CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects

•Download as PPTX, PDF•

0 likes•59 views

Istio integrates with a rich set of tools that can add tracing, telemetry, logging and other functionalities to your microservices environment. This session will focus on how a myriad of tools, including several CNCF projects, work collectively to deliver the full functionality of Istio. This presentation covers: 1) How Grafana and Prometheus make makes it easy for your entire team to understand what’s going on with your microservices. 2) How Jaeger can be most effectively used for tracing to get to root cause analysis. 3) How Cortex delivers long-term storage for Prometheus telemetry data, how horizontal scalability and cloud-native storage provides virtually infinite data retention, and how Cortex can solve multi-tenant Prometheus challenges.

How to Gain Insights from Istio by
Leveraging Tools Like Jaeger,
Prometheus and Cortex
CNCF WEBINAR SERIES
Neeraj Poddar
Platform Lead

© 2018 Cloud Native Computing Foundation2
Service A
Container 1
Microservices Without a Service Mesh
Flask
OpenTracing Flask
Kingpin
Lemur
Open SSL 110d
Python
Service B
Container 1
http.createServer
Jaeger
Zoologist
Express
Open SSL 102l
Node.js
Service C
Container 1
Spring
OpenTracing Spring
Disco-java
Ribbon
Open SSL 110f
Java

© 2018 Cloud Native Computing Foundation3
Service A
Container 1
Microservices With a Service Mesh
Flask
Service Mesh
Python
Service B
Container 1
http.createServer
Service Mesh
Node.js
Service C
Container 1
Spring
Service Mesh
Java

© 2018 Cloud Native Computing Foundation4
Service Mesh Architectures

© 2018 Cloud Native Computing Foundation5
Service B Service C
Container 2 Container 2
Service A
Container 2
Container 1
Microservices with Istio
Flask
Python
Container 1
http.createServer
Node.js
Container 1
Spring
Java
Istio Control Plane
Config data to Envoys
Policy,quota,telemetry
TLS certs to Envoys Monitors K8s for new pods to inject Envoy
EnvoyEnvoyEnvoy
Mixer Citadel Sidecar InjectorPilot

© 2018 Cloud Native Computing Foundation6
Istio Features
A bundling of capabilities
• Service discovery
• Load balancing
• Advanced traffic management
• Enhanced security
• Policy
• Tracing
• Metrics

© 2018 Cloud Native Computing Foundation7
Benefits of Tracing
Service dependency
analysis
Track requests across
multiple microservices
Identify performance
bottlenecks

© 2018 Cloud Native Computing Foundation8
Tracing with Istio
• Automatic tracing of all network requests
• Context handling
• Asynchronous span reporting
– Start and end times
– Source & destination service
– HTTP headers
• Application header propagation
• Multiple backend integrations
– Zipkin
– Jaeger
Distributed Tracing with Istio in AWS
Tracing gRPC with Istio

© 2018 Cloud Native Computing Foundation9
Jaeger
• OpenTracing compatible API
• Flexible & scalable architecture
• Multiple storage backends
– Cassandra
– Elasticsearch
• Advanced sampling
• Accepts Zipkin spans
• CNCF project & active OS community
• Great UI

© 2018 Cloud Native Computing Foundation10
Jaeger UI
• Jaeger has gained the most traction and is what we use
– CNCF project
– Thriving community
– Great UI

© 2018 Cloud Native Computing Foundation11
Benefits of Metrics
Monitoring &
alerting
Debugging & fault
analysis
Historical view

© 2018 Cloud Native Computing Foundation12
Metrics with Istio
• Envoy stats
– Request Pending
– Connection bytes buffered
– SSL failures
• Mixer service stats
– Request latency
– Request counts
• Custom metrics
• Telemetry monitoring options
– StatsD
– Stackdriver
– Prometheus
Envoy Stats Overview

© 2018 Cloud Native Computing Foundation13
Prometheus
• Pull model
• Flexible query API
• Efficient storage
• Dashboard integrations
– Grafana
• Exporters
– Prometheus Integrations
• CNCF project & strong
OS community

© 2018 Cloud Native Computing Foundation14
Enhancing Prometheus with Cortex
• Long term durable storage
– AWS DynamoDB
– Bigtable
– Cassandra
• Scalable Prometheus query API
• Multi-tenancy
• Easy to manage
• Intent to add as CNCF project

© 2018 Cloud Native Computing Foundation15
More on Getting the Most from Istio
Istio 0.8 Release
• Stability & Scalability
• Envoy v2
• Istio v1alpha3
We are active users of Istio and are happy to talk in greater depth
Please feel free to reach out:
• neeraj@aspenmesh.io
• http://aspenmesh.io/blog
v0.8 release

This document provides an introduction to Open Policy Agent (OPA), an open source general purpose policy engine. It discusses how OPA can help manage policy in increasingly distributed systems by providing a unified toolset for defining and enforcing policies across the stack. Key points include: - OPA decouples policy from application logic and allows policies to be written and tested using the declarative Rego language. - OPA has a vibrant community with many integrations and production users, and is commonly used for use cases like Kubernetes admission control and microservice authorization. - The document provides examples of how OPA can be used to enforce policies for systems like Kubernetes through validating admission controllers. - Options for deploying

Istio By Example (extended version)

Josef Adersberger

Istio is the cool new kid on the service mesh block: it can be deployed without the need for any change on the microservice-side and enhances their communication paths with encryption, resiliency, identity and access management, observability with metrics and traces and policy enforcement. In this lightning talk I'll talk you through an Istio sample application incorporating all major features. The sample will be released on github and will also run on minikube.

