Istio Up & Running Using a Service Mesh to Connect, Secure, Control, and Observe Compliments of Lee Calcote & Zack Butcher Istio: Up and Running Using a Service Mesh to Connect, Secure, Control, and Observe Lee Calcote and Zack Butcher Beijing Boston Farnham Sebastopol Tokyo Istio: Up and Running by Lee Calcote and Zack Butcher Copyright © 2020 Lee Calcote and Zack Butcher. All rights reserved. Printed in the United States of America. Published by O’Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O’Reilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (http://oreilly.com). For more information, contact our corporate/institutional sales department: 800-998-9938 or corporate@oreilly.com. Acquisitions Editor: John Devins Development Editor: Corbin Collins Production Editor: Deborah Baker Interior Designer: David Futato Copyeditor: Octal Publishing, LLC October 2019: Proofreader: Christina Edwards Indexer: Ellen Troutman Cover Designer: Karen Montgomery Illustrator: Rebecca Demarest First Edition Revision History for the First Edition 2019-09-26: First Release 2019-11-27: Second Release See http://oreilly.com/catalog/errata.csp?isbn=9781492043782 for release details. The O’Reilly logo is a registered trademark of O’Reilly Media, Inc. Istio: Up and Running, the cover image, and related trade dress are trademarks of O’Reilly Media, Inc. While the publisher and the authors have used good faith efforts to ensure that the information and instructions contained in this work are accurate, the publisher and the authors disclaim all responsibility for errors or omissions, including without limitation responsibility for damages resulting from the use of or reliance on this work. Use of the information and instructions contained in this work is at your own risk. If any code samples or other technology this work contains or describes is subject to open source licenses or the intellectual property rights of others, it is your responsibility to ensure that your use thereof complies with such licenses and/or rights. This work is part of a collaboration between O’Reilly and Tetrate. See our statement of editorial independ‐ ence. 978-1-492-08743-4 [LSCH] Table of Contents Preface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix 1. Introducing the Service Mesh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 What Is a Service Mesh? Fundamentals Sailing into a Service Mesh Client Libraries: The First Service Meshes? Why Do You Need One? Don’t We Already Have This in Our Container Platforms? Landscape and Ecosystem Landscape Ecosystem The Critical, Fallible Network The Value of a Service Mesh The Istio Service Mesh The Origin of Istio The Current State of Istio Cadence Releases Feature Status Future What Istio Isn’t It’s Not Just About Microservices Terminology 1 1 2 3 5 6 7 7 7 8 8 11 11 12 13 14 15 15 15 16 16 2. Cloud Native Approach to Uniform Observability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 What Does It Mean to Be Cloud Native? The Path to Cloud Native 21 22 iii Packaging and Deployment Application Architecture Development and Operations Processes Cloud Native Infrastructure What Is Observability? Pillars of Telemetry Logs Metrics Traces Combining Telemetry Pillars Why Is Observability Key in Distributed Systems? Uniform Observability with a Service Mesh Client Libraries Interfacing with Monitoring Systems 24 24 24 25 25 27 27 27 28 29 30 32 32 33 3. Istio at a Glance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Service Mesh Architecture Planes Istio Control-Plane Components Service Proxy Istio Data-Plane Components Gateways Extensibility Customizable Sidecars Extensible Adapters Scale and Performance Deployment Models 35 36 37 39 40 42 44 45 46 47 48 4. Deploying Istio. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Preparing Your Environment for Istio Docker Desktop as the Installation Environment Configuring Docker Desktop Installing Istio Istio Installation Options Registering Istio’s Custom Resources Installing Istio Control-Plane Components Deploying the Bookinfo Sample A