(cont’d) And, multicluster is not just one approach; in fact, there are 4 categories: Within the same network, ● Primary cluster + Primary cluster ● Primary cluster + Remote cluster On different networks, Second Demo What’s next? @rytswd #IstioCon For the following demos, we will be using: ● Single Network ● Primary + Primary NOTE: we will be taking slightly different approach from Istio official documentation Audience What to expect Istio Multicluster First Demo About GitOps Second Demo What’s next? Single Network Multiple Networks Challenge of Multicluster (cont’d) @rytswd #IstioCon Brush up on Istio resources

software delivery. Here are some of the key reasons: Manage deployments from on-premise to cloud to edge Scale infrastructure to meet demands Enable built-in compliance Enforce zero-trust security Let’s complex, what organizations need is a consistent way to build and deliver applications from on-prem to edge. Deutsche Telekom is a great example of an organization that needs to support legacy applications securely deploy workloads and other services on-premise, across multiple sites, clouds, and at the edge with the standard GitOps operating model. Our application teams have more or less all the basics

secure, and scale applications more easily and cost-effectively from cloud to edge on the world’s most distributed network. www .akamai .com www .linode .com About 3 KEY ELEMENTS FOR YOUR GITOPS STRATEGY

Photo by Abele Gigante on Unsplash Cheng Wei Chen @ Cloud Edge Sumit 2020 From DevOps to GitOps with GitLab Cheng Wei Chen 陳 正瑋 DevOps Engineer @ 得寬科技
 《Effective DevOps 中⽂版》譯者、GitLab Hero http://chengweichen

guarantees stability, resilience wherever Kubernetes is needed on-premise, in the cloud or at the edge. To see WKP in action, watch the demo here. CONCLUSION The requirement to deliver software features

few commands, you can deploy a complete Kubernetes cluster with a resilient and secure container network onto the Cloud Provider of your choice in only a few minutes. kubeadm is a command line tool that the nodes. Initialize the master, by picking one of the machines and running: kubeadm init The network interface is auto-detected and then advertises the master on it with the default gateway. A successful Install Weave Net as the Pod Networking Layer In this section, you will install a Weave Net pod network so that your pods can communicate with each other. Install Weave Net by running on the master:

是指云服务中的平台即服务，这个概念的业界定义和理解不是很统一，并 且比较混淆。我们简化一些，指公有云中的 RDS 等中间件、数据库在线服 务，以及容器云。 VLAN Virtual Local Area Network, 虚拟局域网, 是建立在物理网络基础上的一 种逻辑子网，用于隔离多个主机组之前的网络访问。物理位置不同的多个 主机如果划分属于同一个 VLAN，则这些主机之间可以相互通信。物理位 置相同的多个主机如果属于不同的 通常在交换机或路由器上实现，在以太网帧中增加 VLAN 标签来给 以太网帧分类，具有相同 VLAN 标签的以太网帧在同一个广播域中传送。 SDN 软件定义网络（Software Defined Network，SDN）是由美国斯坦福大 学 clean-slate 课题研究组提出的一种新型网络创新架构，是网络虚拟化的 一种实现方式。是当前最热门的网络技术之一，是私有云和公有云相比虚 拟化平台先进的一个部分就是 xxx/management-center container_name: management-center environment: HOST_HOSTNAME: $HOSTNAME networks: - cmp-network 杭州飞致云信息科技有限公司 31 extra_hosts: - "iam-apigateway-proxy.demo.com: 172.30.188.2" - "auth.demo.com:

❑ 更细粒度的资源分配，更低的成本 ❑ 实时计算扩缩容 mvm Docker process Docker process … Function Memory CPU Network Serverless 用户 云厂商 Serverless vs. IaaS 运维能力对比 资源创建 业务部署 监控告警 故障排查 性能调优 安全保障 弹性扩缩 故障恢复 基本运维能力 有风险 ❑ 自动回复，秒 级 ❑ 每次请求都是一个新的实例 虚拟机 容器 Serverless 性能调优 Database Linux OS 虚拟机 Database Tomcat Network Runtime Serverless vs. IaaS 运维能力 安全保障 Serverless vs. IaaS 运维能力 ❑ 网络隔离 ❑ 执行环境与管理环境隔离 ❑ 函数资源限制

sure that all affected parties in your organization see a proposed merge. For example, perhaps a network change should be approved not only by the system administration team but also by the networking security of your cluster, vulnerability management, and security compliance through auditing, network segmentation awareness and configuration, security risk profiling, security-re- lated configuration

be bundled and managed together. It also makes it easier to troubleshoot production bugs, such as network connectivity, as users have better visibility of the changes with the deployments. Increased productivity