hybrid cloud istio: solving challenges of...istio: solving challenges of hybrid cloud zack butcher...
TRANSCRIPT
![Page 1: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/1.jpg)
ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD
Zack Butcher (@ZackButcher) - Stealth StartupChristian Posta (@christianposta) - Red Hat8 May, 2018
![Page 2: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/2.jpg)
About Us
Christian Posta@christianpostaChief Architect - Red Hat
Zack Butcher@ZackButcherFounding Engineer - Stealth Startup
![Page 3: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/3.jpg)
KUBERNETES IS BEST PLACE TO RUN CONTAINERS WORKLOADS
● Place containers on hosts● Declarative deployment models● Scaling, autoscaling● Health checking● Rudimentary service discovery and load balancing
![Page 4: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/4.jpg)
INTERESTING THINGS HAPPEN WHEN SERVICES TRY TO COMMUNICATE
![Page 5: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/5.jpg)
THINGS WE MUST SOLVE FOR BECAUSE “DISTRIBUTED SYSTEMS”
● Service discovery
● Retries● Timeouts● Load balancing● Rate Limiting● Circuit Breaking
● Security● Zone aware
balancing● Outlier detection● Traffic shaping● Request
mirroring● Fault Inject
● Distributed tracing
● Logging● Metrics
collection● Dark launches● Per-request
routing● Edge routing
![Page 6: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/6.jpg)
LET’S SOLVE THOSE HORIZONTAL CONCERNS OUT OF THE APPLICATION
![Page 7: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/7.jpg)
LET’S SOLVE THOSE HORIZONTAL CONCERNS OUT OF THE APPLICATION
![Page 8: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/8.jpg)
LET’S SOLVE THOSE HORIZONTAL CONCERNS OUT OF THE APPLICATION
![Page 9: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/9.jpg)
FOUNDATIONS OF A SERVICE MESH
![Page 10: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/10.jpg)
WHAT IS A SERVICE MESH
A service mesh is decentralized application-networking infrastructure between your services that provides resilience, security, observability, and routing control.
![Page 11: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/11.jpg)
ISTIO IS AN OPEN-SOURCE SERVICE MESH TO CONNECT, SECURE, AND MANAGE YOUR SERVICES
![Page 12: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/12.jpg)
● Fine grained traffic control/routing● Service resilience● Secure communication● Policy enforcement● Telemetry collection
ISTIO GIVES YOU
![Page 13: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/13.jpg)
![Page 14: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/14.jpg)
DOES EVERYTHING RUN IN THE MESH?
![Page 15: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/15.jpg)
![Page 16: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/16.jpg)
![Page 17: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/17.jpg)
![Page 18: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/18.jpg)
![Page 19: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/19.jpg)
CHALLENGES OF RUNNING HYBRID DEPLOYMENT ENVIRONMENTS
![Page 20: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/20.jpg)
● Resilience● Organizational policy enforcement● Monitoring / Observability● Security● Workload identity● Routing / networking
OPERATING THIS ENVIRONMENT IS HARD
![Page 21: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/21.jpg)
ISTIO CAN HELP IN HYBRID DEPLOYMENT ENVIRONMENTS
![Page 22: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/22.jpg)
SERVICE COMMUNICATION AND ROUTING
● Workloads shouldn’t have to know about topology (and topology changes)
● Federate service-discovery registries● Routing through well-established ingress/egress points ● Fine-grained control for operators to shift/shape traffic
![Page 23: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/23.jpg)
OBSERVABILITY / METRIC COLLECTION
● Understanding what’s happening across entire domain● Single pane of glass for application-level networking metrics● Consistent metric collection via istio proxies● QPS, 500s, Circuit breaking events, Pxx latencies, etc
![Page 24: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/24.jpg)
SECURITY / IDENTITY
● Securing all traffic inter-cluster with mTLS● Consistent identity for workloads across clusters● Leverages SPIFEE (Secure Production Identity For Everyone)● Foundations for zero-trust networking
![Page 25: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/25.jpg)
ISTIO HYBRID DEPLOYMENT ARCHITECTURE
![Page 26: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/26.jpg)
KUBERNETES TO VM MESH EXPANSION
![Page 27: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/27.jpg)
K8S to K8S SINGLE CONTROL PLANE
![Page 28: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/28.jpg)
K8S to K8S MULTIPLE CONTROL PLANE
![Page 29: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/29.jpg)
DEMO
![Page 30: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/30.jpg)
Part One
![Page 31: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/31.jpg)
Part Two
![Page 32: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/32.jpg)
Part Three
![Page 33: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/33.jpg)
Demo time - Reach out for questions!
Website: http://istio.io
Twitter: @IstioMesh
GitHub: https://github.com/istio/istio/
Community: https://istio.io/community.html
Demo: https://github.com/ZackButcher/hybrid-demo
![Page 34: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/34.jpg)
Christian Posta@christianpostaChief Architect - Red Hat
Zack Butcher@ZackButcherFounding Engineer - Stealth Startup
Demo time - Reach out for questions!
![Page 35: HYBRID CLOUD ISTIO: SOLVING CHALLENGES OF...ISTIO: SOLVING CHALLENGES OF HYBRID CLOUD Zack Butcher (@ZackButcher) - Stealth Startup Christian Posta (@christianposta) - Red Hat 8 May,](https://reader033.vdocument.in/reader033/viewer/2022042223/5ec98e2e846779596d2ce23c/html5/thumbnails/35.jpg)
plus.google.com/+RedHat
linkedin.com/company/red-hat
youtube.com/user/RedHatVideos
facebook.com/redhatinc
twitter.com/RedHat
THANK YOU