Istio is a platform that provides traffic management, security, and observability for microservices. It addresses challenges of transitioning monolithic applications to distributed microservices. Istio uses Envoy proxies as sidecars to mediate network communication between services and Mixer for policy enforcement and telemetry collection. The control plane manages and configures proxies and Mixers. Istio enables features like traffic management, discovery, policies, security and telemetry collection.

1. #sunnytech
Microservices the
right way: an
introduction to Istio
Sunny-tech 2018
Laurent Grangeau @laurentgrangeau
1

2. # whoami
Hello
Laurent Grangeau - CSA@Sogeti
I love to automate things and run apps at scale
You can find me at @laurentgrangeau
Laurent Grangeau
@laurentgran
geau
Cloud Solution
Architect

3. Monolithics vs microservices

4. The Big Four

5. Istio

6. Istio
Istio addresses many of the challenges faced by
developers and operators as monolithic applications
transition towards a distributed microservice
architecture

7. Concepts
Split into a dataplane and a controlplane
- The data plane is composed of a set of intelligent
proxies (Envoy) deployed as sidecars that mediate and
control all network communication between
microservices, along with a general-purpose policy and
telemetry hub (Mixer).
- The control plane is responsible for managing and
configuring proxies to route traffic, and configuring
Mixers to enforce policies and collect telemetry.

8. Core components
- Envoy
- Sidecar proxies per microservice to handle ingress/egress traffic between
services in the cluster and from a service to external services.
- Mixer
- Central component that is leveraged by the proxies and microservices to
enforce policies.
- Pilot
- A component responsible for configuring the proxies at runtime.
- Citadel
- A centralized component responsible for certificate issuance and rotation.
- Node agent
- A per-node component responsible for certificate issuance and rotation.
- Broker
- A component implementing the Open Service Broker API for Istio-based
services. (WIP)

9. Architecture

10. Concepts
Enables:
- Traffic management
- Discovery, Rich layer-7 routing, Circuit breaker
- Policies and controls
- Policy enforcement
- Metrics, logs and traces
- Request tracing, Telemetry recording/reporting
- Security
- Authorization, Authentication, Rate limit, Quotas

11. Traffic management

12. Request routing

13. Discovery & load balancing

14. Authentication

15. Authentication

16. Istio RBAC

17. Policies & Telemetry

18. App example

19. App example w/ istio

20. Demo
Live coding !

21. Questions ?