Istio Service Mesh
-
Upload
luke-marsden -
Category
Internet
-
view
621 -
download
1
Transcript of Istio Service Mesh
![Page 1: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/1.jpg)
Istio!
Luke Marsden, Developer Experience@lmarsden
![Page 2: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/2.jpg)
Developers
Users
![Page 3: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/3.jpg)
Ship features fasterDevelopers
Users
![Page 4: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/4.jpg)
Fix problems faster
Developers
Users
![Page 5: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/5.jpg)
Developers
Users
competitiveness = speed of iteration
![Page 6: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/6.jpg)
Service mesh• Your app normally has: • API server, needs securing with TLS • API client, needs retries • Load balancer to send traffic to the right place depending on
policies • Authentication and authorization • Circuit breaking • Monitoring instrumentation (Prometheus) • …
![Page 7: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/7.jpg)
Service mesh• Service mesh says: • Move this into a sidecar!
![Page 8: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/8.jpg)
Before
Kubernetes pod
![Page 9: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/9.jpg)
Before
Kubernetes pod
Appcontainer
![Page 10: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/10.jpg)
Before
Kubernetes pod
Appcontainer
TLS
![Page 11: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/11.jpg)
Before
Kubernetes pod
Appcontainer
TLS
retries
![Page 12: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/12.jpg)
Before
Kubernetes pod
Appcontainer
TLS
retries
metrics
![Page 13: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/13.jpg)
Before
Kubernetes pod
Appcontainer
TLS
retries
metrics
![Page 14: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/14.jpg)
Before
Kubernetes pod
Appcontainer
TLS
retries
metrics
![Page 15: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/15.jpg)
Istio
After
Kubernetes pod
Appcontainer
TLS
retries
metrics
![Page 16: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/16.jpg)
Benefits• Do it well once, rather than over and over
again • Save effort! • Microservices are polyglot • Don’t want to have to rewrite all that logic
in N different languages
![Page 17: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/17.jpg)
Istio components• Envoy • Smart reverse proxy as shown • Mixer • “Control” service to which Envoys connect • Also: • Pilot for config, Istio-Auth for TLS...
![Page 18: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/18.jpg)
Istio
![Page 19: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/19.jpg)
Istio and Weave Cloud• Istio works great with Weave Cloud • Use Weave Cloud Explore to visualize Istio
in action • Have Weave Cloud Monitor handle the
long-term storage of Prometheus metrics • Demo…
![Page 20: Istio Service Mesh](https://reader031.fdocuments.us/reader031/viewer/2022021815/5a6479a87f8b9a27568b4901/html5/thumbnails/20.jpg)
What does Weave do?
Weave helps devops iterate faster with: • observability &
monitoring • continuous delivery • container networks &
firewalls
Weave Net provides a Kubernetes pod network & Network Policy implementation