Istio

Secure ONAP Microservices with Istio Mutual TLS Authentication and RBAC

In the previous post Manage ONAP Microservices with Istio Service Mesh, we went through the steps of how to install Istio and integrate it with ONAP platform, it’s super simple and has nearly no impact to the existing projects. Now let’s enable Istio auth to secure the inter-service communication inside ONAP, it will need a little bit more efforts, but it’

Posted by "赵化冰" on Wednesday, August 15, 2018

Manage ONAP Microservices with Istio Service Mesh

In the previous post How service mesh can help during the ONAP Microservice journey, we have discussed why the community wants ONAP to evolve towards Microservice architecture and how service mesh approach could help during the journey. Now it’s time to dip our toe in the water, let’s try out Istio with ONAP by following the below steps. Installation First, download installation scripts

Posted by "赵化冰" on Wednesday, August 1, 2018

How service mesh can help during the ONAP Microservice journey

ONAP Beijing is available now! ONAP, as part of LF Networking, now accounts for more than 65% of global subscriber participation through carriers creating a harmonized, de-facto open source platform. While it’s so exciting to see that more operators are deploying ONAP in their commercial network, ONAP community realizes that there are still somewhere we can improve to smooth the deployment process. For example, instead of deploying ONAP as a

Posted by "赵化冰" on Friday, June 22, 2018

Istio v1aplha3 routing API介绍(译文）

介绍Istio v1alpha3 routing API及其设计原则

Posted by "赵化冰" on Monday, June 4, 2018

Istio 0.8 Release发布

来自Istio的儿童节礼物

在6月1日这一天的早上，Istio社区宣布发布0.8 Release，除了常规的故障修复和性能改进外，这个儿童节礼物里面还有什么值得期待内容呢？让我们来看一看：

Posted by "赵化冰" on Saturday, June 2, 2018

Istio Sidecar自动注入原理

Kubernetes webhook扩展机制解析

Kubernets 1.9版本引入了Admission Webhook(web 回调)扩展机制，通过Webhook,开发者可以非常灵活地对Kubernets API Server的功能进行扩展，在API Server创建资源时对资源进行验证或者修改。 Istio 0.7版本就利用了Kubernets webhook实现了sidecar的自动注入。

Posted by "赵化冰" on Wednesday, May 23, 2018

谈谈微服务架构中的基础设施：Service Mesh与Istio

Service Mesh模式及Istio开源项目介绍

作为一种架构模式，微服务将复杂系统切分为数十乃至上百个小服务，每个服务负责实现一个独立的业务逻辑。这些小服务易于被小型的软件工程师团队所理解和修改，并带来了语言和框架选择灵活性，缩短应用开发上线时间，可根据不同的工作负载和资源要求对服务进行独立缩扩容等优势。另一方面，当应用被拆分为多个微服务进程后，进程内的方法调用变成了了进程间的远程调用。引入了对大量服务的连接、管理和监控的复杂性,本文介绍了Service Mesh模式如何应对微服务架构的这些挑战，以及Service Mesh的明星开源项目Istio。

Posted by 赵化冰 on Thursday, March 29, 2018

Nginx开源Service Mesh组件Nginmesh安装指南

Nginmesh是NGINX的Service Mesh开源项目，用于Istio服务网格平台中的数据面代理。它旨在提供七层负载均衡和服务路由功能，与Istio集成作为sidecar部署，并将以“标准，可靠和安全的方式”使得服务间通信更容易。Nginmesh在今年底已经连续发布了0.2和0.3版本，提供了服务发现，请求转发，路由规则，性能指标收集等功能。本文介绍如何采用kubeadmin安装kubernetes集群并部署Nginmesh sidecar。

Posted by 赵化冰 on Tuesday, January 2, 2018

采用Istio实现灰度发布(金丝雀发布)

用户无感知的平滑业务升级

当应用上线以后，运维面临的一大挑战是如何能在不影响已上线业务的情况下进行升级。本文将介绍如何使用Istio实现应用的灰度发布（金丝雀发布）

Posted by 赵化冰 on Wednesday, November 8, 2017

使用Istio实现应用流量转移

"本文翻译自istio官方文档"

本任务将演示如何将应用流量逐渐从旧版本的服务迁移到新版本。通过Istio，可以使用一系列不同权重的规则（10%，20%，··· 100%）将流量平缓地从旧版本服务迁移到新版本服务。

Posted by "赵化冰" on Tuesday, November 7, 2017

Jacky Tang's Blog