Sailing into 2018 with Kubernetes and Istio
1 like201 views
This document discusses Istio, an open platform for connecting, managing, and securing microservices. It provides features like circuit breaking, fault injection, canary deployments, rate limiting, service metrics, tracing, and mutual TLS without requiring code changes. Istio uses interceptors and Mixer to enforce policies across traffic in a Kubernetes cluster. The document outlines some capabilities of Istio and also notes it is still in alpha stage with some known issues around documentation and debugging.
Sailing into 2018 with Kubernetes and Istio
- 1. Sail into 2018!Fernand Galiana @kitesurfer
- 2. © 2017 ImhotepSoftware trends in 2018?
- 3. © 2017 ImhotepSoftware • AOP • IOC • FP • Immutability • FAASBook? • Componentization
- 4. © 2017 ImhotepSoftware i want to focus solely on my business logic!
- 5. © 2017 ImhotepSoftware decorate all teh things!!
- 13. © 2017 ImhotepSoftware Node1 iptables kubeproxy kubelet Pod1 Pod2 Pod1 docker Master kubelet scheduler ctrlManageretcd Node2 iptables kubeproxy kubelet Pod1 Pod2 docker api-server
- 14. © 2017 ImhotepSoftware podA podB func callB(…) podB podB SvcB
- 15. © 2017 ImhotepSoftware func callGitHub(…) Ingress InternetCluster App GitHub SvcA podA func callSvcA(…)
- 16. © 2017 ImhotepSoftware microservices are scary!
- 17. © 2017 ImhotepSoftware • Management problem • Polyglot stack • Observability • Bugs/Perf • Visibility • Root cause • Cluster Security
- 20. © 2017 ImhotepSoftware Señor Istio Maestro!
- 21. © 2017 ImhotepSoftware Open platform to connect, manage and secure microservices
- 23. © 2017 ImhotepSoftware • Adv Routing + LoadBalancing • Resilient Across Langs/Platforms • FleetWide Policy Enforcement • Telemetry and Reporting
- 25. © 2017 ImhotepSoftware • Circuit Breaking • Fault Injection • Canary builds • Rate limiting • Service Metrics and Tracing • HTTP 1.1/2, GRPC, WS, TCP • Mutual TLS • No code change!
- 28. © 2017 ImhotepSoftware Interceptor AO P Circuit Breaker Dynamic Routing Retries / Rate Limit Faults Load Balancing Metrics Tracing Authz/Authn …
- 29. © 2017 ImhotepSoftware Mixer istio-system service1 service2 Pilot pod1 pod1 Auth
- 34. © 2017 ImhotepSoftware dictionary MixerPilot Auth hangman game Ingress istio-system … … …
- 36. © 2017 ImhotepSoftware • Alpha! • kubectl validation ;-( • Postgres pgready no worky! • minikube idle/policy churns • Docs • Debugging Istio?
- 37. © 2017 ImhotepSoftware • istio.io • github.com/envoyproxy/envoy • github.com/derailed/hangman
- 38. © 2017 ImhotepSoftware Thank you!