蚂蚁金服高级技术专家2/39 蚂蚁金服高级技术专家 2019年初加入蚂蚁金服，主要负责微服务、Service Mesh 相关 产品的研发工作 开源配置中心 Apollo 主要作者 https://github.com/ctripcorp/apollo 毕业于复旦大学软件工程系 曾就职于携程、大众点评，负责中间件、后台系统等研发工作3/39 一、为什么需要 Service Mesh Sidecar 的模式运行 将服务治理能力下沉到基础设施，实现独立演进，透明升级7/39 异构系统统一治理 Part 1： 为什么需要Service Mesh? 多语言、多协议 图片来源：https://www.redhat.com/en/topics/microservices/what-is-a-service-mesh 流量控制、监控8/39 金融级网络安全 Part 1： 云原生方案？ 落地有 gap 图片来源：https://istio.io/docs/concepts/what-is-istio/11/39 Part 2： 在当下『路口』的思考 Greenfield vs Brownfield Greenfield • 绿地，未开发过的土地 • 全新的项目/新系统 图片来源：https://faasandfurious.com/90

power by plugins CoreDNS https://ahmet.im/blog/coredns-grpc-backendsCoreDNS Plugins https://github.com/coredns/presentations/blob/master/A-Deep-Dive-into-CoreDNS-2018.pdf https://godoc.org/github.com/ com/coredns/coredns/plugin https://coredns.io/2017/03/01/how-to-add-plugins-to-coredns/CoreDNS 的记录更新 ��� ��� �.8�.8���� 8����3�9:.8�3���3 .:�� .88�89 ���0. ���.85.:.9 3�� �8��� �8��.:0.�9 ��8��: 88�89 ����0. ��5���8.9: .:�� �� � https://github.com/coredns/dynapi/pull/1 https://github.com/coredns/coredns/pull/1822 https://tools.ietf.org/html/rfc2136 https://cloud.google.com/sdk/gcloud/refere

arathon, Mesos, Consul, Etcd, Z ookeeper, BoltDB, Rest API, file…) 来自动化、动态的应用它的 配置文件进行设置Traefik 项目 •https://github.com/containous/traefik •MIT License •Written in Go •25,400+⭐ 2,700+⬇ •Current Stable image: containous/whoami labels: - "traefik.http.routers.whoami.rule=Host(`whoami.docker.local`)"# https://mycompany.org/jenkins -> http://jenkins:8080/jenkins jenkins: image: jenkins/jenkins:lts environment: 规则匹配 - "traefik.http.routers.jenkins.service=jenkins" Docker With PathPrefixDocker With Rewrite # https://mycompany.org/gitserver -> http://gitserver:3000/ gitserver: image: gitea/gitea labels: - "traefik

2018-06-30 蚂蚁先行一步 Part 1：ServiceMesh灵魂拷问一：要架构还是要性能？ Istio社区的Proposal Mixer V2 Architecture https://docs.google.com/document/d/1QKmtem5jU_2F3Lh5SqL p0IuPb80_70J7aJEYu4_gS-s/edit#heading=h.hvvcgepdykro Review | Approved | Obsolete Created: 12/18/2018 Release Version: N/A Approvers: xxx [], xxx [] （摘要翻译：https://skyao.io/learning-istio/mixer/design/v2.html）Part 1：ServiceMesh灵魂拷问一：要架构还是要性能？ Mixer v2 Proposal的核心 Support WebAssembly (WASM) in Envoy - https://github.com/envoyproxy/envoy/issues/4272 - 计划在1.12版本提供（1.11版本发布于7月12日） - envoy-wasm项目：Playground for Envoy WASM filter - https://github.com/envoyproxy/envoy-wasm

Meetup #3 深圳站关于我 • JEX 技术VP • 前小恩爱技术总监 • Gopher，开源爱好者 • Go 夜读发起人 • https://github.com/developer-learning/night-reading-go • https://github.com/developer-learning/learning-kubernetes大纲 • 技术架构的演进 • 如何提升工程效率？DevOps comments(#2056) —> bradrydzewski removed this from To Do in Version 0.9 on Jun 30 • …Drone 社区 https://discourse.drone.io/Drone 的安装 • docker pull drone/drone:0.8.6 • Docker pull drone/agent:0.8.6 • 支持自定义插件（你可以自己实现自己所需的插件） • 本机测试 .drone.yml : drone execAPI 支持我是作者名称.drone.yml代码质量检测 SonarQube 参考资料：https://github.com/developer-learning/night-reading- go/blob/master/articles/sonarqube-for-golang/2018-

Grafana prometheusThanos ● Global view ● High availability ● Scaling https://github.com/improbable-eng/thanosBig pictureGlobal view - Sidecar ● Deployed along with each prometheus from object storage is expensive, caching is necessary.Deploy on kubernetes - Prom + Sidecar ● https://github.com/improbable-eng/thanos/tree/master/ kube/manifests ● Run as statefulset in a kubernetes pod IPs in the cluster.Voila!Monitoring your service meshMonitoring your service mesh - istio ● https://www.katacoda.com/courses/istio /deploy-istio-on-kubernetes ● Mixer, pilot and envoy exposes

WeiboMesh：https://github.com/weibocom/motan-go JAVA：https://github.com/weibocom/motan OR：https://github.com/weibocom/motan-openresty PHP：https://github.com/weibocom/motan-php Examples：https://github

Programmable API APP ...... Data Plane Control Layer Application Layer通过Service Mesh控制面统一管理F5和Envoy https://aspenmesh.io/2019/03/expanding-service-mesh-without-envoy/ Control Plane Security Policy： • Enable 多网络平面支持 在产品化过程中对Istio的改进会持续向社区进行贡献！Service Mesh中文社区 https://www.servicemesher.com 个人博客 https://zhaohuabing.com https://medium.com/@zhaohuabing Github https://github.com/zhaohuabing

Focus 领域： * SOFAStack 微服务领域 * Service Mesh，Serverless 等云原生领域 SOFAStack 官网: https://www.sofastack.tech SOFAStack: https://github.com/sofastack3 一、Service Mesh 简介 二、为什么要 Service Mesh 三、方案落地 四、分时调度案例 100% 100% 100% 1% 99%24 双十一成果 覆盖双十一核心链路数十万容器 双十一大促 0新增 机器 QPS 数千万 处理 RT < 0.2ms MOSN: https://github.com/sofastack/sofa-mosn25 对 Service Mesh 未来的思考 我们对 Service Mesh 的思考与未来 Pod APP MOSN

ServiceRelation • ServiceInstanceRelati on • EndpointRelation • Extendable Aggregation Functions https://github.com/apache/incubator-skywalking/blob/6.0/docs/en/concepts- and-designs/oal.mdWhat is Service Mesh sidecar, client or server. In normal L7 proxy, value is proxy.We need your star on GitHub • https://github.com/apache/incubator-skywalkingThanks