Federal Risk and Authorization Management Program (FedRAMP) environment.
Key Facts About Tetrate Istio Subscription:
- TIS is based on the Tetrate Istio Distro (TID), an open source project from Tetrate that provides vetted builds of Istio tested against all major cloud platforms.
- On top of TID, TIS adds training, architectural workshops, expert enterprise production support, best practices and, critically, extended CVE support which adds six months of backported patches from Tetrate in addition to the eight months provided by the Istio project, allowing teams to reduce the upgrade frequency between Istio versions.
- TIS is the first and only 100% pure upstream Istio distribution to achieve Federal Information Processing Standards (FIPS) verification and is hardened for use in enterprise and FedRAMP environments, using the unforked BoringCrypto module.
- TIS is fully compliant with NIST 207A, the publication that defines the U.S. federal standard for the zero trust architecture that all federal applications must begin following. In fact, Tetrate worked directly with NIST in developing the standard.
Additionally, TIS is designed for highly regulated industries where security is paramount.