Introduction to Istio and how to manage traffic routing Google Cloud DevFest Bangkok 2019 at AIS DC on November 16, 2019

1. Cloud DevFest Bangkok
Managing Traffic Routing with Istio
and Envoy Workshop
By Jirayut Nimsaeng
CEO, Opsta
https://tinyurl.com/devfest-bkk-istio

2. Setup Qwiklabs

3. Step one
Make sure to sign out of your
Qwiklabs account
https://qwiklabs.com

4. Step two
Go to
https://go.qwiklabs.com/cloud-study-jams-2019
and click “Enroll” on GCP Essentials

5. <addcodehere>
Step three
Enter the Study Jam Access Code
1s-bangkok-9453

6. Step four
Sign into your account
1. Sign in with your Google
account or email
2. Hover over avatar on top right
and make sure it says “monthly
subscription”.
Tip: Make sure you check the opt-in box for
promos! That makes you eligible for
additional free access after you complete
today’s Quest.

7. 1. Sign out of your Qwiklabs account
and sign back in.
2. Note that you will still see prices
on labs - but you will be able to
use your subscription to take
them. When you are prompted for
payment, simply click “Use
Subscription” to take the lab with
your free 1-month pass.
3. Still having trouble? Reach out to
Support@Qwiklabs.com and we’ll
be happy to assist!
Having trouble?

8. Microservices
Microservice
DB
Microservice
UI
DB

9. Microservicessssss
Microservice
DB
Microservice Microservice
UI
Microservice
DB DB

10. Service Mesh
Microservice
DB
Microservice Microservice
UI
Microservice
DB DB

11. Service Mesh
Microservice
DB
Microservice Microservice
UI
Microservice
DB DB
Basic required
- Discovery
- Load balancing
- Failure recovery
- Metrics
- Monitoring
Some advanced features
- A/B testing
- Canary rollouts
- Rate limiting
- Access control
- End-to-end authentication.

12. Istio

13. Istio core features
Workshop today

14. Istio Security

15. Istio Policy
● Rate limiting to dynamically limit the traffic to a service
● Denials, whitelists, and blacklists, to restrict access to services
● Header rewrites and redirects

16. Istio Architecture

17. Envoy
● Sidecar to every pod
● Proxy to all inbound and outbound traffic
● Written in C++

18. Mixer
● Mixer enforces access control and usage policies
across the service mesh
● Mixer collects telemetry data from the Envoy
proxy and other services.

19. Pilot
● Pilot provides service discovery for the Envoy
sidecars
● Pilot converts high level routing rules that control
traffic behavior into Envoy-specific configurations,
and propagates them to the sidecars at runtime.

20. How Pilot Works
1. The platform starts a new instance of a service
which notifies its platform adapter.
2. The platform adapter registers the instance with
the Pilot abstract model.
3. Pilot distributes traffic rules and configurations to
the Envoy proxies to account for the change.

21. Gallery
● Galley is Istio’s configuration validation, ingestion,
processing and distribution component.
● Gallery takes user-specified configurations for
Istio and converts them into valid configurations
for the other control plane components

22. Istio Traffic Management
Understanding

23. Istio Traffic Management Sample Use Case

24. Istio Traffic Management Sample Use Case

25. Istio Traffic Management

26. Istio Traffic Management
Network Resilience and Testing

27. Timeouts apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: ratings
spec:
hosts:
- ratings
http:
- route:
- destination:
host: ratings
subset: v1
timeout: 10s
The default timeout for HTTP
requests is 15 seconds

28. Retries apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: ratings
spec:
hosts:
- ratings
http:
- route:
- destination:
host: ratings
subset: v1
retries:
attempts: 3
perTryTimeout: 2s

29. Circuit breakers apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: reviews
spec:
host: reviews
subsets:
- name: v1
labels:
version: v1
trafficPolicy:
connectionPool:
tcp:
maxConnections: 100

30. Fault injection apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: ratings
spec:
hosts:
- ratings
http:
- fault:
delay:
percentage:
value: 0.1
fixedDelay: 5s
route:
- destination:
host: ratings
subset: v1
● Delays: Delays are timing failures
● Aborts: Aborts are crash failures