hybrid cloud istio: solving challenges of...istio: solving challenges of hybrid cloud zack butcher...

35
ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May, 2018

Upload: others

Post on 22-May-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD

Zack Butcher (@ZackButcher) - Stealth StartupChristian Posta (@christianposta) - Red Hat8 May, 2018

Page 2: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

About Us

Christian Posta@christianpostaChief Architect - Red Hat

Zack Butcher@ZackButcherFounding Engineer - Stealth Startup

Page 3: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

KUBERNETES IS BEST PLACE TO RUN CONTAINERS WORKLOADS

● Place containers on hosts● Declarative deployment models● Scaling, autoscaling● Health checking● Rudimentary service discovery and load balancing

Page 4: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

INTERESTING THINGS HAPPEN WHEN SERVICES TRY TO COMMUNICATE

Page 5: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

THINGS WE MUST SOLVE FOR BECAUSE “DISTRIBUTED SYSTEMS”

● Service discovery

● Retries● Timeouts● Load balancing● Rate Limiting● Circuit Breaking

● Security● Zone aware

balancing● Outlier detection● Traffic shaping● Request

mirroring● Fault Inject

● Distributed tracing

● Logging● Metrics

collection● Dark launches● Per-request

routing● Edge routing

Page 6: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

LET’S SOLVE THOSE HORIZONTAL CONCERNS OUT OF THE APPLICATION

Page 7: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

LET’S SOLVE THOSE HORIZONTAL CONCERNS OUT OF THE APPLICATION

Page 8: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

LET’S SOLVE THOSE HORIZONTAL CONCERNS OUT OF THE APPLICATION

Page 9: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

FOUNDATIONS OF A SERVICE MESH

Page 10: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

WHAT IS A SERVICE MESH

A service mesh is decentralized application-networking infrastructure between your services that provides resilience, security, observability, and routing control.

Page 11: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

ISTIO IS AN OPEN-SOURCE SERVICE MESH TO CONNECT, SECURE, AND MANAGE YOUR SERVICES

Page 12: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

● Fine grained traffic control/routing● Service resilience● Secure communication● Policy enforcement● Telemetry collection

ISTIO GIVES YOU

Page 13: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,
Page 14: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

DOES EVERYTHING RUN IN THE MESH?

Page 15: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,
Page 16: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,
Page 17: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,
Page 18: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,
Page 19: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

CHALLENGES OF RUNNING HYBRID DEPLOYMENT ENVIRONMENTS

Page 20: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

● Resilience● Organizational policy enforcement● Monitoring / Observability● Security● Workload identity● Routing / networking

OPERATING THIS ENVIRONMENT IS HARD

Page 21: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

ISTIO CAN HELP IN HYBRID DEPLOYMENT ENVIRONMENTS

Page 22: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

SERVICE COMMUNICATION AND ROUTING

● Workloads shouldn’t have to know about topology (and topology changes)

● Federate service-discovery registries● Routing through well-established ingress/egress points ● Fine-grained control for operators to shift/shape traffic

Page 23: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

OBSERVABILITY / METRIC COLLECTION

● Understanding what’s happening across entire domain● Single pane of glass for application-level networking metrics● Consistent metric collection via istio proxies● QPS, 500s, Circuit breaking events, Pxx latencies, etc

Page 24: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

SECURITY / IDENTITY

● Securing all traffic inter-cluster with mTLS● Consistent identity for workloads across clusters● Leverages SPIFEE (Secure Production Identity For Everyone)● Foundations for zero-trust networking

Page 25: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

ISTIO HYBRID DEPLOYMENT ARCHITECTURE

Page 26: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

KUBERNETES TO VM MESH EXPANSION

Page 27: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

K8S to K8S SINGLE CONTROL PLANE

Page 28: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

K8S to K8S MULTIPLE CONTROL PLANE

Page 29: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

DEMO

Page 30: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

Part One

Page 31: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

Part Two

Page 32: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

Part Three

Page 33: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

Demo time - Reach out for questions!

Website: http://istio.io

Twitter: @IstioMesh

GitHub: https://github.com/istio/istio/

Community: https://istio.io/community.html

Demo: https://github.com/ZackButcher/hybrid-demo

Page 34: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

Christian Posta@christianpostaChief Architect - Red Hat

Zack Butcher@ZackButcherFounding Engineer - Stealth Startup

Demo time - Reach out for questions!

Page 35: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,

plus.google.com/+RedHat

linkedin.com/company/red-hat

youtube.com/user/RedHatVideos

facebook.com/redhatinc

twitter.com/RedHat

THANK YOU