sidecar traffic from 3 scopes ● Inbound ● Outbound ● Envoy to Envoy(same host) #IstioCon Dataflow After Acceleration(same host) #IstioCon ebpf Background Knowledge Prog type ● ebpf provide

TCP/IP stack 3 times ○ Inbound ○ Outbound ○ Envoy to Envoy(same host) Istio Meetup China Dataflow After Acceleration(same host) Istio Meetup China ebpf Background Knowledge Loader & Verification

Pedro Galván Streaming and website Alberto Rodríguez Streaming Alex Palomo Speaker Advocacy Alma María Rinasz Promotion and social media Fernando Hernández Streaming Luis Sánchez Streaming Uriel García

(Software Guru) Event manager Mara Ruvalcaba Content coordination Pedro Galván Streaming and website Alberto Rodríguez Streaming Ximena Cruz, Luis Sánchez Sponsors Norma Lopez Promotion Fernando Hernández

com/gracezhang1110, www.linkedin.com/in/gong-zhang-75560670/ Advisory Software Engineer of IBM Cloud Code Engine team focusing on Knative Serving and Istio, contributor of the Knative and Cloud Foundry community com/in/yu-zhuang- 51915287/ Architect and Senior Software Engineer in IBM Cloud. Working on IBM Cloud Code Engine (Serverless platform), focusing on Knative, Istio, and Tekton, community, leading team to develop ● IBM Cloud Code Engine which fully managed, serverless platform(including knative and istio) that can host all of your cloud native workloads: https://www.ibm.com/cloud/code-engine ● Kperf, a public

popularity from the old ones and I don’t have to start from scratch New URLs are shown in the Search Engine Results ?????? ? #IstioCon Our infrastructure is deployed on GKE, with GCLB and Istio IngressGateway

Request(Transaction ID)Java探针的基本原理 A.class 1 2 3 4 5 8 9 Request Response JVM 6 10 7 Class Loader Engine Agent A’.class JavaAgent 监控数据暂 存区 运行时数据区如何基于Istio的现有组件去实现 Kubernetes Cluster MIxer 全链路关联

Applications eBay is powered by ● More than 5,000 Microservices ranging from ○ API services, Search Engine, etc. ○ Databases, Key-Value stores - Oracle, MySQL, etc. ○ Big data systems & Pipelines - Hadoop

microservices (200+ namespaces) ● 100K RPS at peak on API Gateway ● 1 main production Google Kubernetes Engine (GKE) cluster ● 12k+ pods ● 750+ nodes Istio at Mercari 7 Istio at Mercari Apr 2019 Started

Authorization policies are created by users and are enforced at runtime using Envoys built-in authorization engine. Incoming requests are passed to Envoy that then evaluate the request based on the Istio administrators