您现在的位置:首页 >> Java书籍 >> 基础书籍 >> 内容

Istio核心架构原理及实战笔记 PDF 电子书下载

时间:2020-4-13 9:28:48

  核心提示:Istio核心架构原理及实战笔记 PDF 下载本站整理下载:链接:https://pan.baidu.com/s/1Ixrrr5aBYWG58nBOYCbheQ提取码:mzph主要内容:01 不妨聊聊...
Istio核心架构原理及实战笔记 PDF 下载

01 不妨聊聊各个组件
Components官网 :https://istio.io/docs/ops/deployment/architecture/#components
1.1 Proxy[Envoy]
官网 :https://www.envoyproxy.io/
github :https://github.com/envoyproxy/envoy
1.1.1 Features
Dynamic service discovery
Load balancing
TLS termination
HTTP/2 and gRPC proxies
Circuit breakers
Health checks
Staged rollouts with %-based traffic split
Fault injection
Rich metrics
1.1.2 为什么选择Envoy?
1.2 Mixer
Istio uses an extended version of the Envoy proxy. Envoy is a high- performance proxy developed in C++ to mediate all inbound and outbound traffic for all services in the service mesh. Envoy proxies are the only Istio components that interact with data plane traffic. ENVOY IS AN OPEN SOURCE EDGE AND SERVICE PROXY, DESIGNED FOR CLOUD-NATIVE APPLICATIONS Envoy is hosted by the Cloud Native Computing Foundation (CNCF). If you are a company that wants to help shape the evolution of technologies that are container-packaged, dynamically-scheduled and microservices-oriented, consider joining the CNCF. For details about who's involved and how Envoy plays a role, read the CNCF announcement. 咕泡学院 只为更好的你
官网 :https://istio.io/docs/ops/deployment/architecture/#mixer
1.3 Pilot
官网 :https://istio.io/docs/ops/deployment/architecture/#pilot
Pilot为Envoy sidecar提供了服务发现功能,为智能路由提供了流量管理能力(比如A/B测试、金丝
1.4 Galley
官网 :https://istio.io/docs/ops/deployment/architecture/#galley Mixer is a platform-independent component. Mixer enforces access control and usage policies across the service mesh, and collects telemetry data from the Envoy proxy and other services. The proxy extracts request level attributes, and sends them to Mixer for evaluation. You can find more information on this attribute extraction and policy evaluation in our Mixer Configuration documentation. Mixer includes a flexible plugin model. This model enables Istio to interface with a variety of host environments and infrastructure backends. Thus, Istio abstracts the Envoy proxy and Istio-managed services from these details. Pilot provides service discovery for the Envoy sidecars, traffic management capabilities for intelligent routing (e.g., A/B tests, canary rollouts, etc.), and resiliency (timeouts, retries, circuit breakers, etc.). (1)Polit定了一个抽象模型,从特定平台细节中解耦,用于对接外部的不同平台 (2)Envoy API负责和Envoy的通讯,主要是发送服务发现信息和流量控制规则给Envoy (3)Platform Adapter是Pilot抽象模型的实现版本,用于对接外部的不同平台 ... Galley is Istio’s configuration validation, ingestion, processing and distribution component. It is responsible for insulating the rest of the Istio components from the details of obtaining user configuration from the underlying platform (e.g. Kubernetes). 主要负责istio配置的校验、各种配置之间统筹,为istio提供配置管理服务。 通过kubernetes的webhook机制对pilot和mixer的配置进行验证。 咕泡学院 只为更好的你
1.5 Citadel
官网 :https://istio.io/docs/ops/deployment/architecture/#citadel
02 Bookinfo
官网 :https://istio.io/docs/examples/bookinfo/
The Bookinfo application is broken into four separate microservices:
productpage . The productpage microservice calls the details and reviews
microservices to populate the page.
details . The details microservice contains book information.
reviews . The reviews microservice contains book reviews. It also calls the ratings
ratings . The ratings microservice contains book ranking information that
accompanies a book review.
There are 3 versions of the reviews microservice:
