Diese Präsentation wurde erfolgreich gemeldet.
Wir verwenden Ihre LinkedIn Profilangaben und Informationen zu Ihren Aktivitäten, um Anzeigen zu personalisieren und Ihnen relevantere Inhalte anzuzeigen. Sie können Ihre Anzeigeneinstellungen jederzeit ändern.

Intro Istio and what's new Istio 1.1

624 Aufrufe

Veröffentlicht am

Understanding Istio and what's new in Istio 1.1

Veröffentlicht in: Software

Intro Istio and what's new Istio 1.1

  1. 1. Istio Service Mesh: What’s New in 1.1 @soloio_inc
  2. 2. CHRISTIAN POSTA • Field CTO @ solo.io • Author of a few books • Contributor to many open-source projects • Architect, blogger, speaker, mentor, leader https://bit.ly/istio-in-action @christianposta christian@solo.io https://blog.christianposta.com https://slideshare.net/ceposta
  3. 3. Check out Gloo! https://gloo.solo.io https://sqoop.solo.io https://supergloo.solo.io
  4. 4. 3 FREE COPIES AT END OF THE SESSION: COMPLEMENTS OF SOLO.IO AND MANNING https://bit.ly/istio-in-action Winner will be chosen from Twitter. Tweets to @christianposta with #kubePHXIstio will be considered
  5. 5. Istio is a service mesh A service mesh is decentralized, application-agnostic, networking infrastructure between your services that can be programmed to provide more resilient, secure, and observable service to service communication
  6. 6. Istio components
  7. 7. Service mesh for service to service
  8. 8. Istio ● Popular open-source project ● Announced May 2017 ● v1.0 released July 2018 ● v1.1 release March 2019 ● Uses an Envoy proxy data plane https://istio.io
  9. 9. Istio functionality • Fine-grained traffic control (at request level) • End-to-end encryption with strong Identity • Network-level (request) metric and distributed tracing collection • Policy enforcement • Request-level resilience
  10. 10. Istio components
  11. 11. Istio Citadel
  12. 12. Istio Pilot
  13. 13. Istio Telemetry
  14. 14. Istio Policy
  15. 15. Demo: Traffic control
  16. 16. Istio 1.1 “Enterprise Ready Istio”
  17. 17. Istio ● Improved performance, scalability, and stability ● Namespace isolation ● Multi-cluster capabilities ● Improved installation with Helm ● Locality aware load balancing ● Issue identity certificates through SDS ● Vault CA integration ● Disable policy checks (by default) ● Egress on by default https://istio.io
  18. 18. Performance improvements with 1.1 ● Default test with 1000, services 2000 sidecar/instances, 70K request/sec within the mesh ● 8ms P90 latency through two sidecar ● 0.6 vCPU per 1K requests ● 50M Mem overhead for highly loaded namespaces ● Pilot uses 1 vCPU and 1.5G memory https://istio.io
  19. 19. Sidecar Resource https://istio.io
  20. 20. Sidecar Resource
  21. 21. Sidecar Resource
  22. 22. Sidecar Resource
  23. 23. Demo: performance improvements with Sidecar
  24. 24. For more information ● https://solo.io ● https://medium.com/solo-io ● https://twitter.com/soloio_inc ● https://gloo.solo.io ● https://sqoop.solo.io ● https://supergloo.solo.io ● https://squash.solo.io
  25. 25. HOW BOOK WINNERS WILL BE DECIDED: https://bit.ly/istio-in-action For everyone else: 40% off with code: cpistio Winner will be chosen from Twitter. Tweets to @christianposta with #kubePHXIstio will be considered
  26. 26. Thank you @soloio_inc

×