HashiCorp Consul

Transcript

2. Déployer, « scaler » et configurer une application avec Consul (et docker, consul-template, envconsul, HAProxy, python, …)
7. Provision, secure, and run any infrastructure for any application.
9. Caractéristiques principales Service Discovery (DNS/HTTP) Multi Datacenter KV Storage Failure Detection + ACL + Web UI + Evènements distribués + « watch » + Métriques / Monitoring + …
10. Consul = DNS server + etcd + ZooKeeper + Nagios + Web UI + …
12. Enregistrement d’un service $ curl \ --request PUT \ --data @payload.json \ https://consul:8500/v1/agent/service/register { "service": { "id": "api-1", "name": "api", "tags": ["demo"], "address": "127.0.0.1", "port": 5000, "checks": { "name": "Health api", "http": "http://127.0.0.1:5000/api/health", "interval": "10s" } } }
13. Enregistrement d’un service Ecwid/consul-api OrbitzWorldwide/consul-client gliderlabs/registrator cfg4j kdlan/jconsul
14. Enregistrement d’un service • SERVICE_5000_NAME=api • SERVICE_CHECK_HTTP=/api/health • SERVICE_CHECK_INTERVAL=15s
15. Architecture (HA) Gossip protocol : SWIM (Hashicorp Serf) Consensus Protocol : Raft • Si le client est hors ligne, une seule instance de l’application y sera également • L’application n’a besoin de connaitre qu’une seule adresse : 127.0.0.1:8600
16. DNS lookup [tag.]<service>.service[.datacenter].<domain> $ dig SRV api.service.consul ; <<>> DiG 9.10.4-P3 <<>> SRV api.service.consul ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52880 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; QUESTION SECTION: ;api.service.consul. IN SRV ;; ANSWER SECTION: api.service.consul. 0 IN SRV 1 1 5000 consul.node.dc1.consul. ;; ADDITIONAL SECTION: consul.node.dc1.consul. 0 IN A 10.0.2.15 ;; Query time: 1 msec ;; SERVER: 10.0.2.15#53(10.0.2.15) ;; WHEN: Thu May 11 13:16:55 UTC 2017 ;; MSG SIZE rcvd: 88
17. Ajout d’un service --name api-node-1 -P app flask run --host=0.0.0.0 --name api-node-2 -P app flask run --host=0.0.0.0
18. SRV _service._proto.name. TTL class SRV priority weight port target. Ribbon/Feign spotify/dns-java
19. • « Templating » • Rechargement au changement • Intégration universelle (HAProxy, nginx, …) +
20. Consul-template + HAProxy
21. Consul-template {{ range services }} backend {{ .Name }}_backend {{ range service .Name }} server {{ .Node }}-{{ .Port }} {{ .Address }}:{{ .Port }}{{ end }} {{ end }} {{ range services }} acl host_{{ .Name }} hdr_beg(host) -i {{ .Name }}."haproxy.service.consul" use_backend {{ .Name }}_backend if host_{{ .Name }} {{ end }}
22. Alternatives gliderlabs/connectable 3fs/consul-f5 Consul et IPTables
23. #cfgfilesless KV Storage
24. KV Storage (HTTP API) $ curl -X PUT \ -d 50000 \ http://consul:8500/v1/kv/global/config/hazelcast/client/connection_timeout true $ curl http://consul:8500/v1/kv/global/config/hazelcast/client/connection_timeout?raw 50000
25. KV Storage Ecwid/consul-api OrbitzWorldwide/consul-client cfg4j Magnetme/consultant kdlan/jconsul archaius Library for configuration management API
26. III. Configuration Stockez la configuration dans l’environnement https://12factor.net/fr/config envconsul
27. envconsul $ envconsul -prefix service/$OBJECT_CODE/$ENV -config="/app/config.hcl" flask run --host=0.0.0.0
28. Script + Interval HTTP + Interval TCP + Interval Time to Live (TTL) Docker + Interval Failure Detection
29. Consul watch
30. Consul watch $ consul watch -type checks -service api /consul/check.sh