Istio a service mesh

Chandresh Pancholi

Istio is an open platform for providing a service mesh on Kubernetes clusters. It consists of three main components: Envoy proxies that mediate service-to-service communication, Pilot that configures the proxies, and Mixer that enforces policies and collects telemetry data. Istio injects Envoy sidecar proxies into applications so they can provide features like load balancing, authentication, failure recovery, and observability without requiring code changes. This provides a way to manage microservices that is more robust and flexible than using an API gateway alone.

Loadbalancers: The fabric for your micro services

Chiradeep Vittal

The document discusses the importance of load balancers for microservices and container-based architectures. It covers how load balancing needs have evolved from traditional monolithic applications to modern approaches that support dynamic microservices topologies, zero-downtime deployments, client-side load balancing, and advanced patterns like circuit breakers. It also introduces NetScaler CPX as a cloud-native load balancer solution for container environments.

Microservices:  The phantom menace . Istio Service Mesh:  the new hope

Sergii Bishyr

Introduction to Istio Service Mesh

Georgios Andrianakis

Microservices With Istio Service Mesh

Natanael Fonseca

Monitoring docker, k8s and your applications with the elastic stack

SmartWave

This document discusses using the Elastic Stack, specifically Beats, to monitor Docker, Kubernetes, and applications. It provides an overview of the Beats family of lightweight data shippers, including Filebeat, Metricbeat, Packetbeat, Heartbeat, and Auditbeat. It then discusses how Metricbeat and metadata processors can be used to monitor Docker and Kubernetes by enriching events with metadata. It also covers autodiscover functionality where Metricbeat can dynamically start and stop modules based on Docker events. Lastly, it discusses different deployment strategies for the Elastic Stack with Docker and Kubernetes.

Confluent Cloud makes Devops engineers lives a lot more easier. Yet moving 1500 microservices, 10K topics and 100K partitions to a multi-cluster Confluent cloud can be a challenge. In this talk you will hear about 5 lessons that Wix has learned in order to successfully meet this challenge. These lessons include: 1. Automation, Automation, Automation - all the process has to be completely automated at such scale 2. Prefer a gradual approach - E.g. migrate topics in small chunks and not all at once. Reduces risks if things go bad 3. Cleanup first - avoid migrating unused topics or topics with too many unnecessary partitions

The Service Mesh: It's about Traffic

C4Media

Video and slides synchronized, mp3 and slide download available at URL http://bit.ly/2mcpD5B. Oliver Gould talks about the Linkerd project, a service mesh hosted by the Cloud Native Computing Foundation, to give operators control over the traffic between their microservices. He shares the lessons they've learned helping dozens of organizations get to production with Linkerd and how they've applied these lessons to tackle complexity with Linkerd. Filmed at qconnewyork.com. Oliver Gould is co-founder and CTO at Buoyant, Inc.

Introduction to Istio on Kubernetes

Jonh Wendell

This document discusses Istio, an open source service mesh that provides traffic management, telemetry and security for microservices applications on Kubernetes. It introduces key Istio concepts like the sidecar proxy Envoy, the control plane components Pilot, Mixer and Citadel, and how they work together to provide service discovery, load balancing, failure recovery, access control and other capabilities across microservices. The presentation concludes with an offer to demonstrate Istio's features in more depth.

APIdays Paris 2018 - API Management is Dead, Augusto Marietti, CEO and Co-Fou...

apidays

Exposing and Controlling Kafka Event Streaming with Kong Konnect Enterprise |...

HostedbyConfluent

Event streaming allows companies to build more scalable and loosely coupled real-time applications supporting massive concurrency demands and simplifying the construction of services. At the same time, API management provides capabilities to securely control the upstream services consumption, including the event processing infrastructure. This session shows how Kong Konnect Enterprise can complement Kafka Event Streaming, exposing it to new and external consumers while applying specific and critical policies to control its consumption, including API key, OAuth/OIDC and others for authentication, rate limiting, caching, log processing, etc.

Getting Started with Kubernetes and Consul

Mitchell Pronschinske

The service mesh: resilient communication for microservice applications

Outlyer

Modern application architecture is shifting from monolith to microservices: componentized, containerized, and orchestrated with systems like Kubernetes, Mesos, and Docker Swarm. While this environment is resilient to many failures of both hardware and software, applications require more than this to be truly resilient. In this talk, we introduce the notion of a "service mesh": a userspace infrastructure layer designed to manage service-to-service communication in microservice applications, including handling partial failures and unexpected load, while reducing tail latencies and degrading gracefully in the presence of component failure.

Moving 150 TB of data resiliently on Kafka With Quorum Controller on Kubernet...

HostedbyConfluent

At Wells-Fargo, we move 150 TB of logs data from our syslogs to Splunk forwarders that get indexed and organized for analytic queries. As we modernize and migrate our applications to our hybrid cloud the performance expectations for this infrastructure will proportionately increase. Those improvements include the resilience of the end to end infrastructure. First, we decoupled the applications from their logging interface through a loglibrary which split the streams of logs from their sources to KAFKA which routed them to two separate destinations Splunk and ELK respectively. We also used prometheus and grafana for monitoring the metrics. We also deployed KAFKA, Splunk, ELK, Prometheus and Grafana on the Kubernetes clusters. Confluent had released a version of KAFKA without Zookeeper and replaced its functionality with Quorum Controller. The Quorum-Controller version exhibited better disposability one of the 12factors that's important for Cloud-Nativeness. We packaged this version into a Kubernetes operator called Keda and deployed this for auto-scaling. We tested this to simulate the amount of logdata that we typically generate in production. Based on the above we have also implemented distributed tracing and help make it just as resilient. We will share our lessons learnt, the patterns and practices to modernize both our underlying runtime platforms and our applications with highly performing and resilient event-driven architectures.

