![Page 1: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/1.jpg)
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS App Mesh
Shubha RaoPrincipal Product ManagerAmazon Web Services
![Page 2: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/2.jpg)
Customers have lots of pieces to operate
What do developers really need to build their applications?
![Page 3: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/3.jpg)
App Mesh Features
Consistency across teams
Failure visibility and isolation
Authentication and Authorization controls
Fine-grained deployment controls
![Page 4: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/4.jpg)
Why did we built AWS App Mesh?
AWS App Mesh is our first step in building an application-aware network
Applicationfocus
Declarative model for application
communication
DEV OPS
Managed by AWS
Security, reliability, availability, and scale
Works with multiple compute options
Choice: picking the best tool for the job
![Page 5: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/5.jpg)
AWS App Mesh manages your proxy configuration
Users
AWS App Mesh
![Page 6: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/6.jpg)
AWS App Mesh
High-Level App Mesh Control Plane Architecture
Frontend Service
Envoy Management
Service
Transformer
👨👨👨👨
![Page 7: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/7.jpg)
App Mesh Configuration
Virtual Gateway
Ingress rules
Virtual Router
Routing match conditions
Virtual Service
Logical name/ Service discovery
Virtual Node
Group of service endpoints
Mesh
Application
![Page 8: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/8.jpg)
App Mesh requires explicitly modeled dependencies
Gateway
![Page 9: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/9.jpg)
Minimizes config size, mutation and blast radius
Gateway
![Page 10: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/10.jpg)
Performs fragment parsing to customize config
Gateway
Service 1
![Page 11: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/11.jpg)
App Mesh implements Envoy xDS
![Page 12: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/12.jpg)
App Mesh Features and Roadmap
Consistency across teams
Failure visibility and isolation
Authentication and Authorization controls
Fine-grained deployment controls
![Page 13: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/13.jpg)
Container Insights Mesh Dashboard--Access logsMetricsTracingAWS solutions and Partner integrations
Where we are and near term roadmap
Observability Traffic Management
HTTP/2, gRPCIngress Gateway --Routing based on explicit dependency mappingTCP, HTTP1.1Path, Header based routingWeighted RoutingRoute PrioritiesRetriesHealth Check & Load Balancing at Envoy
Security
Encryption – ACMEncryption – Bring your certmTLS - Bring your certmTLS - ACMBring your AuthZ
![Page 14: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/14.jpg)
Where we are and near term roadmap
RegionsCloudFormationScalingPrivateLinkBackwards compatible APIPublic PreviewsNew Envoy versions support
Cross Account Support using AWS RAMOn-Prem / Hybrid with AWS OutpostsMetadata based routing with AWS Cloud MapCross Cluster Support using AWS Cloud Map
ECS ConsoleK8S ControllersHelm Charts for K8S controllersFlagger IntegrationHIPAA Compliance
Must-Haves Usability Integrations
![Page 15: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/15.jpg)
Community Participation
Upstream Envoy support – SigV4 AuthN for EnvoysEnvoy configuration sequencing changesACM integration with SPIFFE/SPIREX-Ray integrationOpen Souring App Mesh control plane – Envoy Management Service
![Page 16: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/16.jpg)
Edmunds
Solution: "App Mesh provide us a consistent communications management, complete visibility, failure isolation, protection, and fine-grained deployment controls.” - Nitin Mahajan, Executive Director, service engineering, Edmunds
https://youtu.be/1UDRGlmbiZA
Challenge: There are a number of challenges with Microservices, including control over service-to-service communication, visibility into service-to-service communication and ensure trust by automating security and compliance on small Dev-Ops teams.
![Page 17: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/17.jpg)
Use Cases1. Migrate from EC2 or self-managed Kubernetes to EKS
New Service
OldService
Service ALB
Mesh: myapp
App Mesh Gateway
VPC VPC
Service
Service
AWS Cloud Map Namespace
EC2 Cluster EKS Cluster
Account 1 Account 2
![Page 18: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/18.jpg)
Use Cases2. Span a mesh across compute mode, accounts, clusters and VPCs
Service
Service
Service ALB
App Mesh Gateway
VPC VPC
Service
Service
AWS Cloud Map Namespace
EKS Cluster – EC2 EKS Cluster
Account 1 Account 2
![Page 19: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/19.jpg)
Use Cases3. Span a mesh across hybrid deployments
Service
Service
Service ALB
App Mesh Gateway
VPC
Service
Service
AWS Cloud Map Namespace
EKS Cluster AWS Outposts
Account
![Page 20: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/20.jpg)
Future Directions- Brainstorming (not on roadmap)1. Lambda Support
Service ALB
Service
Service
API GW
![Page 21: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/21.jpg)
Future Directions- Brainstorming (not on roadmap)2. Connection management
Service
Service
Service ALB
App Mesh Gateway
VPC VPC
Service
Service
![Page 22: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/22.jpg)
Future Directions- Brainstorming (not on roadmap)3. More Managed (Think Fargate)
Service
Service
Service ALB
Service Service
EKS – EC2ECS - Fargate
Proxy
EKS Control Plane
App Mesh Controllers
![Page 23: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/23.jpg)
Give us your input
surveymonkey.com/r/appmesh
![Page 25: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/25.jpg)
Engage with us!• Take the App Mesh Workshop
• Meet our team at the booth
• Check example apps and config on Github: https://github.com/aws/aws-app-mesh-examples/tree/master/walkthroughs
• Read our latest post on Containers blog: https://aws.amazon.com/blogs/containers/cross-amazon-eks-cluster-app-mesh-using-aws-cloud-map/
• Tweet with #appmesh
![Page 26: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/26.jpg)
Engage with us
Meet us at our booth
aws-app-mesh-roadmap
#appmesh or _shubha
![Page 27: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/27.jpg)
Vision“Our goal is that if you are running applications on AWS, you should not have to worry about managing networking infrastructure. It should be handled by our application-aware network … App Mesh, as it exists today, is the first step in this journey.”
~Werner Vogelshttps://www.allthingsdistributed.com/2019/03/redefining-application-communications-with-aws-app-mesh.html
![Page 28: AWS App Mesh. Shubha Rao - AW… · Amazon Web Services. Customers have lots of pieces . to operate. What do developers really need to build their applications? App Mesh Features](https://reader033.vdocuments.net/reader033/viewer/2022042922/5f6da9edee7d072ca1045f22/html5/thumbnails/28.jpg)
Give us your input: surveymonkey.com/r/appmesh