1 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Istio Execution on Kubernetes and its advantages

By Satish Aherkar, ATMECS Inc.

2 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

About MeSatish Aherkar

Technical lead|Devops

Consultant|Devops Evangelist

Experience -

More than 6+ years of experience in infrastructure

management and solutions.

Expertise -

DevOps solutions on different OS platforms.

Formerly DevOps Consultant @dvsts, Devops

Engineer|System Administrator|Linux Engineer @Zeta

global

3 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Agenda

● Introduction of Service Mesh

● What is Istio

● Why Istio

● Quick view of Istio Architecture

● Istio Integration

● Getting started - Bookinfo application demo

4 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Introduction to Service Mesh

Service Mesh - A service mesh is a communication layer that rides on top of

request/response unlocking some patterns essential for healthy microservices

● Zero-trust security that doesn’t assume a trusted perimeter.● How microservice talk to each other ● Fault injection and tolerance that lets you experimentally verify the resilience of your

application● Advanced routing that lets you do things like A/B testing, rapid versioning and

deployment.

5 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

What is Istio !Uniform way to secure, connect, and

monitor microservices !

6 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Why Istio1. Deploy on the existing application2. Authorization & Authentication3. Traffic management4. Core metrics of the application5. Communication & Failover6. Full security

7 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Why Istio ( Contd..)

● Automatic load balancing.

● Fine-grained control of traffic behavior with rich routing rules.

● A pluggable policy layer and configuration API supporting access controls

● Automatic metrics, logs, and traces for all traffic within a cluster.

● Secure service-to-service communication in a cluster with strong identity-based

authentication and authorization.

8 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Can’t kubernetes do this for us ?

9 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Kubernetes vs istio ( Contd why istio )

Kubernetes doesn’t help with higher-level

problems, such as:

→ Core metrics

→ Failure handling & Service discovery

→ Traffic routing

10 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Istio Architecture

An Istio service mesh is logically split into a data plane and a control plane

→ data plane→ control plane

Components :

→ Envoy proxy→ Mixer→ Pilot→ Citadel→ Galley

11 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Istio Architecture - Internal Data Flow

12 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Istio IntegrationHow to integrate with istio using kubernetes :

● Google kubernetes ( cloud )

● AWS ( kops and eks service )

● Alibaba cloud kubernetes service

● Helm

● Openshift, docker swarm etc

13 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Getting Started - Bookinfo Demo Architecture

Prerequisites→ Kubernetes→ Istio

14 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

Questions ?

Thank YouFind Me at @SatishAherkar & satish.aherkar@atmecs.com

15 © Copyright 2018 ATMECS, Inc. All rights reserved. The information contained herein is subject to change without notice.

About ATMECS Inc

ATMECS is a result oriented full-service engineering and R&D organization. We are Technology Accelerators bringing in visible transformation for our clients through automation, adoption of leading edge integrated development platforms, CI/CD, Dev Ops, Cloud, and Big Data. Several Fortune 500 customers and exciting next gen start-up companies engage us to partner with them to solve critical business challenges. As Innovation Catalysts we help clients lead change through AI/ML, AR/VR, IOT, Conversational BOTs & Blockchain.

ATMECS is a “Trusted Partner” to organizations looking to shape their future with innovation and Next Gen technologies.Passionate Minds is who we are. A smart, nimble team with complementary capabilities – Leadership who Aspire and reach out to the future, Thinkers who question the status quo, team with abilities to Manage projects effectively, Engaging and focusing on client, creating value through innovation and ultimately helping clients Succeed. We are ATMECS.

16 © Copyright 2015 ATMECS, Inc.

Let’s partner.