Camel k Taiwan Java user group

Christina Lin

This document discusses Apache Camel and how it can be used for microservices integration on Kubernetes and OpenShift platforms. It provides demonstrations of Camel K, which allows Camel integration applications to run natively on Kubernetes, and how Camel K can be used with Knative to run integration logic as serverless functions. The document also briefly mentions Istio for microservices mesh management and Syndesis for integration with Camel K.

5 lessons learned for Successful Migration to Confluent Cloud

Natan Silnitsky

Confluent Cloud makes Devops engineers lives a lot more easier. Yet moving 1500 microservices, 10K topics and 100K partitions to a multi-cluster Confluent cloud can be a challenge. In this talk you will hear about 5 lessons that Wix has learned in order to successfully meet this challenge. These lessons include: 1. Automation, Automation, Automation - all the process has to be completely automated at such scale 2. Prefer a gradual approach - E.g. migrate topics in small chunks and not all at once. Reduces risks if things go bad 3. First migrate test topics with relayed real traffic - So data will be real but will not effect production. 4. Cleanup first - avoid migrating unused topics or topics with too many unnecessary partitions 5. Adapt to Confluent Cloud APIs - e.g. lag monitoring

Serverless integration anatomy

Christina Lin

Creating a Kafka Topic. Super easy? | Andrew Stevenson and Marios Andreopoulo...

HostedbyConfluent

NGINX Microservices Reference Architecture: Ask Me Anything

NGINX, Inc.

On-demand recording: http://bit.ly/2mg6NZm The NGINX Microservices Reference Architecture (MRA) is getting big interest from software developers. Our recent webinar on Three Models in the MRA was one of our most popular ever. Now, microservices experts Chris Stetson and Ben Horowitz answer all your questions in this Ask Me Anything (AMA) session. Chris and Ben have helped to build Sirius Satellite Radio, Intel.com, Lexus.com, Microsoft.com, Visa.com, and many more. So come ready to ask Chris and Ben anything about the Microservices Reference Architecture! During this webinar, Chris and Ben answer questions about: - Which MRA model is best for your application - What problems microservices and the MRA solve - How to apply the MRA in your organization - What challenges others are facing

Cloud Compliance with Open Policy Agent

QAware GmbH

Cloud Native Virtual Summit featuring Kubernetes, April 2020, talk by Alex Krause (@alex0ptr, Software Engineer at QAware) == Please download slides if blurred! == Abstract: Microservices distribute the complexity of applications into smaller processes and infrastructure. In conclusion policies for encyrption, cost labelling or access control become decentralized too. The already complex components of a cloud-native application, such as container orchestration, IaaS components and CI/CD pipelines, complicate the technically uniform definition of these guidelines further. OPA (Open Policy Agent) is a CNCF tool to define and check policies. What makes opa special is the easy integration into cloud-native environments in combination with rego, a universal logical programming language which allows defining policies across technology boundaries. This technical presentation is an introduction into OPA and demonstrates typical use-cases.

Service mesh on Kubernetes - Istio 101

Huy Vo

New Features in MongoDB Atlas

MongoDB

Speaker: Cory Mintz, Lead Engineer, MongoDB It has been one year since MongoDB Atlas was revealed at MongoDB World 2016. In this session lead Atlas engineer Cory Mintz will walk you through new Atlas features that have been built over the last year, how they work under the hood, and some of the implementation challenges that the team faced. Cory will discuss the building blocks of IaaS providers and how we leverage them in Atlas. VPC peering and Live Import are on the agenda, as well as features so new that you will hear them announced at MongoDB World. What You Will Learn: - How to use the latest features in MongoDB Atlas

Kafka Streams

Cristiano Altmann

This document discusses Kafka Streams and stream processing concepts. It defines stream processing as computation over an unbounded, ever-growing data stream. Some key concepts discussed include event time vs processing time, local vs external state, and different types of time windows. Common stream processing patterns like filtering, joins, and maintaining local state are also covered. The document contrasts Kafka and Kafka Streams, and discusses the stream-table duality and how systems that allow transitioning between these views are more powerful.

DevDay: Creating an Awesome Developer Experience for Corda, Web3 Labs

Web3j Corda aims to simplify Corda application development. It allows developers to create a new Corda project, generate CorDapp client wrappers, and start a network and deploy flows with just three commands. This greatly simplifies the Corda developer workflow by automating many common tasks like project setup, contract and flow creation, client generation, and network deployment. The goal is to create a better developer experience for building Corda applications.

Kubernetes + netflix oss

Cristiano Altmann

DevDay: Developer Updates: Visual Studio Code, Java 11 and OpenAPI (oh my), L...

This document discusses integrating Corda applications with external systems through HTTP/REST APIs. It introduces Cordit, an open-source project that aims to automatically generate REST APIs from Corda code to allow Cordapps to be invoked via HTTP. Cordit uses techniques like bytecode manipulation and Swagger integration to provide fully typed, high-performance REST bindings to the Corda RPC API and capabilities like starting flows, querying vaults, and tracking progress. The project plans to contribute code to the Corda GitHub and add additional features over the next year.

