Introduction to Service Mesh using Istio on K8S

Slider desk of talk given at the Kubernetes Genth meetup

Transcript

1. Introduction to Service Mesh using Istio on K8S Alex Van Boxel
2. • Google Developer Expert - Cloud • Software Architect @ Vente-Exclusive.com (Vente-Privee group) • Super Geek
7. Open Platform for • Connect • Manage • Secure or in short… a Service Mesh
8. Connectivity Resiliency / Reliability Security Visibility / Observability
10. Container µA Container µB Service B Kube-Proxy
11. Envoy Container µA INIT Pilot Mixer Istio
12. Envoy Container µA Envoy Container µB Pilot Mixer Istio
13. Envoy Container µA Envoy Container µB Pilot Mixer Istio AUTH
14. Envoy µA Envoy µB Envoy µC Envoy µD Envoy µE µX
15. Envoy µA Envoy µB Envoy µC Envoy µD Envoy µE µX Envoy IN Envoy OUT
16. Envoy µA Envoy µB Envoy µC Envoy µD Envoy µE µX Envoy IN Envoy OUT
17. Envoy µA Envoy µB Envoy µC Envoy µD Envoy µE Envoy IN Envoy OUT
18. Envoy Envoy Istio
19. Envoy Envoy Pilot Istio
20. Envoy Envoy Mixer Istio
21. Envoy Container µA Envoy Container µB Istio AUTH
25. metadata: name: reviews-cb-policy namespace: default spec: destination: name: reviews labels: version: v1 circuitBreaker: simpleCb: maxConnections: 100 Destiation Policy
26. metadata: name: reviews-lb-policy namespace: default spec: destination: name: reviews loadBalancing: name: RANDOM Destiation Policy
27. metadata: name: my-rule namespace: default spec: destination: name: ratings route: - labels: version: v1 httpReqRetries: simpleRetry: attempts: 3 perTryTimeout: 2s Routing Rule
28. metadata: name: my-rule namespace: default spec: destination: name: ratings route: - labels: version: v1 httpReqTimeout: simpleTimeout: timeout: 10s Routing Rule
30. ... spec: destination: name: b namespace: reactor precedence: 2 route: - labels: version: '1' weight: 100 httpFault: delay: percent: 75 fixedDelay: 5s Routing Rule
31. ... spec: destination: name: a namespace: reactor precedence: 2 route: - labels: version: '1' weight: 100 httpFault: abort: percent: 60 httpStatus: 500 Routing Rule
33. metadata: name: rule-3-weight50 spec: destination: name: user namespace: reactor precedence: 2 route: - labels: version: '2' weight: 50 - labels: version: '1' weight: 50 Routing Rule
34. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0
35. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0
36. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0
37. Envoy Container µA Envoy µB 2.0
38. spec: destination: name: role namespace: reactor precedence: 2 match: request: headers: x-segment: exact: "test" route: - labels: version: '2' Routing Rule
39. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 1.0
40. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 1.0
41. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 1.0
42. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 1.0
43. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 2.0 Envoy µC 1.0
44. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 2.0 Envoy µC 1.0
45. Envoy Container µA Envoy µB 2.0 Envoy µB 1.0 Envoy µC 2.0 Envoy µC 1.0
46. Envoy Container µA Envoy µB 2.0 Envoy µC 2.0
47. HTTP Redirect HTTP Rewrite
48. kind: EgressRule metadata: name: foo-egress-rule spec: destination: service: *.foo.com ports: - port: 80 protocol: http - port: 443 protocol: https Routing Rule
50. • Without app instrumentation • Trace across services • Portable over providers
51. metrics: - name: request_count kind: COUNTER value: INT64 displayName: "Request Count" description: Request count 4p labels: source: STRING target: STRING service: STRING responseCode: INT64
53. Secure Production Identity Framework for Everyone
55. Envoy Product Envoy REVIEW- 1 Envoy REVIEW- 2 Envoy REVIEW- 3 Envoy DETAIL Envoy RATING
59. • Basic Authorization using RBAC. • Global load balancing with autoscaling. • API Management functionality. • ... • Now Istio is on a monthly release cycle 0.5.0 release a few days ago
60. https://istio.io Slider and github repo: @alexvb
64. Envoy µB Envoy µY Envoy µB Envoy µB Envoy µB Envoy µB Envoy µB Envoy µY