Observability on Service Mesh 吴 晟 Apache SkyWalking 创始⼈人、PPMC Microsoft MVP ⽐比特⼤大陆 资深技术专家 TetrateObservability CNCF LandscapeMetric, Tracing, LoggingTraditional ObservabilityHow does agent Service MeshProxy and SidecarIstio + Envoy Representative Service Mesh implementorSkyWalking 6.0 Observability Analysis PlatformOAP > APM• Service. Represent a set/group of workloads to provide the same

Observability And Istio Telemetry 吴 晟 Apache SkyWalking Creator Apache ShardingSphere Co-founder Microsoft MVP Tetrate founding Engineer Bitmain tech expert Service Mesh Meetup #4 上海海站 上海海站 2018.11.25Observability CNCF LandscapeMetric, Tracing, LoggingOld game to observeService Mesh is comingProxy and SidecarIstio + Envoy Representative Service Mesh implementorObserve on mesh Metric

Click to edit Master title style 1 可觀測性 (Observability) 在 Kubernetes Day2 Operation的考量與實踐 E . W. K u o @ i T h o m e K u b e r n e t e s S u m m i t 2 0 2 2 Click to edit Master title style Operation Challenge of Kubernetes Day 2 Operation Tame operational complexity Observability Observability Demo 3 Day2 運營 定義與說明 Kubernetes Day2 運營的挑戰 馴服運營 複雜性 可觀測性 實踐與思維 可觀測性 關聯演示 https://clux.dev/post/2022-01-11-prometheus-ecosystem/ Click to edit Master title style 17 Observability 可 觀 測 性 的 實 踐 與 思 維 17 Click to edit Master title style 18 可觀性三大支柱 18 用數據來了解你的系統狀況！ Click

Agenda ➢ HP Horizon platform design with Istio ➢ Secure Platform ➢ Wise Platform ➢ Excellent Observability ➢ Q & A #IstioCon HP Horizon Platform design with Istio #IstioCon HP Horizon Platform HP #IstioCon Excellent Observability #IstioCon Excellent Observability Istio generates detailed telemetry for all service communications within a mesh. This telemetry provides observability of service behavior Access Logs #IstioCon Excellent Observability Istio(envoy) can generate access logs for service traffic in a configurable set of formats #IstioCon Excellent Observability - Access logs Log Files Parse

turn, run Tanzu Kubernetes Grid and are remotely managed by the Tanzu Mission Control and Tanzu Observability SaaS solutions. This solution did not consider resource-constrained environments or a management open source projects Prometheus and Grafana. 3.3.4.4 Anthos Anthos enables application observability through Anthos service mesh. Cluster-level metrics have limited support through Cloud Logging and Grafana. • Alerts and Notifications o Notifications and alerts are core pillars of observability in DevOps. Even though monitoring and logging provide a way to get insight into the state of

MongoDB ... ● Other Layer-7 Protocols: ... Control Plane (Traffic Management, Security, Observability) #IstioCon What Do We Expect From a Service Mesh? 为了将基础设施的运维管理从应用代码中剥离，我们需要七层的流量管 理能力： ● Routing Injection with application layer error codes ○ HTTP status code ○ Redis Get error ○ ... ● Observability with application layer metrics ○ HTTP status code ○ Thrift request latency ○ ... ● Application layer-3 to layer-6 ● Routing based on headers under layer-7 ○ IP address ○ TCP Port ○ SNI ● Observability - only TCP metrics ○ TCP sent/received bytes ○ TCP opened/closed connections ● Security ○

Network Observability Operator Network Observability Operator 发行版本独立于 OpenShift Container Platform 次版本流的更新。更新 可以通过单一的滚动流提供，该流在所有当前支持的 OpenShift Container Platform 4 版本中被支持。有 关 Network Observability Operator Operator 的新功能、功能增强和程序错误修复的信息，请参阅 Network Observability 发行注记。 1.3.21. 可伸缩性和性能 1.3.21.1. PAO must-gather 镜 镜像添加到默 像添加到默认 认 must-gather 镜 镜像 像 在这个版本中，Performance Addon Operator (PAO) must-gather 镜像不再需要作为 must-gather Degraded=True，并显示不接受证书的原因，以便更轻松地进行故障排除。(OCPBUGS-8404) 在以前的版本中，可观察性仪表板使用大型查询来显示数据，这会导致在有大量节点的集群上频 繁超时。在这个版本中，Observability 仪表板使用预先计算的记录规则，以确保在有大量节点的 集群上的可靠性。(OCPBUGS-3986) 裸机硬件置 裸机硬件置备 在以前的版本中，如果裸机的主机名不是由反向 DNS 或 DHCP

OpenTelemetryCollector apiVersion: opentelemetry.io/v1alpha1 metadata: name: otel spec: mode: deployment observability: metrics: enableMetrics: true 1 config: | connectors: spanmetrics: 2 目启用监控。 流程 流程 1. 要启用 TempoStack 实例的指标，请将 spec.observability.metrics.createServiceMonitors 字 段设置为 true ： 2. 要为 TempoStack 实例启用警报，请将 spec.observability.metrics.createPrometheusRules 字段设置为 true ： serviceAccount: [otlp/dev] apiVersion: tempo.grafana.com/v1alpha1 kind: TempoStack metadata: name: spec: observability: metrics: createServiceMonitors: true apiVersion: tempo.grafana.com/v1alpha1 kind:

networking and configuration ● Avoid other sources of failures (Consul etc) ● Possible benefits on Observability #IstioCon Requirements and Improvements ● Immutable deployments ● Minimal blast radius ● Stricter zonal routing ● Capability for service authentication and authorisation ● Improved Observability ● Extendable to multi-region setup #IstioCon Approach #IstioCon Rollout - Istio setup and

Varga 2021-Feb-26 Apache Kafka with Istio on K8s 2 • Scalability • Resiliency • Security • Observability • Disaster recovery Production grade Apache Kafka on Kubernetes 3 • Secure communication using