Confluent Operator as Cloud-Native Kafka Operator for Kubernetes

Kai Wähner

Agenda: - Cloud Native vs. SaaS / Serverless Kafka - The Emergence of Kubernetes - Kafka on K8s Deployment Challenges - Confluent Operator as Kafka Operator - Q&A Confluent Operator enables you to: Provisioning, management and operations of Confluent Platform (including ZooKeeper, Apache Kafka, Kafka Connect, KSQL, Schema Registry, REST Proxy, Control Center) Deployment on any Kubernetes Platform (Vanilla K8s, OpenShift, Rancher, Mesosphere, Cloud Foundry, Amazon EKS, Azure AKS, Google GKE, etc.) Automate provisioning of Kafka pods in minutes Monitor SLAs through Confluent Control Center or Prometheus Scale Kafka elastically, handle fail-over & Automate rolling updates Automate security configuration Built on our first hand knowledge of running Confluent at scale Fully supported for production usage

Leveraging HybridMultiCloud for Devops and Automation Platform

DevOps Indonesia

What's hot

5 lessons learned for successful migration to Confluent cloud | Natan Silinit...

HostedbyConfluent

The Service Mesh: It's about Traffic

C4Media

Introduction to Istio on Kubernetes

Jonh Wendell

APIdays Paris 2018 - API Management is Dead, Augusto Marietti, CEO and Co-Fou...

apidays

Exposing and Controlling Kafka Event Streaming with Kong Konnect Enterprise |...

HostedbyConfluent

Getting Started with Kubernetes and Consul

Mitchell Pronschinske

The service mesh: resilient communication for microservice applications

Outlyer

Moving 150 TB of data resiliently on Kafka With Quorum Controller on Kubernet...

HostedbyConfluent

Camel k Taiwan Java user group

Christina Lin

5 lessons learned for Successful Migration to Confluent Cloud

Natan Silnitsky

Confluent Cloud makes Devops engineers lives a lot more easier. Yet moving 1500 microservices, 10K topics and 100K partitions to a multi-cluster Confluent cloud can be a challenge. In this talk you will hear about 5 lessons that Wix has learned in order to successfully meet this challenge. These lessons include: 1. Automation, Automation, Automation - all the process has to be completely automated at such scale 2. Prefer a gradual approach - E.g. migrate topics in small chunks and not all at once. Reduces risks if things go bad 3. First migrate test topics with relayed real traffic - So data will be real but will not effect production. 4. Cleanup first - avoid migrating unused topics or topics with too many unnecessary partitions 5. Adapt to Confluent Cloud APIs - e.g. lag monitoring

Serverless integration anatomy

Christina Lin

Creating a Kafka Topic. Super easy? | Andrew Stevenson and Marios Andreopoulo...

HostedbyConfluent

NGINX Microservices Reference Architecture: Ask Me Anything

NGINX, Inc.

Cloud Compliance with Open Policy Agent

QAware GmbH

Service mesh on Kubernetes - Istio 101

Huy Vo

New Features in MongoDB Atlas

MongoDB

Kafka Streams

Cristiano Altmann

DevDay: Creating an Awesome Developer Experience for Corda, Web3 Labs

Kubernetes + netflix oss

Cristiano Altmann

DevDay: Developer Updates: Visual Studio Code, Java 11 and OpenAPI (oh my), L...

What's hot (20)

5 lessons learned for successful migration to Confluent cloud | Natan Silinit...

The Service Mesh: It's about Traffic

Introduction to Istio on Kubernetes

APIdays Paris 2018 - API Management is Dead, Augusto Marietti, CEO and Co-Fou...

Exposing and Controlling Kafka Event Streaming with Kong Konnect Enterprise |...

Getting Started with Kubernetes and Consul

The service mesh: resilient communication for microservice applications

Moving 150 TB of data resiliently on Kafka With Quorum Controller on Kubernet...

Camel k Taiwan Java user group

5 lessons learned for Successful Migration to Confluent Cloud

Serverless integration anatomy

Creating a Kafka Topic. Super easy? | Andrew Stevenson and Marios Andreopoulo...

NGINX Microservices Reference Architecture: Ask Me Anything

Cloud Compliance with Open Policy Agent

Service mesh on Kubernetes - Istio 101

New Features in MongoDB Atlas

Kafka Streams

DevDay: Creating an Awesome Developer Experience for Corda, Web3 Labs

Kubernetes + netflix oss

DevDay: Developer Updates: Visual Studio Code, Java 11 and OpenAPI (oh my), L...

Similar to CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects

Confluent Operator as Cloud-Native Kafka Operator for Kubernetes

Kai Wähner

Leveraging HybridMultiCloud for Devops and Automation Platform

DevOps Indonesia

DevOpsDays Houston 2019 - Terry Shea - Centralizing Kubernetes Operations

DevOpsDays Houston

Standardizing Microservice Management With a Service Mesh

Aspen Mesh

Container world hybridnetworking_rev2

Prem Sankar Gopannan

The document discusses managing containers and virtual machines in hybrid networking environments. It provides an overview of Kubernetes networking basics and challenges with Kubernetes and OpenStack interoperability. It then describes the OpenStack Kuryr project which bridges container networking and OpenStack Neutron. It discusses Kuryr components and modes of operation. It also briefly outlines Opendaylight COE architecture for integrating Kubernetes and OpenStack. Finally, it introduces the concept of a service mesh for managing communication between microservices and summarizes key components of the Istio service mesh.

Kubernetes And Istio and Azure AKS DevOps

Ofir Makmal

This document discusses Kubernetes and Istio. It provides an overview of Kubernetes as a container orchestration engine and cluster management system. It then discusses the rise of microservices and some of the complexities they introduce. It introduces Istio as a service mesh that takes care of communication and policies between microservices to help manage this complexity. Key components of Istio like Pilot, Mixer, and Envoy are described. Examples of capabilities like intelligent routing, failure handling, and fault injection are provided. A demo application and platform is used to demonstrate Istio's observability, monitoring, and traffic shifting features.

