Istio: Up and Running. Using a Service Mesh to Connect, Secure, Control, and Observe - Helion

ebook

Autor: Lee Calcote, Zack Butcher
ISBN: 978-14-920-4373-7
stron: 272, Format: ebook
Data wydania: 2019-09-27
Księgarnia: Helion

Cena książki: 160,65 zł (poprzednio: 186,80 zł)
Oszczędzasz: 14% (-26,15 zł)

Osoby, które kupiły tę książkę, wybierały także »

Tagi: Techniki programowania

You did it. You successfully transformed your application into a microservices architecture. But now that you’re running services across different environments—public to public, private to public, virtual machine to container—your cloud native software is beginning to encounter reliability issues.

How do you stay on top of this ever-increasing complexity? With the Istio service mesh, you’ll be able to manage traffic, control access, monitor, report, get telemetry data, manage quota, trace, and more with resilience across your microservice.

In this book, Lee Calcote and Zack Butcher explain why your services need a service mesh and demonstrate step-by-step how Istio fits into the life cycle of a distributed application. You’ll learn about the tools and APIs for enabling and managing many of the features found in Istio.

Explore the observability challenges Istio addresses
Use request routing, traffic shifting, fault injection, and other features essential to running a solid service mesh
Generate and collect telemetry information
Try different deployment patterns, including A/B, blue/green, and canary
Get examples of how to develop and deploy real-world applications with Istio support

Osoby które kupowały "Istio: Up and Running. Using a Service Mesh to Connect, Secure, Control, and Observe", wybierały także:

F# 4.0 dla zaawansowanych. Wydanie IV 96,45 zł, (29,90 zł -69%)
Systemy reaktywne. Wzorce projektowe i ich stosowanie 65,31 zł, (20,90 zł -68%)
Scratch. Komiksowa przygoda z programowaniem 36,06 zł, (11,90 zł -67%)
GameMaker. Kurs video. Kompleksowy przewodnik tworzenia gier platformowych 154,58 zł, (55,65 zł -64%)
JavaScript. Kurs video. Programowanie funkcyjne i reaktywne 98,98 zł, (39,59 zł -60%)

Spis treści

Istio: Up and Running. Using a Service Mesh to Connect, Secure, Control, and Observe eBook -- spis treści

