Istio Enables Global Availability for All Workloads — Traditional, Agentic and Beyond

AI agent deployment alongside traditional cloud native applications is rising, and securing and managing network traffic across various workloads has become more complex. Platform operators need consistent security, visibility and control without introducing additional operational overhead. Istio is evolving to meet these demands, providing a unified networking foundation for workloads running across clusters, clouds and runtime environments.

At KubeCon + CloudNativeCon North America 2026, Istio is highlighting four capabilities that strengthen its role as a secure, scalable service mesh: Ambient Multi-Network General Availability (GA), sidecar-to-Ambient migration support, and the Traffic Extension API. Together, these advancements make it easier for organizations to secure workloads, improve resiliency and adopt Istio Ambient mode at scale.

Enabling global availability with Istio Ambient Multi-Network GA

Applications are expanding across regions and cloud providers and because of this, maintaining availability and consistent security policies is vital.

With Istio Ambient Multi-Network now generally available, platform operators can deploy resilient, active-active workloads across dozens of Kubernetes clusters spanning different networks, regions and clouds.

This capability enables organizations to distribute workloads geographically while maintaining consistent service connectivity and traffic management. For enterprises operating globally, Multi-Network support helps improve application resiliency and provides greater flexibility in where workloads run.

Simplifying the transition from sidecars to Ambient

For organizations already using Istio’s traditional sidecar architecture, adopting Ambient mode is now more accessible.

New Sidecar-to-Ambient migration support, provides a path for existing users to transition their workloads without starting from scratch.

Ambient mode separates service mesh functionality from individual application pods, reducing the need to deploy and manage sidecar proxies. According to project-reported performance improvements, this architecture can deliver more than 60% improvement in resource utilization and a 75% reduction in latency.

For platform teams, these efficiencies translate into reduced infrastructure overhead, simplified operations and an opportunity to expand service mesh adoption across more workloads.

Extending traffic management without added complexity

Network requirements vary across applications, particularly as organizations introduce new AI-driven services and architectures.

Istio’s new Traffic Extension API gives operators a streamlined way to customize how traffic moves through their environments. Using Lua and WebAssembly (Wasm), teams can modify, redirect and filter traffic without needing deep knowledge of Envoy’s internal implementation.

This makes advanced traffic customization more accessible while allowing organizations to address application-specific networking requirements.

Learn more about the Traffic Extension API.

Building a secure networking foundation for what’s next

From globally distributed applications to sandboxed AI agents, Istio continues to expand what’s possible with service mesh technology. These latest capabilities demonstrate how Ambient mode can simplify operations while delivering the security, efficiency and flexibility organizations need for production environments.

Find the Istio community and say hello at Booth P-6B during KubeCon + CloudNativeCon North America 2026. You can visit istio.io to learn more about the project.