Most enterprises today use Microservices. Microservices are often built using different languages and deployment models, which can result in complex runtime environments that can be costly and difficult to operate. A service mesh is typically used to abstract governance considerations behind microservices, regardless of the technology used to create the microservices. Within the last year, MuleSoft has released Anypoint Service Mesh, which enables your business to extend your application network to include your MuleSoft applications, your non-MuleSoft applications, and now your microservices, all seamlessly managed from one common Anypoint Platform control plane. In this meetup, you will learn: -What is a service mesh, and when do you need one -How a service mesh relates to API Management -How Anypoint Service Mesh can help extend your application network to any service -Demo with Anypoint Service Mesh managed microservices that are deployed to a publicly available Kubernetes cluster

1. Extending the power of AnyPoint Platform using
Anypoint Service Mesh
August 12, 2020
Denver MuleSoft Meetup Group

2. All contents © MuleSoft Inc.
Agenda
2
• 6:00PM – 6:10PM – Introduction
• 6:10PM – 7:10PM – Service Mesh Presentation and Demos
• 7:10PM – 7:30PM – Q&A
• 7:30PM – Meetup Summary and Future Schedule

3. All contents © MuleSoft Inc.
Introductions
3
• About the organizer:
– Big Compass
• About the presenter:
– Sridhar Yenamandra

4. All contents © MuleSoft Inc. 4
Presenter - Sridhar Yenamandra
• Director - Architecture, Salesforce Advisory, NTT Data Inc.
• Primarily work with MuleSoft, Salesforce Integration & Oracle
Middleware /PaaS
• Certified in
– AWS Solutions Architecture ,Oracle PaaS, Mobile backend,
MuleSoft Integration Architect (Level 1), Mulesoft Platform
Architect(MCPA), Java and more..
• Key Focus areas
– Enterprise Architecture & Strategy.
– PaaS-iPaaS/Middleware of Mulesoft/Salesforce/Heroku/
Oracle
– Devops, Microservices
https://www.linkedin.com/in/sridharyenamandra/

5. All contents © MuleSoft Inc. 5
• Pictures in this presentation are not mine and have been taken from
various sources in the internet.
• Opinions expressed here are solely mine.
Disclaimer

6. All contents © MuleSoft Inc. 6
• Service Mesh background
• Anypoint Service Mesh
• Demo
Service Mesh Presentation Agenda

7. All contents © MuleSoft Inc.
Lets's Begin !
Rules:
1. Please be respectful to
everyone and mute yourself
unless otherwise asked by the
presenter or Organizer.
2. Please ask questions in the
alloted time for Q&A.
Tip: Have a paper and pen ready.
Write your questions on a paper
and ask when the time comes.

8. All contents © MuleSoft Inc. 8
Service Mesh Background

9. All contents © MuleSoft Inc. 9
Docker / Containers
Docker is a tool for running your applications inside containers.
Hardware Virtualization OS Virtualization
• Single OS
• Shares host OS bins and
libs
• Light weight
• Portable
• Multiple OS
• Heavy – adds
overhead on
Memory and storage
• Apps not portable

10. All contents © MuleSoft Inc. 10
Challenge with Containers
With abundance of Containers - Deployment, management, scaling, and networking of containers have
become increasingly difficult to manually manage

11. All contents © MuleSoft Inc. 11
Kubernetes / Container Orchestration
Kubernetes is an open source container orchestration system for automating
application deployment, scaling, and management.

12. All contents © MuleSoft Inc. 12
Kubernetes Components
• Pod
• Ip address
• Volume
• Containerized app
• Node
• Pods
• Kublet ( K8s)
• Kube Proxy
• Docker

13. All contents © MuleSoft Inc. 13
Kubernetes Components..
• Service

14. All contents © MuleSoft Inc. 14
Kubernetes Cluster Overview

15. All contents © MuleSoft Inc. 15
Kubernetes Cluster Architecture
https://kubernetes.io/docs/concepts/overview/components/
Network proxy , n/w
rules, packet filtering
Agent

16. All contents © MuleSoft Inc. 16
Challenges with Microservices

17. All contents © MuleSoft Inc. 17
Service Mesh
• Network of microservices that make up
such applications and the interactions
between them
• Features
• Service discovery,
• load balancing,
• failure recovery,
• metrics,
• Monitoring
• Operational
• A/B testing, canary rollouts, rate
limiting, access control, and end-to-
end authentication
A sidecar proxy sits alongside a microservice and routes requests to
other proxies. Together, these sidecars form a mesh network.

18. All contents © MuleSoft Inc. 18
Istio
Istio lets you connect, secure,
control, and observe services.
Open source service mesh that layers transparently onto existing distributed applications

19. All contents © MuleSoft Inc. 19
Trivia Question 1
Container Orchestration
Container
Service Mesh
Container Orchestration
Container
Service Mesh
Container Orchestration
Container
Service Mesh
Container Orchestration
Containers
Service Mesh
A
C
B
D
Select the right option from below

20. All contents © MuleSoft Inc.
Blank Slide

21. All contents © MuleSoft Inc. 21
Quick Review
Docker is a tool for running your applications inside Containers.
Kubernetes is an open source Container orchestration system for
automating application deployment, scaling, and management.
Istio is an open source Service mesh that layers
transparently onto existing distributed applications

22. All contents © MuleSoft Inc. 22
Pre-Reqs Achievement
Congratulations !
You now have an entry pass to learn about
“AnyPoint Service Mesh”

23. All contents © MuleSoft Inc. 23
K8s Microservices + Mule’s Application Network
Non-Mule
Microservices
Application Network
Mule API
A Well-connected Enterprise

