Istio : Service Mesh
1 like1,350 views
The document outlines key etiquettes for attending Knolx sessions, emphasizing punctuality, constructive feedback, and maintaining silence during sessions. It provides an overview of Kubernetes and Istio, including their architectures, components, and functionalities such as mutual TLS, canary deployments, and traffic management. The presentation also highlights various Istio add-ons for observability and performance monitoring.
Istio : Service Mesh
- 1. Presented By: Mukesh Yadav Istio : Service Mesh
- 2. Lack of etiquette and manners is a huge turn off. KnolX Etiquettes Punctuality Respect Knolx session timings, you are requested not to join sessions after a 5 minutes threshold post the session start time. Feedback Make sure to submit a constructive feedback for all sessions as it is very helpful for the presenter. Silent Mode Keep your Window in mute, feel free to ask question if you have any queries.
- 3. Our Agenda Kubernetes Kubernetes Objects What is Istio? 01 02 03 04 Why Istio? How Istio Works and its Architecture Istio Add-ons Canary deployment 05 06 07 08 Mutual TLS Cascading Failure 09 10 Demo
- 4. Containers ➔ package code and all its dependencies ➔ Lightweight ➔ Secure ➔ Isolation ➔ portability VM vs Containers
- 5. Kubernetes ➔ Kubernetes is a portable, extensible, open-source platform for managing containerized workloads and services ➔ An Orchestrator for containerized Microservice Apps ➔ Born in Google ➔ Written in Go/Golang ➔ Platform Agnostic
- 7. Kubernetes Objects ➔ Pod ➔ ReplicaSets ➔ Deployment ➔ Services ➔ Volumes ➔ Ingress labels: app: Knolx DNS1: 172.17.0.16:80 DNS2: 172.17.0.17:80
- 8. Why Istio?
- 9. What is Istio? ❖ Service mesh ❖ Connect ❖ Secure ❖ Control ❖ Observe services. ❖ Logging platform, or telemetry or policy system.
- 10. How Istio works? Pod A Application Application Pod B Internet
- 11. Istio Architecture Istio has two major components: ❖ Data Plane : It is composed of a set of intelligent proxies (Envoy) deployed as sidecars. ❖ Load balancing ❖ TLS termination ❖ Circuit breakers ❖ Health checks ❖ Fault injection ❖ Rich metrics ❖ Control Plane : The control plane manages and configures the proxies to route traffic.. The control plane is consist of 4 component: : ❖ Pilot ❖ Citadel ❖ Galley Data Plane
- 12. Istio Structure Istio : Working & Structure
- 13. Istio Add-ons Grafana : ❖ Visualization tool ❖ Create, update & search dashboards ❖ Create Alerts Kiali : ❖ Observability and configuration ❖ Weighted Routing ❖ Matching Routing ❖ Suspend Traffic Prometheus : ❖ Time-series datastore ❖ Visualize individual metrics ❖ Flexible query language Jaeger: ❖ Root cause analysis ❖ Distributed transaction monitoring ❖ Performance and latency optimization
- 14. Traditional communication Traditional Method of communication In Kubernetes
- 15. Mutual TLS Istio : Connection b/w pods
- 16. Istio Gateway Istio Ingress- Gateway ❖ Handle incoming request from external world Istio Egress- Gateway ❖ Handle outgoing request to external world Istio Ingress- Gateway Istio Egress- Gateway
- 17. Canary Deployment Canary deployments Pros: ● Version released for a subset of users. ● Convenient for error rate and performance monitoring. ● Fast rollback. Con: ● Slow rollout.
- 18. Canary Deployment 10 % 90 % 50 % 50 % Kubernetes : Traffic distribution Istio :Traffic distribution
- 19. Cascading failure A cascading failure is a process in a system of interconnected parts in which the failure of one or few parts can trigger the failure of other parts and so on.
- 20. Circuit breaker Circuit breaker: ❖ Failures reach a certain threshold ❖ Circuit breaker trips further calls ❖ Error or with some alternative service or default message Microservices Istio
- 21. DEMO ❖ Circuit breaker ❖ Canary Deployment
- 22. References: 1. Kubernetes docs: https://kubernetes.io/ 2. Istio docs: https://istio.io/ 3. Udemy : https://www.udemy.com/course/istio-hands-on-for-kubernetes
- 23. Thank You !