13 Istio 流量管理原理与协议扩展 赵化冰Aggregated Discovery Service(ADS): 通过一个Aggregated Server提供所有xDS服务,以解 决各个不同xDS服务的顺序导致的数据一致性问题。 gRPC/REST: update config on the fly 6 Istio 流量管理 – 数据面 – Istio 中的 Envoy Sidecar 配置 Istio中的 Envoy Sidecar breaker • Fault injection • Telemetry collecting Pilot 将通用协议路由规则解析为统一格式 的 xDS 配置下发。 RPC Filter Framework Awesome RPC Specific Logic Decoding/encoding Parsing header …… Routing …… 优点: • 控制面的扩展性好 问题: • 需要修改0 码力 | 20 页 | 11.31 MB | 6 月前3
Istio Security AssessmentReproduction Steps 1. Configure a cluster per Appendix E on page 49, with a restricted user confined to a "rest rict-test" namespace per the Istio cluster setup guide2 2. Obtain the output of the following command entions.md#resources' type: string kind: description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests0 码力 | 51 页 | 849.66 KB | 1 年前3
IstioCon2023 Welcome KeynoteNative Community(China). Istio Trends ιστίο • (istío) n (plural ιστία) 1. sail What about the rest of the boat? Upcoming Talks: Aperture - Load Management Meshery - WASM plugin management Argo -0 码力 | 14 页 | 1.31 MB | 1 年前3
Automate mTLS
communication with
GoPay partners with
IstioKubernetes Clusters ● 250+ microservices ● 150M+ internal API calls ● 3000+ deployments every week ● REST as well as gRPC services ● Services written in Golang, Java, Clojure, Ruby gRPC, Envoy, and ● GoPay0 码力 | 16 页 | 1.45 MB | 1 年前3
Moving large scale consumer
e-commerce Infrastructure to
MeshPB/month #IstioCon Architecture Overview ● User traffic infrastructure - TW region, all 3 zones ● REST APIs for client traffic ● gRPC for inter-service traffic ● Around 100+ microservices ● Majority0 码力 | 14 页 | 1.76 MB | 1 年前3
Istio-redirector: the way
to go to manage
thousands of HTTP
redirections○ Open Pull Request on Github ○ Fetch info from Kubernetes cluster ○ Expose an API to be used with REST or a CLI ● React.js SPA ○ Allow non developers to use the API ○ Analyze existing redirections0 码力 | 13 页 | 1.07 MB | 1 年前3
Istio控制平面组件原理解析Envoy优雅关闭实现方式讨论:#3307 #2920Pilot-Discovery——配置中心(PD) uv1版本和v2版本之间的区别 u建立缓存配置 u触发配置生效方式v1版本和v2版本之间的区别 V1 HTTP1 REST JSON/YAML 弱类型 轮询 SDS/CDS/RDS/LDS 奠定控制平面基础 V2 HTTP2 GRPC Proto3 强类型 Push SDS/CDS/RDS/LDS/HDS/ADS/KDS0 码力 | 30 页 | 9.28 MB | 6 月前3
Set Sail for a
Ship-Shape Istio Releasedocumentation on upgrades across all supported methods ○ Test documentation using istio.io test framework #IstioCon Upgrade Working Group - User Experience ● Add pre-checks to identify and warn about0 码力 | 18 页 | 199.43 KB | 1 年前3
Performance tuning and best practices in a Knative based, large-scale serverless platform with Istioand provides aggregated data of Knative Service ready duration. o Knative Performance Testing Framework 2 Design #IstioCon o Ingress gateway MEM has linear growth, and it consumes ~=750k for 1 Knative0 码力 | 23 页 | 2.51 MB | 1 年前3
全栈服务网格 - Aeraki 助你在
Istio 服务网格中管理任何七层流量service from the standpoint of Istio. Visit Github to get more information https://github.com/aeraki-framework/aeraki #IstioCon Aeraki Configuration Example: Dubbo Service definition Traffic rules #IstioCon0 码力 | 29 页 | 2.11 MB | 1 年前3
共 10 条
- 1