IBM Bluemix Nice meetup #5 - 20170504 - Orchestrer Docker avec Kubernetes

IBM France Lab

This document provides an overview of Kubernetes (K8s), an open-source platform for automating deployment, scaling, and operations of application containers. It defines key Kubernetes terminology like nodes, master node, worker nodes, pods, replication controllers, services, secrets and proxies. Diagrams show the Kubernetes architecture with the master node controlling and managing the cluster through kubectl and REST APIs, and worker nodes running pods and containers managed by kubelet and kube-proxy.

Containers and Kubernetes

Altoros

The combination of StackPointCloud with NetApp creates NetApp Kubernetes Service, the industry’s first complete Kubernetes platform for multi-cloud deployments and a complete cloud-based stack for Azure, Google Cloud, AWS, and NetApp HCI. Further, Trident is a fully supported open source project maintained by NetApp, designed from the ground up to help meet the sophisticated persistence demands of containerized applications.

Centralizing Kubernetes and Container Operations

Kublr

While developers see and realize the benefits of Kubernetes, how it improves efficiencies, saves time, and enables focus on the unique business requirements of each project; InfoSec, infrastructure, and software operations teams still face challenges when managing a new set of tools and technologies, and integrating them into an existing enterprise infrastructure. These meetup slides go over what’s needed for a general architecture of a centralized Kubernetes operations layer based on open source components such as Prometheus, Grafana, ELK Stack, Keycloak, etc., and how to set up reliable clusters and multi-master configuration without a load balancer. It also outlines how these components should be combined into an operations-friendly enterprise Kubernetes management platform with centralized monitoring and log collection, identity and access management, backup and disaster recovery, and infrastructure management capabilities.  This presentation will show real-world open source projects use cases to implement an ops-friendly environment. Check out this and more webinars in our BrightTalk channel: https://goo.gl/QPE5rZ

Reduce the complexities of managing Kubernetes clusters anywhere 2

Ashnikbiz

PSOCLD 1007 Cisco Hybrid Cloud Platform for Google Cloud

Rohit Agarwalla

The document provides an overview of the Cisco Hybrid Cloud Platform for Google Cloud. It discusses how the solution allows customers to develop and deploy applications anywhere across on-premises and Google Cloud environments using consistent tools and policies. Key components of the solution include Cisco Container Platform, HyperFlex, ACI, CloudCenter, Stealthwatch Cloud, and Apigee for hybrid deployments. The demo shows how the Booksinfo sample app can be deployed across on-prem and Google Kubernetes Engine clusters with Istio for service mesh capabilities.

Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)

QAware GmbH

Cloud Native Night, April 2018, Mainz: Workshop led by Jörg Schad (@joerg_schad, Technical Community Lead / Developer at Mesosphere) Join our Meetup: https://www.meetup.com/de-DE/Cloud-Native-Night/ PLEASE NOTE: During this workshop, Jörg showed many demos and the audience could participate on their laptops. Unfortunately, we can't provide these demos. Nevertheless, Jörg's slides give a deep dive into the topic. DETAILS ABOUT THE WORKSHOP: Kubernetes has been one of the topics in 2017 and will probably remain so in 2018. In this hands-on technical workshop you will learn how best to deploy, operate and scale Kubernetes clusters from one to hundreds of nodes using DC/OS. You will learn how to integrate and run Kubernetes alongside traditional applications and fast data services of your choice (e.g. Apache Cassandra, Apache Kafka, Apache Spark, TensorFlow and more) on any infrastructure. This workshop best suits operators focussed on keeping their apps and services up and running in production and developers focussed on quickly delivering internal and customer facing apps into production. You will learn how to: - Introduction to Kubernetes and DC/OS (including the differences between both) - Deploy Kubernetes on DC/OS in a secure, highly available, and fault-tolerant manner - Solve operational challenges of running a large/multiple Kubernetes cluster - One-click deploy big data stateful and stateless services alongside a Kubernetes cluster

Vault Digital Transformation

Stenio Ferreira

This document provides an overview of Hashicorp Vault and how it can be used for securing secrets and sensitive data in modern, dynamic cloud environments. It discusses the challenges of digital transformation and how Vault addresses them through secret management workflows. The basic Vault workflow is described along with examples for Kubernetes and legacy applications. Finally, Vault Enterprise features for replication, access control, multi-factor authentication and compliance are covered.

The Good, the Bad and the Ugly of Migrating Hundreds of Legacy Applications ...

Josef Adersberger

Running applications on Kubernetes can provide a lot of benefits: more dev speed, lower ops costs, and a higher elasticity & resiliency in production. Kubernetes is the place to be for cloud native apps. But what to do if you’ve no shiny new cloud native apps but a whole bunch of JEE legacy systems? No chance to leverage the advantages of Kubernetes? Yes you can! We’re facing the challenge of migrating hundreds of JEE legacy applications of a major German insurance company onto a Kubernetes cluster within one year. We're now close to the finish line and it worked pretty well so far. The talk will be about the lessons we've learned - the best practices and pitfalls we've discovered along our way. We'll provide our answers to life, the universe and a cloud native journey like: - What technical constraints of Kubernetes can be obstacles for applications and how to tackle these? - How to architect a landscape of hundreds of containerized applications with their surrounding infrastructure like DBs MQs and IAM and heavy requirements on security? - How to industrialize and govern the migration process? - How to leverage the possibilities of a cloud native platform like Kubernetes without challenging the tight timeline?

