Observability And Istio Telemetry 吴 晟 Apache SkyWalking Creator Apache ShardingSphere Co-founder Microsoft MVP Tetrate founding Engineer Bitmain tech expert Service Mesh Meetup #4 上海海站 上海海站 2018.11.25Observability CNCF LandscapeMetric, Tracing, LoggingOld game to observeService Mesh is comingProxy and SidecarIstio + Envoy Representative Service Mesh implementorObserve on mesh Metric

Agenda ➢ HP Horizon platform design with Istio ➢ Secure Platform ➢ Wise Platform ➢ Excellent Observability ➢ Q & A #IstioCon HP Horizon Platform design with Istio #IstioCon HP Horizon Platform HP #IstioCon Excellent Observability #IstioCon Excellent Observability Istio generates detailed telemetry for all service communications within a mesh. This telemetry provides observability of service behavior Access Logs #IstioCon Excellent Observability Istio(envoy) can generate access logs for service traffic in a configurable set of formats #IstioCon Excellent Observability - Access logs Log Files Parse

MongoDB ... ● Other Layer-7 Protocols: ... Control Plane (Traffic Management, Security, Observability) #IstioCon What Do We Expect From a Service Mesh? 为了将基础设施的运维管理从应用代码中剥离，我们需要七层的流量管 理能力： ● Routing Injection with application layer error codes ○ HTTP status code ○ Redis Get error ○ ... ● Observability with application layer metrics ○ HTTP status code ○ Thrift request latency ○ ... ● Application layer-3 to layer-6 ● Routing based on headers under layer-7 ○ IP address ○ TCP Port ○ SNI ● Observability - only TCP metrics ○ TCP sent/received bytes ○ TCP opened/closed connections ● Security ○

networking and configuration ● Avoid other sources of failures (Consul etc) ● Possible benefits on Observability #IstioCon Requirements and Improvements ● Immutable deployments ● Minimal blast radius ● Stricter zonal routing ● Capability for service authentication and authorisation ● Improved Observability ● Extendable to multi-region setup #IstioCon Approach #IstioCon Rollout - Istio setup and

Varga 2021-Feb-26 Apache Kafka with Istio on K8s 2 • Scalability • Resiliency • Security • Observability • Disaster recovery Production grade Apache Kafka on Kubernetes 3 • Secure communication using

control plane that makes it easier to connect, observe, and secure microservices. SkyWalking is an observability power tool that provides distributed tracing, service mesh telemetry analysis, metric aggregation

(24 X 7) LTS (N – 3) FIPS, ARM Tech Advisory Developer portal API Gateway Security (EW) Observability Zero-trust Approval Processes Rollback Delegation WASM Multi Cluster Global Service Failover

0ded0a 5G Architecture with Istio 7 ©2021 Aspen Mesh. All rights reserved. Visibility, Observability, Debugging Uniform metrics and tracing for all CNF traffic Enforcement Primitives to Build

in a consistent way ● Service Mesh ○ An architectural pattern to implement common Security, Observability, Service Routing & Discovery functions as features of the infrastructure - ○ Functions: TLS

Focus on code Scale to zero Quick entry to serverless computing … … traffic management observability security … Knative design based on knative.dev #IstioCon r How Istio is leveraged in a Knative