Making Microservices Micro with Istio [RUS]

Slides for an internal talk in Lazada Moscow Techhub.

The original slides can be found here: https://speakerdeck.com/saturnism/making-microservices-micro-with-istio-service-mesh

The original talk: http://saturnism.me/talk/making-microservices-micro-istio/

Transcript

1. with Istio Making Microservices Micro
2. @saturnism @googlecloud @istiomesh @kubernetesio 2 Ray Tsang Developer Advocate Google Cloud Platform @saturnism | +RayTsang
3. @saturnism @googlecloud @istiomesh @kubernetesio 2 Ivan Korolev Senior Go Developer Ex-Lazada github.com/mwf
4. @saturnism @googlecloud @istiomesh @kubernetesio Microservices? 4 You probably heard a lot already! No theories here - just a how to solve problems
5. @saturnism @googlecloud @istiomesh @kubernetesio So many instances… 5 Deployment Resource Isolation & Utilization Resiliency Networking
6. @saturnism @googlecloud @istiomesh @kubernetesio apiVersion: extensions/v1beta1 kind: Deployment metadata: name: httpbin . . . spec: replicas: 2 template: . . . spec: containers: - name: httpbin image: docker.io/citizenstig/httpbin 6
7. @saturnism @googlecloud @istiomesh @kubernetesio Scheduler 7 kubectl Kubelet Kubelet Kubelet Kubelet Config file Kubernetes Master Container Image Browsers
8. @saturnism @googlecloud @istiomesh @kubernetesio Control Plane 8 Cluster of machines as one Well-defined API & types Abstraction of infrastructure
9. @saturnism @googlecloud @istiomesh @kubernetesio Beyond Deployment 9 Load Balancing Fault Tolerance Observability Monitoring & Tracing Circuit Breaking
10. @saturnism @googlecloud @istiomesh @kubernetesio Popular Open Source Tools 10 Eureka - Service Registry Ribbon - Client Side LB Hystrix - Circuit Breaker Zipkin - Distributed Tracing Prometheus - Monitoring Grafana - Data Visualization
11. @saturnism @googlecloud @istiomesh @kubernetesio Eureka Service Registry Zuul API Gateway Zipkin Distributed Trace Prometheus Metrics Store Grafana Visualization Microservice A Ribbon (LB) Hystrix Tracer Metrics Archaius Centralized Config 11
12. @saturnism @googlecloud @istiomesh @kubernetesio 12 Microservice B Ribbon Hystrix Tracer Metrics Service Registry Microservice A Ribbon Hystrix Tracer Metrics
13. @saturnism @googlecloud @istiomesh @kubernetesio This is easy when... Single stack Framework 13
14. @saturnism @googlecloud @istiomesh @kubernetesio This becomes more difficult... 14 Multiple stack Multiple frameworks Legacy
15. @saturnism @googlecloud @istiomesh @kubernetesio At the end of the day... 15 Let Microservice A talk to Microservice B!
16. @saturnism @googlecloud @istiomesh @kubernetesio As simple as... 16 Making a HTTP request?
17. @saturnism @googlecloud @istiomesh @kubernetesio Enter Istio, a Service Mesh! 17
18. @saturnism @googlecloud @istiomesh @kubernetesio What Where When How A complete framework for connecting, securing, managing and monitoring services Secure and monitor traffic for microservices and legacy services An open platform with key contributions from Google, IBM, Lyft and others Multi-environment and multi-platform, but Kubernetes first 18
19. @saturnism @googlecloud @istiomesh @kubernetesio Control Plane 19 Service to Service Communication Routing Rules Retries Circuit Breaker Performance Monitoring Tracing
20. @saturnism @googlecloud @istiomesh @kubernetesio Eureka Service Registry Zuul API Gateway Zipkin Distributed Trace Prometheus Metrics Store Grafana Visualization Microservice A Ribbon Hystrix Tracer Metrics Archaius Centralized Config 20
21. @saturnism @googlecloud @istiomesh @kubernetesio Eureka Service Registry Zuul API Gateway Zipkin Distributed Trace Prometheus Metrics Store Grafana Visualization Microservice A Ribbon Hystrix Tracer Metrics Archaius Centralized Config 21
22. @saturnism @googlecloud @istiomesh @kubernetesio Microservice A Ribbon Hystrix Tracer Metrics Proxy Microservice A 22
