Istio in Action

480 Pages·2022·21.163 MB·English

by  Christian E. Posta, Rinor Maloku

Christian E. Posta
Rinor Maloku
Foreword by Eric Brewer
M A N N I N G
Istio in Action
ii
Istio in Action
CHRISTIAN E. POSTA
RINOR MALOKU
FOREWORD BY ERIC BREWER
MAN NING
SHELTER ISLAND
For online information and ordering of this and other Manning books, please visit
www.manning.com. The publisher offers discounts on this book when ordered in quantity.
For more information, please contact
Special Sales Department
Manning Publications Co.
20 Baldwin Road
PO Box 761
Shelter Island, NY 11964
Email: [email protected]
©2022 by Manning Publications Co. All rights reserved.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in
any form or by means electronic, mechanical, photocopying, or otherwise, without prior
written permission of the publisher.
Many of the designations used by manufacturers and sellers to distinguish their products are
claimed as trademarks. Where those designations appear in the book, and Manning
Publications was aware of a trademark claim, the designations have been printed in initial caps
or all caps.
Recognizing the importance of preserving what has been written, it is Manning’s policy to have
the books we publish printed on acid-free paper, and we exert our best efforts to that end.
Recognizing also our responsibility to conserve the resources of our planet, Manning books
are printed on paper that is at least 15 percent recycled and processed without the use of
elemental chlorine.
The author and publisher have made every effort to ensure that the information in this book
was correct at press time. The author and publisher do not assume and hereby disclaim any
liability to any party for any loss, damage, or disruption caused by errors or omissions, whether
such errors or omissions result from negligence, accident, or any other cause, or from any
usage of the information herein.
Manning Publications Co. Development editor: Elesha Hyde
20 Baldwin Road Technical development editor: Brent Stains
PO Box 761 Review editor: Aleksandar Dragosavljevic´
Shelter Island, NY 11964 Production editor: Andy Marinkovich
Copy editor: Tiffany Taylor
Proofreader: Jason Everett
Technical proofreaders: Gregory Reshetniak
Typesetter and cover designer: Marija Tudor
ISBN 9781617295829
Printed in the United States of America
I dedicate this book to my wife and daughters.
—Christian Posta
I dedicate this book to everybody
who shares knowledge on the web.
—Rinor Maloku
vi
brief contents
PART 1 UNDERSTANDING ISTIO .................................................. 1
1 ■ Introducing the Istio service mesh 3
2 ■ First steps with Istio 24
3 ■ Istio’s data plane: The Envoy proxy 54
PART 2 SECURING, OBSERVING, AND CONTROLLING
YOUR SERVICE’S NETWORK TRAFFIC ............................... 75
4 ■ Istio gateways: Getting traffic into a cluster 77
5 ■ Traffic control: Fine-grained traffic routing 110
6 ■ Resilience: Solving application networking
challenges 136
7 ■ Observability: Understanding the behavior of your
services 177
8 ■ Observability: Visualizing network behavior with
Grafana, Jaeger, and Kiali 205
9 ■ Securing microservice communication 230
PART 3 ISTIO DAY-2 OPERATIONS ............................................ 265
10 ■ Troubleshooting the data plane 267
11 ■ Performance-tuning the control plane 295
vii
viii BRIEF CONTENTS
PART 4 ISTIO IN YOUR ORGANIZATION .................................... 317
12 ■ Scaling Istio in your organization 319
13 ■ Incorporating virtual machine workloads into the mesh 347
14 ■ Extending Istio on the request path 378
contents
foreword xvii
preface xix
acknowledgments xxi
about this book xxiii
about the authors xxvii
about the cover illustration xxviii
PART 1 UNDERSTANDING ISTIO ................................... 1
1 Introducing the Istio service mesh 3
1.1 Challenges of going faster 5
Our cloud infrastructure is not reliable 6 ■ Making service
interactions resilient 7 ■ Understanding what’s happening
in real time 8
1.2 Solving these challenges with application libraries 8
Drawbacks to application-specific libraries 9
1.3 Pushing these concerns to the infrastructure 11
The application-aware service proxy 11 ■ Meet the Envoy
proxy 12
1.4 What’s a service mesh? 13
1.5 Introducing the Istio service mesh 15
How a service mesh relates to an enterprise service bus 17
How a service mesh relates to an API gateway 18
ix