Upload
others
View
5
Download
0
Embed Size (px)
Citation preview
1 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Istio Execution on Kubernetes and its advantages
By Satish Aherkar, ATMECS Inc.
2 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
About MeSatish Aherkar
Technical lead|Devops
Consultant|Devops Evangelist
Experience -
More than 6+ years of experience in infrastructure
management and solutions.
Expertise -
DevOps solutions on different OS platforms.
Formerly DevOps Consultant @dvsts, Devops
Engineer|System Administrator|Linux Engineer @Zeta
global
3 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Agenda
● Introduction of Service Mesh
● What is Istio
● Why Istio
● Quick view of Istio Architecture
● Istio Integration
● Getting started - Bookinfo application demo
4 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Introduction to Service Mesh
Service Mesh - A service mesh is a communication layer that rides on top of
request/response unlocking some patterns essential for healthy microservices
● Zero-trust security that doesn’t assume a trusted perimeter.● How microservice talk to each other ● Fault injection and tolerance that lets you experimentally verify the resilience of your
application● Advanced routing that lets you do things like A/B testing, rapid versioning and
deployment.
5 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
What is Istio !Uniform way to secure, connect, and
monitor microservices !
6 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Why Istio1. Deploy on the existing application2. Authorization & Authentication3. Traffic management4. Core metrics of the application5. Communication & Failover6. Full security
7 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Why Istio ( Contd..)
● Automatic load balancing.
● Fine-grained control of traffic behavior with rich routing rules.
● A pluggable policy layer and configuration API supporting access controls
● Automatic metrics, logs, and traces for all traffic within a cluster.
● Secure service-to-service communication in a cluster with strong identity-based
authentication and authorization.
8 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Can’t kubernetes do this for us ?
9 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Kubernetes vs istio ( Contd why istio )
Kubernetes doesn’t help with higher-level
problems, such as:
→ Core metrics
→ Failure handling & Service discovery
→ Traffic routing
10 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Istio Architecture
An Istio service mesh is logically split into a data plane and a control plane
→ data plane→ control plane
Components :
→ Envoy proxy→ Mixer→ Pilot→ Citadel→ Galley
11 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Istio Architecture - Internal Data Flow
12 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Istio IntegrationHow to integrate with istio using kubernetes :
● Google kubernetes ( cloud )
● AWS ( kops and eks service )
● Alibaba cloud kubernetes service
● Helm
● Openshift, docker swarm etc
13 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Getting Started - Bookinfo Demo Architecture
Prerequisites→ Kubernetes→ Istio
14 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
Questions ?
Thank YouFind Me at @SatishAherkar & [email protected]
15 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.
About ATMECS Inc
ATMECS is a result oriented full-service engineering and R&D organization. We are Technology Accelerators bringing in visible transformation for our clients through automation, adoption of leading edge integrated development platforms, CI/CD, Dev Ops, Cloud, and Big Data. Several Fortune 500 customers and exciting next gen start-up companies engage us to partner with them to solve critical business challenges. As Innovation Catalysts we help clients lead change through AI/ML, AR/VR, IOT, Conversational BOTs & Blockchain.
ATMECS is a “Trusted Partner” to organizations looking to shape their future with innovation and Next Gen technologies.Passionate Minds is who we are. A smart, nimble team with complementary capabilities – Leadership who Aspire and reach out to the future, Thinkers who question the status quo, team with abilities to Manage projects effectively, Engaging and focusing on client, creating value through innovation and ultimately helping clients Succeed. We are ATMECS.
16 © Copyright 2015 ATMECS, Inc.
Let’s partner.