Service Meshes

Einführung in Service Meshes am Beispiel von Istio. Zeigt Features im Bereich Monitoring, Resilience, Routing und Sicherheit sowie einen Vergleich mit Linkerd 2 und ein Vergleich zu Linkerd 2.

6. + –
13. • • •
14. • • • • • • http://prometheus.io/
16. • • •
17. • •
18. • • • • https://grafana.com/
21. • • •
22. • •
23. • •
26. • • •
27. • • • •
28. • • • •
29. • • • spring.sleuth.propagation-keys= x-request-id,x-ot-span-context •
35. • • •
39. • • •
40. • • •
42. • • • •
43. • • • • • • •
44. apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: order-retry spec: hosts: - order.default.svc.cluster.local http: - retries: attempts: 20 perTryTimeout: 5s retryOn: connect-failure,5xx timeout: 10s route: - destination: host: order.default…
46. • • • • •
47. apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: order-circuit-breaker spec: host: order.default.svc.cluster.local trafficPolicy: connectionPool: tcp: maxConnections: 1 http: http1MaxPendingRequests: 1 http2MaxRequests: 1
50. • • • •
51. apiVersion: networking.istio.io/… kind: DestinationRule metadata: name: frontend v2 version: "2" v1 version: "1" spec: host: frontend subsets: - name: v2 labels: version: "2" - name: v1 labels: version: "1" "/neu" frontend v2 frontend v1 apiVersion: networking.istio.io/… kind: VirtualService metadata: name: frontend-ingress spec: hosts: - "*" http: - match: - uri: prefix: "/neu" route: - destination: host: frontend subset: v2 - route: - destination: host: frontend subset: v1
52. • • • 90% 10% 100% 10% 90%
56. ✘ ✘
59. • API • • • https://smi-spec.io
60. • • • •
61. apiVersion: split.smi-spec.io/v1alpha1 kind: TrafficSplit metadata: name: my-weights spec: service: service backends: - service: service-1 weight: 100m - service: service-2 weight: 200m - service: service-3 weight: 300m
62. apiVersion: access.smi-spec.io/v1alpha1 kind: TrafficTarget metadata: name: service-2-api destination: kind: ServiceAccount name: service-2 specs: - kind: HTTPRouteGroup name: api-route matches: [api] sources: - kind: ServiceAccount name: service-1 apiVersion: specs.smi-spec.io/v1alpha1 kind: HTTPRouteGroup metadata: name: api-route matches: - name: api pathRegex: /api methods: ["GET"] ✘ ✘
64. • • •
66. ✘ ✘
69. + –
70. www.innoq.com/de/podcast/059-service-meshes-1/ www.heise.de/developer/artikel/Brauchen-asynchrone- Microservices-und-Self-Contained-Systems-ein-Service-Mesh- 4478057.html www.heise.de/developer/artikel/Alle-11-Minuten-verliebt- sich-ein-Microservice-in-Linkerd-4511406.html