Migrating Hundreds of Legacy Applications to Kubernetes - The Good, the Bad, ...

QAware GmbH

CloudNativeCon North America 2017, Austin (Texas, USA): Talk by Josef Adersberger (@adersberger, CTO at QAware) Abstract: Running applications on Kubernetes can provide a lot of benefits: more dev speed, lower ops costs, and a higher elasticity & resiliency in production. Kubernetes is the place to be for cloud native apps. But what to do if you’ve no shiny new cloud native apps but a whole bunch of JEE legacy systems? No chance to leverage the advantages of Kubernetes? Yes you can! We’re facing the challenge of migrating hundreds of JEE legacy applications of a major German insurance company onto a Kubernetes cluster within one year. We're now close to the finish line and it worked pretty well so far. The talk will be about the lessons we've learned - the best practices and pitfalls we've discovered along our way. We'll provide our answers to life, the universe and a cloud native journey like: - What technical constraints of Kubernetes can be obstacles for applications and how to tackle these? - How to architect a landscape of hundreds of containerized applications with their surrounding infrastructure like DBs MQs and IAM and heavy requirements on security? - How to industrialize and govern the migration process? - How to leverage the possibilities of a cloud native platform like Kubernetes without challenging the tight timeline?

Citrix Day 2015 Net Scaler Release 10.5 Update v10

Digicomp Academy Suisse Romande SA

Kubernetes: Dive into the Future of Infrastructure

GlobalLogic Ukraine

This presentation is devoted to current trends that affect DevOps activities. It also deals with Cloud Flex Framework, a Kubernetes-based framework, which provides a set of flexible and comprehensive operation principles to cover all stages of a modern application life cycle. This presentation was held by Denys Vasyliev (Lead Software Engineer, Consultant, GlobalLogic) at GlobalLogic Kyiv DevOps Career Day on June 9, 2018. Learn more: https://www.globallogic.com/ua/events/globallogic-kyiv-devops-career-day-summary

Extending The Power Of Anypoint Platform Using Anypoint Service Mesh

AaronLieberman5

Most enterprises today use Microservices. Microservices are often built using different languages and deployment models, which can result in complex runtime environments that can be costly and difficult to operate. A service mesh is typically used to abstract governance considerations behind microservices, regardless of the technology used to create the microservices. Within the last year, MuleSoft has released Anypoint Service Mesh, which enables your business to extend your application network to include your MuleSoft applications, your non-MuleSoft applications, and now your microservices, all seamlessly managed from one common Anypoint Platform control plane. In this meetup, you will learn: -What is a service mesh, and when do you need one -How a service mesh relates to API Management -How Anypoint Service Mesh can help extend your application network to any service -Demo with Anypoint Service Mesh managed microservices that are deployed to a publicly available Kubernetes cluster

Load Balancing in the Cloud using Nginx & Kubernetes

Lee Calcote

Episode 1: Building Kubernetes-as-a-Service

Mesosphere Inc.

The Kubernetes cloud native landscape is vast. Delivering a solution requires managing a puzzling array of required tooling, monitoring, disaster recovery, and other solutions that lie outside the realm of the central cluster. The governing body of Kubernetes, the Cloud Native Computing Foundation, has developed guidance for organizations interested in this topic by publishing the Cloud Native Landscape, but while a list of options is helpful it does not give operations and DevOps professionals the knowledge they need to execute. Learn best practices of setting up and managing the tools needed around Kubernetes. This presentation covers popular open source options (to avoid lock in) and how one can implement and manage these tools on an ongoing basis. Learn from, and do not repeat, the mistakes of previous centralized platforms. In this session, attendees will learn: 1. Cloud Native Landscape 101 - Prometheus, Sysdig, NGINX, and more. Where do they all fit in Kubernetes solution? 2. Avoiding the OpenStack sprawl of managing a multiverse of required tooling in the Kubernetes world. 3. Leverage technology like Kubernetes, now available on DC/OS, to provide part of the infrastructure framework that helps manage cloud native application patterns.

Similar to CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects (20)

Confluent Operator as Cloud-Native Kafka Operator for Kubernetes

Leveraging HybridMultiCloud for Devops and Automation Platform

DevOpsDays Houston 2019 - Terry Shea - Centralizing Kubernetes Operations

Standardizing Microservice Management With a Service Mesh

Container world hybridnetworking_rev2

Kubernetes And Istio and Azure AKS DevOps

IBM Bluemix Nice meetup #5 - 20170504 - Orchestrer Docker avec Kubernetes

Containers and Kubernetes

Centralizing Kubernetes and Container Operations

Reduce the complexities of managing Kubernetes clusters anywhere 2

PSOCLD 1007 Cisco Hybrid Cloud Platform for Google Cloud

Kubernetes One-Click Deployment: Hands-on Workshop (Mainz)

Vault Digital Transformation

The Good, the Bad and the Ugly of Migrating Hundreds of Legacy Applications ...

Migrating Hundreds of Legacy Applications to Kubernetes - The Good, the Bad, ...

