Istio in Action
- 7h 10m
- Christian E. Posta, Rinor Maloku
- Manning Publications
Solve difficult service-to-service communication challenges around security, observability, routing, and resilience with an Istio-based service mesh. Istio allows you to define these traffic policies as configuration and enforce them consistently without needing any service-code changes.
In Istio in Action you will learn:
- Why and when to use a service mesh
- Envoy’s role in Istio’s service mesh
- Allowing “North-South” traffic into a mesh
- Fine-grained traffic routing
- Make your services robust to network failures
- Gain observability over your system with telemetry “golden signals”
- How Istio makes your services secure by default
- Integrate cloud-native applications with legacy workloads such as in VMs
Reduce the operational complexity of your microservices with an Istio-powered service mesh! Istio in Action shows you how to implement this powerful new architecture and move your application-networking concerns to a dedicated infrastructure layer. Non-functional concerns stay separate from your application, so your code is easier to understand, maintain, and adapt regardless of programming language. In this practical guide, you’ll go hands-on with the full-featured Istio service mesh to manage microservices communication. Helpful diagrams, example configuration, and examples make it easy to understand how to control routing, secure container applications, and monitor network traffic.
about the technology
Offload complex microservice communication layer challenges to Istio! The industry-standard Istio service mesh radically simplifies security, routing, observability, and other service-to-service communication challenges. With Istio, you use a straightforward declarative configuration style to establish application-level network policies. By separating communication from business logic, your services are easier to write, maintain, and modify.
about the book
Istio in Action teaches you how to implement an Istio-based service mesh that can handle complex routing scenarios, traffic encryption, authorization, and other common network-related tasks. You’ll start by defining a basic service mesh and exploring the data plane with Istio’s service proxy, Envoy. Then, you’ll dive into core topics like traffic routing and visualization and service-to-service authentication, as you expand your service mesh to workloads on multiple clusters and legacy VMs.
About the Author
Christian Posta (@christianposta) is VP, Global Field CTO at Solo.io. He is the author of Istio in Action as well as many other books on cloud-native architecture and is well known in the cloud-native community for being a speaker, blogger ( and contributor to various open-source projects in the service mesh and cloud-native ecosystem (Istio, Kubernetes, et. al.). Christian has spent time at government, commercial enterprises as well as web-scale companies and now helps organizations create and deploy large-scale, cloud-native, resilient, distributed architectures. He enjoys mentoring, training and leading teams to be successful with distributed systems concepts, microservices, DevOps, and cloud-native application design.
Rinor Maloku (@rinormaloku) is an engineer at Solo.io, where he consults clients adopting application networking solutions, such as service meshes. Previously, he worked at Red Hat, where he built middleware software that enabled teams to ensure the high availability of their services. As a freelancer, he consulted multiple DAX 30 members in their endeavor to fully utilize the potential of cloud computing technologies.
In this Book
about this book
Introducing the Istio service mesh
First steps with Istio
Istio’s data plane— The Envoy proxy
Istio gateways— Getting traffic into a cluster
Traffic control: Fine-grained traffic routing
Resilience— Solving application networking challenges
Observability— Understanding the behavior of your services
Observability— Visualizing network behavior with Grafana, Jaeger, and Kiali
Securing microservice communication
Troubleshooting the data plane
Performance-tuning the control plane
Scaling Istio in your organization
Incorporating virtual machine workloads into the mesh
Extending Istio on the request path