Istio - Architecture

1. Control & Data Plane

graph TD
    Istiod[Istiod: Control Plane] --> Pilot[Pilot / xDS API]
    Istiod --> Citadel[Citadel / Certs]
    Pilot --> ProxyA[Envoy Proxy Sidecar]
    Pilot --> ProxyB[Envoy Proxy Sidecar]
    ProxyA <-->|mTLS| ProxyB