Citrix Day 2015 Net Scaler Release 10.5 Update v10

Kubernetes: Dive into the Future of Infrastructure

Extending The Power Of Anypoint Platform Using Anypoint Service Mesh

Load Balancing in the Cloud using Nginx & Kubernetes

Episode 1: Building Kubernetes-as-a-Service

Recently uploaded

Vitthal Shirke Java Microservices Resume.pdf

Vitthal Shirke

2024 eCommerceDays Toulouse - Sylius 2.0.pdf

Łukasz Chruściel

Using Xen Hypervisor for Functional Safety

Ayan Halder

socradar-q1-2024-aviation-industry-report.pdf

SOCRadar

SOCRadar's Aviation Industry Q1 Incident Report is out now! The aviation industry has always been a prime target for cybercriminals due to its critical infrastructure and high stakes. In the first quarter of 2024, the sector faced an alarming surge in cybersecurity threats, revealing its vulnerabilities and the relentless sophistication of cyber attackers. SOCRadar’s Aviation Industry, Quarterly Incident Report, provides an in-depth analysis of these threats, detected and examined through our extensive monitoring of hacker forums, Telegram channels, and dark web platforms.

8 Best Automated Android App Testing Tool and Framework in 2024.pdf

kalichargn70th171

Fundamentals of Programming and Language Processors

Rakesh Kumar R

原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样

mz5nrf0n

原版一模一样【微信：741003700 】【美国纽约州立大学奥尔巴尼分校毕业证学位证书】【微信：741003700 】学位证，留信认证（真实可查，永久存档）offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。本公司拥有海外各大学样板无数，能完美还原海外各大学 Bachelor Diploma degree, Master Degree Diploma 1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700 留信网认证的作用: 1:该专业认证可证明留学生真实身份 2:同时对留学生所学专业登记给予评定 3:国家专业人才认证中心颁发入库证书 4:这个认证书并且可以归档倒地方 5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息 6:个人职称评审加20分 7:个人信誉贷款加10分 8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才

UI5con 2024 - Bring Your Own Design System

Peter Muessig

How do you combine the OpenUI5/SAPUI5 programming model with a design system that makes its controls available as Web Components? Since OpenUI5/SAPUI5 1.120, the framework supports the integration of any Web Components. This makes it possible, for example, to natively embed own Web Components of your design system which are created with Stencil. The integration embeds the Web Components in a way that they can be used naturally in XMLViews, like with standard UI5 controls, and can be bound with data binding. Learn how you can also make use of the Web Components base class in OpenUI5/SAPUI5 to also integrate your Web Components and get inspired by the solution to generate a custom UI5 library providing the Web Components control wrappers for the native ones.

Graspan: A Big Data System for Big Code Analysis

Aftab Hussain

We built a disk-based parallel graph system, Graspan, that uses a novel edge-pair centric computation model to compute dynamic transitive closures on very large program graphs. We implement context-sensitive pointer/alias and dataflow analyses on Graspan. An evaluation of these analyses on large codebases such as Linux shows that their Graspan implementations scale to millions of lines of code and are much simpler than their original implementations. These analyses were used to augment the existing checkers; these augmented checkers found 132 new NULL pointer bugs and 1308 unnecessary NULL tests in Linux 4.4.0-rc5, PostgreSQL 8.3.9, and Apache httpd 2.2.18. - Accepted in ASPLOS ‘17, Xi’an, China. - Featured in the tutorial, Systemized Program Analyses: A Big Data Perspective on Static Analysis Scalability, ASPLOS ‘17. - Invited for presentation at SoCal PLS ‘16. - Invited for poster presentation at PLDI SRC ‘16.

WWDC 2024 Keynote Review: For CocoaCoders Austin

Patrick Weigel

E-commerce Development Services- Hornet Dynamics

Hornet Dynamics

LORRAINE ANDREI_LEQUIGAN_HOW TO USE ZOOM

lorraineandreiamcidl

KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD

rodomar2

Oracle Database 19c New Features for DBAs and Developers.pptx

Remote DBA Services

Hand Rolled Applicative User ValidationCode Kata

Philip Schwarz

Could you use a simple piece of Scala validation code (granted, a very simplistic one too!) that you can rewrite, now and again, to refresh your basic understanding of Applicative operators <*>, <*, *>? The goal is not to write perfect code showcasing validation, but rather, to provide a small, rough-and ready exercise to reinforce your muscle-memory. Despite its grandiose-sounding title, this deck consists of just three slides showing the Scala 3 code to be rewritten whenever the details of the operators begin to fade away. The code is my rough and ready translation of a Haskell user-validation program found in a book called Finding Success (and Failure) in Haskell - Fall in love with applicative functors.

GreenCode-A-VSCode-Plugin--Dario-Jurisic

Green Software Development

Measures in SQL (SIGMOD 2024, Santiago, Chile)

Julian Hyde

SQL has attained widespread adoption, but Business Intelligence tools still use their own higher level languages based upon a multidimensional paradigm. Composable calculations are what is missing from SQL, and we propose a new kind of column, called a measure, that attaches a calculation to a table. Like regular tables, tables with measures are composable and closed when used in queries. SQL-with-measures has the power, conciseness and reusability of multidimensional languages but retains SQL semantics. Measure invocations can be expanded in place to simple, clear SQL. To define the evaluation semantics for measures, we introduce context-sensitive expressions (a way to evaluate multidimensional expressions that is consistent with existing SQL semantics), a concept called evaluation context, and several operations for setting and modifying the evaluation context. A talk at SIGMOD, June 9–15, 2024, Santiago, Chile Authors: Julian Hyde (Google) and John Fremlin (Google) https://doi.org/10.1145/3626246.3653374

Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...

