The document discusses the integration of services using Kuma, a cloud-native service mesh that enhances reliability, security, and observability of service-to-service communications. It covers key features like traffic management, observability, and the importance of a service mesh in modern hybrid and multi-cloud environments. The Kuma control plane is described as platform-agnostic and suitable for various deployment scenarios.

1. © OPITZ CONSULTING 2021 / Öffentlich
Service integration made easy with Kuma 2

2. © OPITZ CONSULTING 2021 / Öffentlich
THAT‘S ME
Service integration made easy with Kuma 3
Sven Bernhardt
Cloud-Native enthusiast, API & integration geek. Always curious how new
technologies and concepts can help to make things more valuable and efficient.
¢ Chief Architect / Integration Evangelist@OPITZ CONSULTING Deutschland GmbH
¢ Oracle ACE Director
@sbernhardt
https://svenbernhardt.wordpress.com/

3. © OPITZ CONSULTING 2021 / Öffentlich
CLOUD-NATIVE :
PARADIGM TO BUILT APPS FOR
THE CLOUD!
Service integration made easy with Kuma 4

4. © OPITZ CONSULTING 2021 / Öffentlich
LOOSE COUPLING OFTEN MEANS MORE DISTRIBUTION
Service integration made easy with Kuma 5
¢ Single Deployment unit
¢ Single execution process
¢ Shared database
¢ Local, app-internal communication only
¢ Multiple Deployment units
¢ Exclusive execution process per service
¢ Database per Service (usually)
¢ Remote, inter-service communication
UI
Business
Logic
Persistence
Monolithic app architecture Cloud-native app architecture

5. © OPITZ CONSULTING 2021 / Öffentlich
SERVICE INTEGRATION
DILEMMA
Service integration made easy with Kuma 6
• Amount of traffic
• Number of services
• Teams autonomity
Reliability
¢ Traffic connectivity & reliability
¢ Zero-trust security
¢ Observability
¢ Log aggregation
¢ Metrics management
¢ Service tracing
Challenges

6. © OPITZ CONSULTING 2021 / Öffentlich
RELIABLE CONNECTIVITY IS A MULTIDIMENSIONAL PROBLEM
Service integration made easy with Kuma 7
App App App
App
Edge Cross-App In-App
Monolith Services Microservices Serverless …

7. © OPITZ CONSULTING 2021 / Öffentlich
INCREASED COMPLEXITY AND CHALLENGES WITH RESPECT TO
DEVELOPMENT CONSISTENCY
Service integration made easy with Kuma 8
Security Security
Logging Logging
Security
Tracing
Metrics Routing
Metrics Tracing
Application
AuthN/Z
Rate-Limiting
Routing
Caching
Organization
Application
AuthN/Z
Versioning
Versioning
Rate-Limiting

8. © OPITZ CONSULTING 2021 / Öffentlich
DEMO: KUMA QUICKSTART
¢ Apply security (Service-2-
Service communication)
¢ Manage and route traffic
¢ Enhance observability
¢ Service Metrics
¢ Service Tracing
Service integration made easy with Kuma 9

9. © OPITZ CONSULTING 2021 / Öffentlich
Webshop
Backend
v2
DEMO: KUMA QUICKSTART
Service integration made easy with Kuma 10
Kubernetes Cluster
[mTLS]
[mTLS]
[mTLS]
[mTLS]
Webshop
Frontend
REDIS
PostgreSQL
Webshop
Backend
v0
Webshop
Backend
v1
1 2
3 4

10. © OPITZ CONSULTING 2021 / Öffentlich
WHAT’S A SERVICE MESH?
Service integration made easy with Kuma 11
¢ Efficient implementation of cross-cutting
concerns with respect to service
integration challenges
¢ Everything is a service!
¢ Cloud-native apps deployed to Kubernetes
¢ Non Cloud-native workloads
¢ Should be independent of
¢ Architecture (e.g. Monolithic or µService)
¢ Platform (e.g. VMs, Containers, Kubernetes)
Dedicated infrastructure layer that
makes service-to-service communication
more reliable, secure and observable

11. © OPITZ CONSULTING 2021 / Öffentlich
WHAT CAN SERVICE MESH HELP YOU WITH?
Service integration made easy with Kuma 12
Kong API Gateway

12. © OPITZ CONSULTING 2021 / Öffentlich
CONSISTENCE FROM THE EDGE TO THE TARGET SERVICE
Service integration made easy with Kuma 13
¢ External Clients access an organization’s
services through the API Gateway (Single
Point of entry)
¢ API Gateway is integrated in the Mesh
¢ Is just another service
¢ Gateway proxy just handles outbound traffic
¢ Internal traffic routing is handeled by the
Mesh

13. © OPITZ CONSULTING 2021 / Öffentlich
SERVICE MESH BENEFITS
Service integration made easy with Kuma 14
¢ Increased Developers productivity
¢ Reliable connectivity
¢ Self-service network management
¢ Zero-trust security
¢ Service Discovery

14. © OPITZ CONSULTING 2021 / Öffentlich
KUMA MESH
Service integration made easy with Kuma 15
¢ Initally invented by Kong and donated to CNCF in 2020
¢ Provides a modern distributed Control Plane
¢ Envoy-based Data Plane proxies
¢ Platform agnostic open-source control plane for Service Mesh
¢ Hence Kuma is
¢ Universal
¢ Simple
¢ Scalable
¢ Flexible deployment options
¢ Standalone deployment
¢ Multi-Zone deployment
Source: https://tinyurl.com/xb57bhx5

15. © OPITZ CONSULTING 2021 / Öffentlich
KUMA DEPLOYMENT MODES
Service integration made easy with Kuma 16
Standalone
Multi-Zone
Source: https://tinyurl.com/33smv5ex Source: https://tinyurl.com/yuv4nxe3

16. © OPITZ CONSULTING 2021 / Öffentlich
CLOUD-NATIVE BECOMES MORE AND MORE IMPORTANT
Service integration made easy with Kuma 17
¢ Hybrid / Multi-Cloud architectures gain traction
¢ Service Mesh comes into focus
Source: CNCF Survey Report 2020
Data center usage
Service Mesh adoption
Relevancy of Service Mesh implementations

17. © OPITZ CONSULTING 2021 / Öffentlich
KEY TAKEAWAYS
Service integration made easy with Kuma 18
¢ Kuma is cool!
¢ Besides that Kuma provides
¢ Agnostic approach (indepent of architecture or platform)
¢ Modern, flexible architecture supporting hybrid, multi-cloud scenarios
¢ Standalone
¢ Multi-zone
¢ Multi-mesh
¢ Seamless CI / CD integration
¢ Great and active community
Kong and Kuma: A match made in heaven for reliable, consistent service
connectivity across your enterprise!

18. © OPITZ CONSULTING 2021 / Öffentlich
Service integration made easy with Kuma 19
Q & A
https://opitzcloud.canto.global/b/H0EMG

19. © OPITZ CONSULTING 2021 / Öffentlich
IN CASE OF ANY QUESTIONS…
Service integration made easy with Kuma 20
Sven Bernhardt
Chief Architect / Integration Evangelist |
Oracle ACE Director
OPITZ CONSULTING Deutschland GmbH
Kirchstrasse 6, 51647 Gummersbach, Germany
Phone: +49 172 2193529
Mail: sven.bernhardt@opitz-consulting.com
Twitter: @sbernhardt
Blog: https://svenbernhardt.wordpress.com