Download as PDF, PPTX
Uploaded byAlex Soto
Sail In The Cloud
The document offers an overview of Istio, a service mesh to manage microservices, highlighting its role in enhancing cloud application development and deployment. It discusses Kubernetes, container orchestration, and various deployment strategies like blue-green and canary releases, while emphasizing the complexity of service interactions. The presentation also introduces Envoy as a service proxy and explains Istio's control and data planes for monitoring and securing microservices communications.
More Related Content
Sail In The Cloud
- 1. Sail in theCloud An Introduction to Istio Alex Soto @alexsotob
- 2. @alexsotob2 Alex Soto Red HatEngineer www.lordofthejars.com @alexsotob Who Am I?
- 3.
- 4.
- 5.
- 6. @alexsotob6 Our IT WorldMorphs
- 7.
- 8.
- 9. @alexsotob9 Your Stack Matters ServerHardware Operating System Application Server your.war Java Virtual Machine Custom Configuration Linux Kernel Version & Distribution Java 1.7.0_67 Tomcat, Wildfly, Jetty JDBC driver, JMS queue, users
- 10. @alexsotob10 DevOps Challenges forMultiple Containers ▪ How to scale? ▪ How to avoid port conflicts? ▪ How to manage them on multiple hosts? ▪ What happens if a host has trouble? ▪ How to keep them running? ▪ How to update them? ▪ Where are my containers? Node Node Node Node Node Logger Node
- 11. @alexsotob11 ssh docker run sshdocker run ssh docker run
- 12.
- 13. @alexsotob13 ▪ Greek for“Helmsman,” also the root of the word “Governor” (from latin: gubernator) ▪ Container orchestrator ▪ Supports multiple cloud and bare-metal environments ▪ Inspired by Google’s experience with containers ▪ Open source, written in Go ▪ Manage applications, not machines Meet Kubernetes
- 14.
- 15. @alexsotob15 Kubernetes Cluster Pod Replication Controller/ Deployment Service Label ✓1+ containers ✓ Shared IP ✓ Shared storage volume ✓ Shared resources ✓ Shared lifecycle ✓ Ensures that a specified number of pod replicas are running at any one time ✓ Grouping of pods (acting as one) has stable virtual IP and DNS name ✓ Key/Value pairs associated with Kubernetes objects (env=production)
- 16. @alexsotob16 Pods A group ofwhales is commonly referred to as a pod and a pod usually consists a group of whales that have bonded together either because of biological reasons or through friendships developed between two or more whales. In many cases a typical whale pod consists of anywhere from 2 to 30 whales or more.* *http://www.whalefacts.org/what-is-a-group-of-whales-called/
- 17. @alexsotob Deploy Something ToKubernetes 17
- 18.
- 19. @alexsotob19 SCM (Git/Svn) Master API Server Service Layer VirtualPhysicalPrivate Public Persistent Storage Node Node Logger Node Node Node Node Dev Ops CI/CD Automation Routing Layer Registry SDN Overlay Network Controllers - Scheduler - Deployments - Services - Builds - Routes - DeploymentConfigs Kubernetes OpenShift - Builds - ImageStreams
- 20.
- 21.
- 22.
- 23. Starts with a“git commit and git push” Blue/Green Deployment DEVELOPMENT QA STAGING PRODUCTION ROUTER USERS BUILD SCM
- 24. Blue/Green Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS BUILD SCM
- 25. Blue/Green Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS BUILD SCM
- 26. Blue/Green Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS BUILD SCM
- 27. Blue/Green Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS BUILDSCM
- 28. Blue/Green Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 29. Blue/Green Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 30.
- 31. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 32. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 33. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 34. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 35. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 36. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 37. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 38. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 39. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 40. Canary Deployment DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 41.
- 42. Dark Launches DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM INTERNAL USERS
- 43. Dark Launches DEVELOPMENT QASTAGING PRODUCTION ROUTER USERS SCM
- 44.
- 45.
- 46. @alexsotob46 As we moveto services architectures, we push the complexity to the space between our services CHRISTIAN POSTA
- 47. @alexsotob47 NETFLIX Ribbon Config Server JavaMicroservices Platform circa 2016
- 48.
- 49.
- 50. @alexsotob50 … more explicitly ServiceA Proxy Proxy Service B Proxy Service B Proxy
- 51.
- 52. @alexsotob52 ▪ Service proxy ▪Highly parallel, non-blocking ▪ L3/4 network filter ▪ Out of the box L7 filters ▪ HTTP 2, including gRPC ▪ Baked in service discovery/health checking ▪ Advanced load balancing ▪ stats, metrics, tracing ▪ dynamic configuration through xDS Meet Envoy
- 53.
- 54. @alexsotob54 ▪ Greek wordfor “sail” ▪ Fleet configuration ▪ Routing and Load-Balancing control ▪ Observability ▪ Chaos Testing ▪ Security Options Istio To Rescue
- 55. @alexsotob55 Istio Control Plane Pod Container JVM ServiceA Envoy Side-car Pod Container JVM Service B Envoy Side-car Pod Container JVM Service C Envoy Side-car HTTP1.1, HTTP2, gRPC, TCP w/TLS HTTP1.1, HTTP2, gRPC, TCP w/TLS HTTP1.1, HTTP2, gRPC, TCP w/TLS Istio Pilot Istio Mixer Istio Auth istioctl, API, config Quota, Telemetry Rate Limiting, ACL CA, SPIFFE Istio Data Plane
- 56.
- 57.
- 58.
- 59.
- 60.
- 61.
- 62.
- 63.
- 64.
- 65.
- 66. “Change is theessential process of all of existence.” —SPOCK
- 67.
- 68.