Mastering Service Mesh

Understand how to use service mesh architecture to efficiently manage and safeguard microservices-based applications with the help of examples

Key Features

• Manage your cloud-native applications easily using service mesh architecture
• Learn about Istio, Linkerd, and Consul – the three primary open source service mesh providers
• Explore tips, techniques, and best practices for building secure, high-performance microservices

Book Description

Although microservices-based applications support DevOps and continuous delivery, they can also add to the complexity of testing and observability. The implementation of a service mesh architecture, however, allows you to secure, manage, and scale your microservices more efficiently. With the help of practical examples, this book demonstrates how to install, configure, and deploy an efficient service mesh for microservices in a Kubernetes environment.

You'll get started with a hands-on introduction to the concepts of cloud-native application management and service mesh architecture, before learning how to build your own Kubernetes environment. While exploring later chapters, you'll get to grips with the three major service mesh providers: Istio, Linkerd, and Consul. You'll be able to identify their specific functionalities, from traffic management, security, and certificate authority through to sidecar injections and observability.

By the end of this book, you will have developed the skills you need to effectively manage modern microservices-based applications.

What you will learn

• Compare the functionalities of Istio, Linkerd, and Consul
• Become well-versed with service mesh control and data plane concepts
• Understand service mesh architecture with the help of hands-on examples
• Work through hands-on exercises in traffic management, security, policy, and observability
• Set up secure communication for microservices using a service mesh
• Explore service mesh features such as traffic management, service discovery, and resiliency

Who this book is for

This book is for solution architects and network administrators, as well as DevOps and site reliability engineers who are new to the cloud-native framework. You will also find this book useful if you’re looking to build a career in DevOps, particularly in operations. Working knowledge of Kubernetes and building microservices that are cloud-native is necessary to get the most out of this book.

了解如何使用服務網格架構來有效管理和保護基於微服務的應用程式，並通過實例來進行說明。

主要特點：

- 使用服務網格架構輕鬆管理您的雲原生應用程式
- 了解三個主要的開源服務網格提供者：Istio、Linkerd和Consul
- 探索構建安全、高性能微服務的技巧、技術和最佳實踐

書籍描述：

儘管基於微服務的應用程式支持DevOps和持續交付，但也可能增加測試和可觀察性的複雜性。然而，實施服務網格架構可以讓您更有效地保護、管理和擴展微服務。本書通過實際示例演示如何在Kubernetes環境中安裝、配置和部署高效的微服務網格。

您將從實踐中介紹雲原生應用程式管理和服務網格架構的概念開始，然後學習如何構建自己的Kubernetes環境。在探索後面的章節時，您將深入了解三個主要的服務網格提供者：Istio、Linkerd和Consul。您將能夠識別它們的特定功能，從流量管理、安全性和憑證授權到側載注入和可觀察性。

通過閱讀本書，您將掌握有效管理現代基於微服務的應用程式所需的技能。

您將學到什麼：

- 比較Istio、Linkerd和Consul的功能
- 熟悉服務網格控制和數據平面概念
- 通過實際示例了解服務網格架構
- 進行流量管理、安全性、策略和可觀察性的實際練習
- 使用服務網格為微服務建立安全通信
- 探索服務網格的功能，如流量管理、服務發現和可靠性

本書適合對解決方案架構師和網絡管理員，以及新手雲原生框架的DevOps和網站可靠性工程師。如果您希望在DevOps中建立職業生涯，特別是在運營方面，本書也將對您有所幫助。熟悉Kubernetes和構建雲原生微服務的工作知識對於充分利用本書至關重要。

Anjali Khatri is an enterprise cloud architect at DivvyCloud, advancing the cloud-native growth for the company by helping customers maintain security and compliance for resources running on AWS, Google, Azure, and other cloud providers. She is a technical leader in the adoption, scaling, and maturity of DivvyCloud's capabilities. In collaboration with product and engineering, she works with customer success around feature request architecture, case studies, account planning, and continuous solution delivery.

Prior to Divvycloud, Anjali worked at IBM and Merlin. She has 9+ years of professional experience in program management for software development, open source analytics sales, and application performance consulting.

Vikram Khatri is the chief architect of Cloud Pak for Data System at IBM. Vikram has 20 years of experience leading and mentoring high-performing, cross-functional teams to deliver high-impact, best-in-class technology solutions. Vikram is a visionary thought leader when it comes to architecting large-scale transformational solutions from monolithic to cloud-native applications that include data and AI. He is an industry-leading technical expert with a track record of leveraging deep technical expertise to develop solutions, resulting in revenues exceeding $1 billion over 14 years, and is also a technology subject matter expert in cloud-native technologies who frequently speaks at industry conferences and trade shows.

Anjali Khatri 是 DivvyCloud 的企業雲架構師，通過幫助客戶維護在 AWS、Google、Azure 和其他雲提供商上運行的資源的安全性和合規性，推進了該公司的雲原生增長。她在採用、擴展和成熟 DivvyCloud 能力方面是一位技術領導者。與產品和工程部門合作，她與客戶成功團隊合作，進行特性請求架構、案例研究、帳戶規劃和持續解決方案交付。

在加入 Divvycloud 之前，Anjali 在 IBM 和 Merlin 工作。她在軟體開發項目管理、開源分析銷售和應用性能諮詢方面擁有 9 年以上的專業經驗。

Vikram Khatri 是 IBM Cloud Pak for Data System 的首席架構師。Vikram 在領導和指導高效跨職能團隊交付高影響力、最佳技術解決方案方面擁有 20 年的經驗。Vikram 是一位具有遠見的思想領袖，擅長從單體應用到雲原生應用的大規模轉型解決方案，包括數據和人工智能。他是一位行業領先的技術專家，憑藉深厚的技術專業知識開發解決方案，14 年來的收入超過 10 億美元，同時也是雲原生技術的技術專家，經常在行業會議和展覽上發表演講。

1. Monolithic Versus Microservices
2. Cloud-Native Applications
3. Service Mesh Architecture
4. Service Mesh Providers
5. Service Mesh Interface and SPIFFE
6. Building Your Own Kubernetes Environment
7. Understanding the Istio Service Mesh
8. Installing a Demo Application
9. Installing Istio
10. Exploring Istio Traffic Management Capabilities
11. Exploring Istio Security Features
12. Enabling Istio Policy Controls
13. Exploring Istio Telemetry Features
14. Understanding the Linkerd Service Mesh
15. Installing Linkerd
16. Exploring the Reliability Features of Linkerd
17. Exploring the Security Features of Linkerd
18. Exploring the Observability Features of Linkerd
19. Understanding the Consul Service Mesh
20. Installing Consul
21. Exploring the Service Discovery Features of Consul
22. Exploring Traffic Management in Consul

- 單體式架構與微服務
- 雲原生應用程式
- 服務網格架構
- 服務網格提供者
- 服務網格介面和SPIFFE
- 建立自己的Kubernetes環境
- 瞭解Istio服務網格
- 安裝示範應用程式
- 安裝Istio
- 探索Istio的流量管理功能
- 探索Istio的安全功能
- 啟用Istio的策略控制
- 探索Istio的遙測功能
- 瞭解Linkerd服務網格
- 安裝Linkerd
- 探索Linkerd的可靠性功能
- 探索Linkerd的安全功能
- 探索Linkerd的可觀察性功能
- 瞭解Consul服務網格
- 安裝Consul
- 探索Consul的服務發現功能
- 探索Consul的流量管理功能