Version v1 doesn’t call the ratings service.
Version v2 calls the ratings service, and displays each rating as 1 to 5 black stars.
Version v3 calls the ratings service, and displays each rating as 1 to 5 red stars.
This application is polyglot, i.e., the microservices are written in different languages. It’s
worth noting that these services have no dependencies on Istio, but make an interesting
service mesh example, particularly because of the multitude of services, languages and
versions for the reviews service.
2.1 理解bookinfo
Citadel enables strong service-to-service and end-user authentication with built-in identity and credential management. You can use Citadel to upgrade unencrypted traffic in the service mesh. Using Citadel, operators can enforce policies based on service identity rather than on relatively unstable layer 3 or layer 4 network identifiers. Starting from release 0.5, you can use Istio’s authorization feature to control who can access your services. This example deploys a sample application composed of four separate microservices used to demonstrate【/ˈdemənstreɪt/ 证明】 various Istio features. The application displays information about a book, similar to a single catalog entry of an online book store. Displayed on the page is a description of the book, book details (ISBN, number of pages, and so on), and a few book reviews. 咕泡学院 只为更好的你
2.2 sidecar自动注入到微服务
官网 :https://istio.io/docs/examples/bookinfo/#start-the-application-services
To run the sample with Istio requires no changes to the application itself. Instead, you
simply need to configure and run the services in an Istio-enabled environment, with Envoy
sidecars injected along side each service. The resulting deployment will look like this:
All of the microservices will be packaged with an Envoy sidecar that intercepts incoming
and outgoing calls for the services, providing the hooks needed to externally control, via
the Istio control plane, routing, telemetry collection, and policy enforcement for the
application as a whole.
(1)Change directory to the root of the Istio installation.
(2)The default Istio installation uses automatic sidecar injection. Label the namespace
that will host the application with istio-injection=enabled :
(3)Deploy your application using the kubectl command:
cd istio-1.0.6 kubectl label namespace default istio-injection=enabled kubectl get namespaces --show-labels docker pull registry.cn-hangzhou.aliyuncs.com/istio-k8s/examples-bookinfo- details-v1:1.8.0 docker pull registry.cn-hangzhou.aliyuncs.com/istio-k8s/examples-bookinfo- ratings-v1:1.8.0 docker pull registry.cn-hangzhou.aliyuncs.com/istio-k8s/examples-bookinfo- reviews-v1:1.8.0 docker pull registry.cn-hangzhou.aliyuncs.com/istio-k8s/examples-bookinfo- reviews-v2:1.8.0 docker pull registry.cn-hangzhou.aliyuncs.com/istio-k8s/examples-bookinfo- reviews-v3:1.8.0 docker pull registry.cn-hangzhou.aliyuncs.com/istio-k8s/examples-bookinfo- productpage-v1:1.8.0 kubectl apply -f istio-1.0.6/samples/bookinfo/platform/kube/bookinfo.yaml kubectl get pods咕泡学院 只为更好的你

Java免费学习   Java自学网 http://www.javalearns.com

关注微信号:javalearns   随时随地学Java



作者:不详 来源:网络
  • 网友介绍的
  • 百度搜索的
  • Google搜索的
  • 其它搜索过来的
  • 网址输错了进来的
  • 太忙了不记得了
共有评论 0相关评论
  • 大名:
  • 内容:
  • java学习网(www.javalearns.com) © 2014 版权所有 All Rights Reserved.
  • Email:javalearns@163.com 站长QQ:1356121699 晋ICP备14003680号-3
  • java学习网部分内容来自网络或网友发布,如侵犯了您利益,请发邮件至:javalearns@126.com,我们尽快处理!
  • Java学习网
  • 网站统计
  • 晋公网安备 14042902000001号