Are you in a relentless pursuit to better serve your customers and users? Need to build and deploy cloud-native applications based on the microservices architecture? In your microservices applications are you struggling with reliability and complexity? Istio is the implementation of a service mesh that creates resilience in your applications as you connect, manage, and secure microservices. Red Hatter’s Christian Posta and Burr Sutter introduce you to several key microservices capabilities that Istio provides on Kubernetes and Red Hat OpenShift.
In this O'Reilly book learn how:
The Istio service mesh enables developers to build better and more dependable software and deliver it faster than before.
DevOps teams can use the Istio service mesh to create powerful and resilient cloud-native applications.
Istio improves traffic control, service resiliency, testing, observability, and security of your microservices.
Short introduction into Istio... The big drawback is that not all configuration files are included into the book, but referred as names in the repository - so it's hard to read it without direct access to computer.
Loved the book. Mostly because it was precisely what I was expecting and hoping for.
It's neither high-level, descriptive exec summary (like some of the books in this series) nor it's a detailed technology deep dive. As the title suggests - it's an introduction. If you have even elementary understanding of the landscape around Kubernetes you won't be lost. On the other hand text and examples in the book are detailed enough to give you general overview of "what" and some basic "feeling" of "how" you can use common Istio / service mesh features.
Overall - the book in my opinion fulfills it's promise perfectly. It's short but still sufficiently concrete. If you don't know what the heck Istio or service mesh is - this book will fill the gap.
I'm starting to learning some practical ways to apply a canary development, circuit breakers and service resilience. This is a small and concise book with practical examples that worth your time.
Does the job well of introducing to the Service Mesh
My notes:
- Service Mesh: A service mesh is the connective tissue between your services that adds additional capabilities like traffic control, service discovery, load balancing, resilience, observability, security, and so on. - Istio: An implementation of service mesh. Istio is comprised of a Data Plane and Control Plane. - Istio's Data Plane intercepts all inbound (ingress) and outbound (egress) network traffic. Composed of a Service Proxy injected as a side-car container to the pods. - Control Plane is composed of 3 primary services: 1. Pilot responsible for managing the overall fleet of microservices running in the cluster and maintaining an up-to-date "routing table". Provides support for Service Discovery, Route Role and Destination Policy. 2. Mixer brings things together. Pluggable backend achictecture 3. Auth - Also known as Istio CA is responsible for Certificate Signing, Certificate Issuance and Revocation / Rotation. - Canary deployments are made easy using RouteRule - By default all egress traffic outside the cluster is disallowed. EgressRule specifies the rule to allow. - Resiliency capabilities: Client-side load balancing, Timeout, Retry (if one paid fails, retry for another), Simple circuit breaker, Pool ejection) - DestinationRule - Security - Can be used for Chaos testing
Great introduction to Istio. If you're looking to implement a service mesh on Kubernetes with Envoy and Istio, this is clearly a must read. It is a bit short on the chaos testing, observability and security chapters. But the rest is solid.
A very brief but decent introduction to istio walking you through basic setup and running it with your own hosted kubernetes. The books doesn't touch on GCP kubernetes engine however and I feel not having a chapter for that in particular is remiss.