23. @saturnism @googlecloud @istiomesh @kubernetesio A C++ based L4/L7 proxy Low memory footprint Battle-tested @ Lyft 100+ services 10,000+ VMs 2M req/s An awesome team willing to work with the community! 23
24. @saturnism @googlecloud @istiomesh @kubernetesio Dynamic service discovery Load balancing TLS termination HTTP/2 gRPC proxying Circuit breakers Health checks Traffic split Fault injection ... 24
25. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Istio Pilot Configure proxies Kubernetes 25
26. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B 26 Service calls http://service-b/
27. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Service calls http://service-b/ Service Mesh transparently intercepts request, forwards to local proxy 27
28. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Service calls http://service-b/ Service Mesh transparently intercepts request, forwards to local proxy Proxy has a list of destinations, load balances the request to a destination proxy 28
29. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Service calls http://service-b/ Service Mesh transparently intercepts request, forwards to local proxy Proxy has a list of destinations, load balances the request to a destination proxy If allowed, destination proxy forwards the request to Service B instance 29
30. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Service calls http://service-b/ Service Mesh transparently intercepts request, forwards to local proxy Proxy has a list of destinations, load balances the request to a destination proxy Destination proxy checks with a mixer to enforce policy, quota, ACL, etc Service B response goes back to the caller 30
31. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Service calls http://service-b/ Service Mesh transparently intercepts request, forwards to local proxy Proxy has a list of destinations, load balances the request to a destination proxy Destination proxy checks with a mixer to enforce policy, quota, ACL, etc If allowed, destination proxy forwards the request to Service B instance Service B response goes back to the caller 31
32. @saturnism @googlecloud @istiomesh @kubernetesio Proxy Microservice A Proxy Microservice B Through the Proxy - Traffic Control - enforce routing rules & policies - Resiliency - Circuit Breaker, Retries - Monitoring - Record metrics - Observability - Record traces - Security - Mutual TLS! Encryption 32
33. @saturnism @googlecloud @istiomesh @kubernetesio Platform Services Proxy Microservice A Proxy Microservice B Zipkin Prometheus Grafana Istio Mixer 33
34. @saturnism @googlecloud @istiomesh @kubernetesio or Cloud Platform Services Proxy Microservice A Proxy Microservice B ... BlueMix Google Cloud Istio Mixer 34
35. @saturnism @googlecloud @istiomesh @kubernetesio Let's see it... 35
39. @saturnism @googlecloud @istiomesh @kubernetesio Mixer configuration is not so simple... 39
40. @saturnism @googlecloud @istiomesh @kubernetesio Let's see the config example... 40
41. @saturnism @googlecloud @istiomesh @kubernetesio Visibility Resiliency & Efficiency Traffic Control Security Policy Enforcement 41
42. @saturnism @googlecloud @istiomesh @kubernetesio • 0.1: a single Kubernetes namespace • 0.2: a single Kubernetes cluster and external VMs • 0.3 (by end of year): production readiness within a single cluster • ... • 0.7: current • 1.0: (2018): complete mesh across all environments 42
43. @saturnism @googlecloud @istiomesh @kubernetesio • Install Kubernetes (v1.7+ for Initializers) • istio.io quickstart • Play around! Getting started 43
44. Learn more on istio.io Let us know on istio-users@googlegroups.com Examples on github.com/saturnism/istio-by-example-java Try our Code Labs g.co/codelabs/cloud! @saturnism @googlecloud @istiomesh @kubernetesio 46 44 Thank you!