XfilesPro

A Study of Variable-Role-based Feature Enrichment in Neural Models of Code

Aftab Hussain

Understanding variable roles in code has been found to be helpful by students in learning programming -- could variable roles help deep neural models in performing coding tasks? We do an exploratory study. - These are slides of the talk given at InteNSE'23: The 1st International Workshop on Interpretability and Robustness in Neural Software Engineering, co-located with the 45th International Conference on Software Engineering, ICSE 2023, Melbourne Australia

Atelier - Innover avec l’IA Générative et les graphes de connaissances

Neo4j

Atelier - Innover avec l’IA Générative et les graphes de connaissances Allez au-delà du battage médiatique autour de l’IA et découvrez des techniques pratiques pour utiliser l’IA de manière responsable à travers les données de votre organisation. Explorez comment utiliser les graphes de connaissances pour augmenter la précision, la transparence et la capacité d’explication dans les systèmes d’IA générative. Vous partirez avec une expérience pratique combinant les relations entre les données et les LLM pour apporter du contexte spécifique à votre domaine et améliorer votre raisonnement. Amenez votre ordinateur portable et nous vous guiderons sur la mise en place de votre propre pile d’IA générative, en vous fournissant des exemples pratiques et codés pour démarrer en quelques minutes.

Recently uploaded (20)

Vitthal Shirke Java Microservices Resume.pdf

2024 eCommerceDays Toulouse - Sylius 2.0.pdf

Using Xen Hypervisor for Functional Safety

socradar-q1-2024-aviation-industry-report.pdf

8 Best Automated Android App Testing Tool and Framework in 2024.pdf

Fundamentals of Programming and Language Processors

原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样

UI5con 2024 - Bring Your Own Design System

Graspan: A Big Data System for Big Code Analysis

WWDC 2024 Keynote Review: For CocoaCoders Austin

E-commerce Development Services- Hornet Dynamics

LORRAINE ANDREI_LEQUIGAN_HOW TO USE ZOOM

KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD

Oracle Database 19c New Features for DBAs and Developers.pptx

Hand Rolled Applicative User ValidationCode Kata

GreenCode-A-VSCode-Plugin--Dario-Jurisic

Measures in SQL (SIGMOD 2024, Santiago, Chile)

Everything You Need to Know About X-Sign: The eSign Functionality of XfilesPr...

A Study of Variable-Role-based Feature Enrichment in Neural Models of Code

Atelier - Innover avec l’IA Générative et les graphes de connaissances

CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects

1. How to Gain Insights from Istio by Leveraging Tools Like Jaeger, Prometheus and Cortex CNCF WEBINAR SERIES Neeraj Poddar Platform Lead

2. © 2018 Cloud Native Computing Foundation2 Service A Container 1 Microservices Without a Service Mesh Flask OpenTracing Flask Kingpin Lemur Open SSL 110d Python Service B Container 1 http.createServer Jaeger Zoologist Express Open SSL 102l Node.js Service C Container 1 Spring OpenTracing Spring Disco-java Ribbon Open SSL 110f Java

3. © 2018 Cloud Native Computing Foundation3 Service A Container 1 Microservices With a Service Mesh Flask Service Mesh Python Service B Container 1 http.createServer Service Mesh Node.js Service C Container 1 Spring Service Mesh Java

5. © 2018 Cloud Native Computing Foundation5 Service B Service C Container 2 Container 2 Service A Container 2 Container 1 Microservices with Istio Flask Python Container 1 http.createServer Node.js Container 1 Spring Java Istio Control Plane Config data to Envoys Policy,quota,telemetry TLS certs to Envoys Monitors K8s for new pods to inject Envoy EnvoyEnvoyEnvoy Mixer Citadel Sidecar InjectorPilot

6. © 2018 Cloud Native Computing Foundation6 Istio Features A bundling of capabilities • Service discovery • Load balancing • Advanced traffic management • Enhanced security • Policy • Tracing • Metrics

8. © 2018 Cloud Native Computing Foundation8 Tracing with Istio • Automatic tracing of all network requests • Context handling • Asynchronous span reporting – Start and end times – Source & destination service – HTTP headers • Application header propagation • Multiple backend integrations – Zipkin – Jaeger Distributed Tracing with Istio in AWS Tracing gRPC with Istio

9. © 2018 Cloud Native Computing Foundation9 Jaeger • OpenTracing compatible API • Flexible & scalable architecture • Multiple storage backends – Cassandra – Elasticsearch • Advanced sampling • Accepts Zipkin spans • CNCF project & active OS community • Great UI

12. © 2018 Cloud Native Computing Foundation12 Metrics with Istio • Envoy stats – Request Pending – Connection bytes buffered – SSL failures • Mixer service stats – Request latency – Request counts • Custom metrics • Telemetry monitoring options – StatsD – Stackdriver – Prometheus Envoy Stats Overview

13. © 2018 Cloud Native Computing Foundation13 Prometheus • Pull model • Flexible query API • Efficient storage • Dashboard integrations – Grafana • Exporters – Prometheus Integrations • CNCF project & strong OS community

14. © 2018 Cloud Native Computing Foundation14 Enhancing Prometheus with Cortex • Long term durable storage – AWS DynamoDB – Bigtable – Cassandra • Scalable Prometheus query API • Multi-tenancy • Easy to manage • Intent to add as CNCF project

15. © 2018 Cloud Native Computing Foundation15 More on Getting the Most from Istio Istio 0.8 Release • Stability & Scalability • Envoy v2 • Istio v1alpha3 We are active users of Istio and are happy to talk in greater depth Please feel free to reach out: • neeraj@aspenmesh.io • http://aspenmesh.io/blog v0.8 release

16. Questions

17. Thank You

Editor's Notes

Distributed tracing has been called the “the most wanted and missed tool in the microservice world”

CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects

Similar to CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects (20)

Recently uploaded

Recently uploaded (20)

CNCF Webinar - How to Gain Insights from Istio by leveraging CNCF projects

Editor's Notes