24. All contents © MuleSoft Inc. 24
AnyPoint Service Mesh
• Extend your microservices network by including your non-
MuleSoft applications into the Anypoint Platform sphere
• Resilient service-to-service communication using zero-
trust policies to handle traffic control, fault tolerance and
load balancing
• Extends MuleSoft API Management capabilities to any
non-Mule service, with policies, security and analytics all
applied directly from Anypoint Platform
• Amplifies reuse of services with discovery of non-Mule
services within Exchange, available for use in future
projects

25. All contents © MuleSoft Inc. 25
AnyPoint Service Mesh Architecture

26. All contents © MuleSoft Inc. 26
AnyPoint Service Mesh – Service Request Flow
Envoy – manage sidecar
proxies, pre-condition checks &
telemetry reporting
Mixer - General-purpose plug-in
model providing flexibility in dealing
with different infrastructure backend
applications.
MuleSoft Adapter and broker resides
within the Istio mixer, connect
components to Anypoint Platform.
The adapter and broker enable
sharing of metadata about all the
services that are managed by the
mesh.

27. All contents © MuleSoft Inc. 27
Trivia
ABC Inc wants to transform its entire Monolithic business logic into Micro Services. Some LOB’s
want to create microservices using NodeJS , some using python and some using Mule 4. They want to
use Kubernetes for all their Microservices
You are a Mule consultant working for them and are approached by ABC Inc Enterprise Architect for
your suggestion on the above.
What are 2 product options provided below that they should consider suggesting ?
Note : ABC Inc deals with federal govt and has a lot of compliance and data privacy considerations
because of which they need to develop everything on-premises. They want to deploy all their
microservices ( Data Plane) on-premises locally. However meta data can be exchanged for any
management purposes in a cloud app ( Control pane).
Question 2:
A) AnyPoint Runtime Fabric
B) AnyPoint Service Mesh
C) Kubernetes Cluster installed locally
D) AnyPoint Private Cloud Edition

28. All contents © MuleSoft Inc. 28
Trivia
What is the primary pattern used in Service Mesh ?
A) Adapter pattern
B) Controller Pattern
C) Side Car pattern
D) Init Container Pattern
Question 3:
Top Kubernetes Design Patterns

29. All contents © MuleSoft Inc. 29
AnyPoint Service Mesh Provisioning Steps
Review
Pre-
requisites
Download
& Install
Configure
Manage
APIs
• Work with your partner manager to get AnyPoint
service mesh licenses to your Any Point platform.
• Create a K8s Cluster on Google Cloud with at least
2 nodes each with 4 CPU and 16 GB of memory.
• Install Istio in the K8s Cluster
• Download ASM client ( asmctl)
• Install Service Mesh
• Provision Mule Adapter
• Create a sample hello-node service in K8 cluster
• Create Api in Any point platform
• Bind the K8s Service with API ID of the API –Key step
• Apply API policies
• Manage API from AnyPoint Exchange
• View Analytics using AnyPoint Analytics

30. All contents © MuleSoft Inc. 30
Demo
Presenter Notes:
• Create an API in API Manager with basic endpoint
• Create a Hello Node Service in K8s
• Expose the Service using external load balancer and
external ip
• Execute the same in browser
• Apply Rate limiting policy
• Rerun the same in browser to see Rate limiting applied
• Try to show application of more policies

31. All contents © MuleSoft Inc. 31
Demo Scenario
Mule API with
policies
Hello-World
NodeJS app
Service
Load Balancer
Client
Apply Rate Limiting Policy
http://35.225.220.252/
Bind API with Istio using
Mule Adapter

32. All contents © MuleSoft Inc. 32
Trivia
An app written in python is deployed to K8s is
made publicly accessible using URL https://342.234.334.56/myApp.
The C4E team felt a need for bringing this app into AnyPoint Exchange for
Discoverability. What is the best & simple method to do so ?
Question 4:
A) Install AnyPoint Service Mesh in K8s Cluster and bind an API in API Manager to it. Now
this API is visible in AnyPoint Exchange.
B) Create an API in API Manager as Endpoint with Proxy with implementation URI as
https://342.234.334.56/myApp
C) Download the python app deployable and deploy to Mule runtime
D) Not possible

33. All contents © MuleSoft Inc. 33
Comments about AnyPoint Service Mesh
• Istio still remains the actual service mesh
• Istio already provides security, tracing, traffic policy
enforcement, etc., so there’s some redundancy
• Discoverability and maximizing reuse across the enterprise –
An anti pattern in microservices according to some
• API with proxy can be used with an external service URL
without any additional work. The Anypoint Service Mesh
provides visibility and management of API’s in K8S cluster
without external service.
Some Limitations as of today
• Only supports GKE, AWS, Azure Kubernetes cluster. Can’t do it on local K8S clusters.
• Can’t explore & experiment with it easily as you need a trial license.

34. All contents © MuleSoft Inc. 34
Q&A
Questions ?

35. All contents © MuleSoft Inc.
What’s next
35
• Share:
– Tweet your pictures with the hashtag #MuleMeetup
– Invite your network to join: https://meetups.mulesoft.com/denver/
• Feedback:
– Contact your organizer brian.statkevicus@bigcompass.com or
linda.gunn@bigcompass.com to suggest topics
– Contact MuleSoft at meetup@mulesoft.com for ways to improve the program
• Our next meetups:
– Dates (Tentative): September 23 and November 4
– Location: Likely Virtual
– Topic: Dataweave and TBD

36. See you next time!
Please send topic suggestions to the organizer