Preface
- Who Should Read This Book
- Why We Wrote This Book
- Conventions Used in This Book
- Using Code Examples
- OReilly Online Learning
- How to Contact Us
- Acknowledgments
1. Introducing the Service Mesh
- What Is a Service Mesh?
  - Fundamentals
- Sailing into a Service Mesh
  - Client Libraries: The First Service Meshes?
  - Why Do You Need One?
  - Dont We Already Have This in Our Container Platforms?
- Landscape and Ecosystem
  - Landscape
  - Ecosystem
  - The Critical, Fallible Network
  - The Value of a Service Mesh
    - Observability
    - Traffic control
    - Security
    - Modernizing your existing infrastructure (retrofitting a deployment)
    - Decoupling at Layer 5
- The Istio Service Mesh
  - The Origin of Istio
  - The Current State of Istio
  - Cadence
  - Releases
  - Feature Status
  - Future
  - What Istio Isnt
  - Its Not Just About Microservices
- Terminology
2. Cloud Native Approach to Uniform Observability
- What Does It Mean to Be Cloud Native?
  - The Path to Cloud Native
  - Packaging and Deployment
  - Application Architecture
  - Development and Operations Processes
  - Cloud Native Infrastructure
- What Is Observability?
  - Pillars of Telemetry
  - Logs
  - Metrics
  - Traces
  - Combining Telemetry Pillars
  - Why Is Observability Key in Distributed Systems?
- Uniform Observability with a Service Mesh
  - Client Libraries
  - Interfacing with Monitoring Systems
3. Istio at a Glance
- Service Mesh Architecture
- Planes
  - Istio Control-Plane Components
    - Pilot
    - Galley
    - Mixer
    - Citadel
  - Service Proxy
  - Istio Data-Plane Components
    - Injection
  - Gateways
    - Ingress
    - Egress
    - Direct from a service proxy
    - Route through an egress gateway
- Extensibility
  - Customizable Sidecars
  - Extensible Adapters
- Scale and Performance
- Deployment Models
4. Deploying Istio
- Preparing Your Environment for Istio
  - Docker Desktop as the Installation Environment
  - Configuring Docker Desktop
    - Deploying Kubernetes
    - Installing Kubernetes Dashboard
- Installing Istio
  - Istio Installation Options
    - Choice of security configuration
    - Choice of deployment utility
  - Registering Istios Custom Resources
  - Installing Istio Control-Plane Components
  - Deploying the Bookinfo Sample Application
  - Deploying the Sample App with Automatic Sidecar Injection
  - Networking with the Sample App
- Uninstalling Istio
- Helm-Based Installations
  - Install Helm
  - Install with Helm Template
  - Confirming a Helm-Based Installation
  - Uninstalling a Helm-Based Installation
- Other Environments
5. Service Proxy
- What Is a Service Proxy?
  - An iptables Primer
- Envoy Proxy Overview
  - Why Envoy?
    - HTTP/2 and gRPC
- Envoy in Istio
- Sidecar Injection
  - Manual Sidecar Injection
  - Ad Hoc Sidecarring
  - Automatic Sidecar Injection
    - Kubernetes labels
  - Kubernetes Init Containers
  - Sidecar Resourcing
- Envoys Functionality
  - Core Constructs
  - Certificates and Protecting Traffic
    - Administration console
6. Security and Identity
- Access Control
  - Authentication
  - Authorization
- Identity
  - SPIFFE
- Key Management Architecture
  - Citadel
  - Node Agents
  - Envoy
  - Pilot
- mTLS
- Configuring Istio Auth Policies
  - Authentication Policy: Configuring mTLS
  - Authorization Policy: Configuring Who Can Talk to Whom
7. Pilot
- Configuring Pilot
  - Mesh Configuration
  - Networking Configuration
  - Service Discovery
- Configuration Serving
- Debugging and Troubleshooting Pilot
  - istioctl
  - Troubleshooting Pilot
    - ControlZ
    - Prometheus
- Tracing Configuration
  - Listeners
  - Routes
  - Clusters
8. Traffic Management
- Understanding How Traffic Flows in Istio
- Understanding Istios Networking APIs
  - ServiceEntry
  - DestinationRule
    - Connection pool settings
    - TLS settings
    - Subsets
  - VirtualService
    - Hosts
  - Gateway
    - Binding VirtualServices to Gateways
    - The mesh Gateway
- Traffic Steering and Routing
  - Routing with request metadata
  - Blue/green deployments
  - Canary deployments
- Resiliency
  - Load-Balancing Strategy
  - Outlier Detection
  - Retries
  - Timeouts
  - Fault Injection
- Ingress and Egress
  - Ingress
  - Egress
9. Mixer and Policies in the Mesh
- Architecture
  - Enforcing Policy
- Understanding How Mixer Policies Work
  - Reporting Telemetry
- Attributes
  - Sending Reports
  - Checking Caches
- Adapters
  - In-Process Adapters
  - Out-of-Process Adapters
- Creating a Mixer Policy and Using Adapters
  - Mixer Configuration
  - Open Policy Agent Adapter
  - Prometheus Adapter
10. Telemetry
- Adapter Models
  - Reporting Telemetry
- Metrics
  - Configuring Mixer to Collect Metrics
  - Setting Up Metrics Collection and Querying for Metrics
  - Traces
    - Generating trace spans
    - Propagating trace headers
  - Disabling Tracing
- Logs
  - Metrics
- Visualization
11. Debugging Istio
- Introspecting Istio Components
- Troubleshooting with a Management Plane
  - Parlaying with kubectl
- Workload Preparedness
  - Application Configuration
  - Network Traffic and Ports
  - Services and Deployments
  - Pods
- Istio Installation, Upgrade, and Uninstall
  - Installation
  - Upgrade
    - Helm with Tiller
    - Helm without Tiller
  - Uninstallation
    - Residual CRDs
- Troubleshooting Mixer
  - Using ControlZ (ctrlz)
- Troubleshooting Pilot
- Debugging Galley
- Debugging Envoy
  - Envoys Administrative Console
  - 503 or 404 Requests
  - Sidecar Injection
    - Your pods dont run applications with UID 1337
    - Your admission controller is enabled
    - The istio-injection label is present
    - The scope of the Webhooks namespaceSelect is correct
- Version Compatibility
12. Real-World Considerations for Application Deployment
- Control-Plane Considerations
  - Galley
    - Partitioned from the configuration store
    - Partitioned from other Istio components
    - Partitioned from mesh workloads
    - Upgrades
  - Pilot
    - Partitioned from the configuration store
    - Partitioned from other Istio components
    - Partitioned from mesh workloads
    - Upgrades
  - Mixer
    - Partitioned from the configuration store
      - Mixer policies
      - Mixer telemetry
    - Partitioned from other Istio components
    - Partitioned from mesh workloads
    - Upgrades
  - Citadel
    - Partitioned from the configuration store
    - Partitioned from other Istio components
    - Partitioned from mesh workloads
    - Upgrades
- Case Study: Canary Deployment
  - Cross-Cluster Deployments
13. Advanced Scenarios
- Types of Advanced Topologies
  - Single-Cluster Meshes
  - Multiple-Cluster Meshes
    - Istio multicluster (single mesh)
    - Istio cross-cluster (mesh federation)
  - Use Cases
    - Migration
- Choosing a Topology
  - Cross-Cluster or Multicluster?
  - Configuring Cross-Cluster
  - Configure DNS and Deploy Bookinfo
Index