Microservices the right way: an introduction to Istio

Introduction to Istio : concepts and live coding

Transcript

1. #sunnytech Microservices the right way: an introduction to Istio Sunny-tech 2018 Laurent Grangeau @laurentgrangeau 1
2. # whoami Hello Laurent Grangeau - CSA@Sogeti I love to automate things and run apps at scale You can find me at @laurentgrangeau Laurent Grangeau @laurentgrangeau Cloud Solution Architect
3. Monolithics vs microservices
4. The Big Four
5. Istio
6. Istio Istio addresses many of the challenges faced by developers and operators as monolithic applications transition towards a distributed microservice architecture
7. Concepts Split into a dataplane and a controlplane - The data plane is composed of a set of intelligent proxies (Envoy) deployed as sidecars that mediate and control all network communication between microservices, along with a general-purpose policy and telemetry hub (Mixer). - The control plane is responsible for managing and configuring proxies to route traffic, and configuring Mixers to enforce policies and collect telemetry.
8. Core components - Envoy - Sidecar proxies per microservice to handle ingress/egress traffic between services in the cluster and from a service to external services. - Mixer - Central component that is leveraged by the proxies and microservices to enforce policies. - Pilot - A component responsible for configuring the proxies at runtime. - Citadel - A centralized component responsible for certificate issuance and rotation. - Node agent - A per-node component responsible for certificate issuance and rotation. - Broker - A component implementing the Open Service Broker API for Istio-based services. (WIP)
9. Architecture
10. Concepts Enables: - Traffic management - Discovery, Rich layer-7 routing, Circuit breaker - Policies and controls - Policy enforcement - Metrics, logs and traces - Request tracing, Telemetry recording/reporting - Security - Authorization, Authentication, Rate limit, Quotas
11. Traffic management
12. Request routing
13. Discovery & load balancing
14. Authentication
15. Authentication
16. Istio RBAC
17. Policies & Telemetry
18. App example
19. App example w/ istio
20. Demo Live coding !
21. Questions ?