Service Mesh for VM Native, Chris Crall, Jianfei Hu, Google Cloud Next ‘19 #IstioCon Why Add VMs to the Mesh? ● = Why Service Mesh? ○ More services = more complexity ○ Need consistent policy enforcement Observability ○ See VM metrics alongside containers ● Extensibility #IstioCon Why Should Istio Support VMs ● ≈ Why VMs? ○ Technical reasons ■ Better known security controls ■ Better isolation (of seems closer to be production ready? Should we expect more? And what do we need else? #IstioCon Why We Expect More? A Closer Look… ● Example use case: Telco & Edge computing ○ where VMs play a crucial

#IstioCon Why don’t you ? ● Mock ? ● Contract testing ? #IstioCon Mock ? Contract testing ? At a scale of 800+ providers ? Mocks are like any other software: ● Bugs ● Maintenance Why don’t

Hot-Upgrade 阿里云服务网格团队 – 史泽寰 • 为什么需要服务网格数据面热升级 • 实现热升级 • 实践热升级 目录 Catalog 2 为什么需要服务网格数据面热升级 Why do we need Hot-Upgrade for ServiceMesh Data-Plane • 造成请求失败，影响业务质量 • 重启Pod导致业务容器也被重启，需要执行重新初始化 • 不增加workload数量升级，则服务容量受损 • 增加workload保持服务容量不变，应对大规模场景难以在扩容规模和操作便捷度上取 得令人满意的平衡 传统Sidecar升级方式的缺点 3 为什么需要服务网格数据面热升级 Why do we need Hot-Upgrade for ServiceMesh Data-Plane • 只替换/重启Sidecar • 替换/重启过程中进/出不会出现请求失败，连接失败 • 易于运维，可以控制升级策略

800-204B Sheng Wu Creator, SkyWalking ● Tetrate’s product build on top of the upstream Istio ● Why not Istio OSS? ● Problems unsolved ○ Multi-cluster and VM (lower onboarding cost) ○ Enterprise team less and less different from the perspective of a developer building and operating an application Why is Istio? TSB: The Application-Aware Networking Platform Istio: Control Plane Tetrate Service Bridge:

com/in/janzantinge linkedin.com/in/gflarity linkedin.com/in/liam-white Internal Presentation AGENDA Why? Reasons Options How? Strategy Compromise What could have been better? Learnings Hurdles

Founded 5,000 Developers 50M Customers 1993 IPO $6.8B FY19 Revenue 20 Locations 1983 Why Service Mesh? Microservices Kubernetes Service Mesh Istio Monolith Era Intuit Statistics ●

Istio-redirector 301-redirection from /bus/routes/bruxelles/lille to /bus/routes/bruxelles-1/lille-3 Why do we need redirections? BEFORE : /bus/routes/bruxelles/lille New /bus/routes/bruxelles-1/lille-3

Proxy sidecar sidecar Configuration for proxy Certs, ACLs… Raw metrics HTTP/1 HTTP/2 gRPC Why? Innovation trigger Peak of inflated Expectations Though of Disillusionment Slope of Enlightenment

maintain a build of Envoy EXTERNAL AUTH RATE LIMITING ROUTER UPSTREAM WASM gRPC TRANSCODER Why WebAssembly? 8 | Copyright © 2020 8 | Copyright © 2020 User Experience 9 | Copyright © 2020

Architect, Aspen Mesh February 22, 2021 2 ©2021 Aspen Mesh. All rights reserved. What Is 5G and Why Does It Matter? 5G wireless technology is meant to deliver higher multi-Gbps peak data speeds, ultra