See Consul running on Kubernetes and learn how to use Consul as a universal service mesh to securely connect your applications running on different platforms.

1. Copyright © 2018 HashiCorp
Running Consul on
Kubernetes and
Beyond
Jason Harley

2. The 4 essential
elements
of dynamic
infrastructure
⁄ THE HASHICORP STACK Copyright © 2018 HashiCorp ⁄ !2
Networking
Connect infrastructure
and applications
Security
Secure Infrastructure
and applications
Development
Run applications
Operations
Provision Infrastructure

3. The 4 essential
elements
of dynamic
infrastructure
⁄ THE HASHICORP STACK Copyright © 2018 HashiCorp ⁄ !3
Security
Secure Infrastructure
and applications
Development
Run applications
Operations
Provision Infrastructure
Networking
Connect infrastructure
and applications

4. Agenda
Copyright © 2018 HashiCorp ⁄ !4
• What is a Service Mesh?
• Consul and Kubernetes
• Installing Consul on Kube
• Adding Connect to a Kube App
• Integrating Legacy Applications

5. Copyright © 2018 HashiCorp ⁄
What is a Service Mesh
!5

6. The shift
from static
to dynamic
networking
Copyright © 2018 HashiCorp ⁄ !X
Dynamic Infrastructure
Service-based networking
Static Infrastructure
Host-based networking

7. Market
trend from
monoliths to
microservices
Copyright © 2018 HashiCorp ⁄ !7
Physical Servers Virtual Machines Containers

8. Consul
Use Cases.
Distributed service mesh
to connect, secure,
configure services
Copyright © 2018 HashiCorp ⁄⁄ CONSUL USE CASES !8
Service
Segmentation
Secure service-to-service
communication with
automatic TLS encryption
and identity-based
authorization.
Service
Configuration
Feature rich key/value
store to easily configure
services across
distributed infrastructure
in real-time.
Service
Discovery
Service registry, integrated
health checks, and DNS
and HTTP interfaces
enable any service to
discover and be discovered
by other services.

9. What is Service Mesh ?
Copyright © 2018 HashiCorp ⁄ !9
• Layer between network and applications
• Proxy deployed as out-of-process “sidecar”
• Abstracts resilient communication patterns
• Observability
• Control Plane vs Data Plane Network
Service Mesh
Application

10. Copyright © 2018 HashiCorp ⁄ !10
• Layer between network and applications
• Proxy deployed as out-of-process “sidecar”
• Abstracts resilient communication patterns
• Observability
• Control Plane vs Data Plane
Proxy
App
loopback
service traffic
What is Service Mesh ?

11. Copyright © 2018 HashiCorp ⁄ !11
• Layer between network and applications
• Proxy deployed as out-of-process “sidecar”
• Abstracts resilient communication patterns
• Observability
• Control Plane vs Data Plane
What is Service Mesh ?

12. Copyright © 2018 HashiCorp ⁄ !12
• Layer between network and applications
• Proxy deployed as out-of-process “sidecar”
• Abstracts resilient communication patterns
• Observability
• Control Plane vs Data Plane
What is Service Mesh ?

13. Copyright © 2018 HashiCorp ⁄ !13
• Layer between network and applications
• Proxy deployed as out-of-process “sidecar”
• Abstracts resilient communication patterns
• Observability
• Control Plane vs Data Plane
Prox
y
Clien
t
App
Prox
y
App
Clien
t
What is Service Mesh ?

14. Copyright © 2018 HashiCorp ⁄
Consul and Kubernetes
!14

15. Kubernetes
Copyright © 2018 HashiCorp ⁄ !15
• Discovery: kube-dns, kube-proxy
• Configuration: ConfigMaps
• Segmentation: NetworkPolicy + Controller
… but only for your Kubernetes workloads

16. Consul
Service Mesh
Copyright © 2018 HashiCorp ⁄ !16
A distributed service mesh to connect, secure, and configure
services across any runtime platform and public or private
cloud

17. Consul and
Kubernetes
integration
Copyright © 2018 HashiCorp ⁄ !17
• Official Helm Chart
Automatic install, configure and upgrade Consul on Kubernetes
• Kubernetes auto-join provider
Enable nodes running inside and outside of Kubernetes to join a Consul
cluster running on Kubernetes using Kubernetes API
• Catalog sync between Kubernetes and Consul
Enables cross-cluster or platform service discovery
A central catalog allows organizations to gracefully migrate workloads into
or out of Kubernetes
• Consul Connect auto-inject
Automatic injection of built-in & Envoy proxy in Kubernetes to enable
secure pod communication

18. Consul On
Kubernetes
Architecture
Copyright © 2018 HashiCorp ⁄ !18
Client Server Client Server Client Server
Client
App
Client
hostIP

19. Copyright © 2018 HashiCorp ⁄
Demo Time 🤞
!19

20. Demo
Copyright © 2018 HashiCorp ⁄ !20
• Installing Consul on Kube
• Adding Connect to a Kube App
• Integrating Legacy Applications

21. Emojify App
Architecture
Copyright © 2018 HashiCorp ⁄ !21
Ingress
API
Web
Facebox/api
/

22. Emojify with
Legacy
Payment
Service
Copyright © 2018 HashiCorp ⁄ !22
Ingress
API
Web
Facebox/api
/
VM
Payment

23. Demo Summary
Copyright © 2018 HashiCorp ⁄ !23
• Installed Consul clients and servers
• Deployed an app using Kube service discovery
• Upgraded to use Consul Connect to secure service traffic
• Used Connect to securely connect to a legacy service

24. www.hashicorp.com
hello@hashicorp.com
Thank you