Istio 服务网格中的应用程序应该使用无 Sidecar 模式还是 Sidecar 模式？.pdf

1、1|Copyright 2024Sidecar-Less or Sidecarsfor Your Applications in Istio Service Mesh?2|Copyright 20242Metaphor-building somethingSection HeaderSection SubtitleSection Sub Header3|Copyright 20243Metaphor-building somethingSection HeaderSection SubtitleSection Sub Header4|Copyright 2024Head of Open Sou

2、rcesolo.ioLin SunCopyright 202456|Copyright 2024ProblemsSource:https:/ 20247Metaphor-building somethingSection HeaderSection SubtitleSection Sub Header8|Copyright 20248Metaphor-building somethingSection HeaderSection SubtitleSection Sub HeaderCopyright 20249Show Me Your HandCopyright 2024What is a S

3、ervice Mesh?A service mesh is a programmable framework that allows you to observe,secure and connect microservices.Service Mesh Evolution11Source:https:/cf.io/Copyright 2024Service Mesh Evolution 2017Copyright 202413Happy Sidecars UsersCopyright 202414Sidecar ChallengeCopyright 2024Challenges With S

4、idecars-Transparency-Require injection of sidecars-You may already have an init container for your application pod-Startup/shutdown sequences between app containers and sidecars-Sidecar upgrade requires restarting of applications-Jobs?Server-send-first protocols?Copyright 2024Challenges With Sidecar

5、s-Incremental Adoption-Yes you can adopt one feature at a time-Many users adopt service mesh because of mTLS among applications-All-or-nothing injection of sidecarsCopyright 2024Other Challenges With Sidecars-Security-Overprovision resourcesCopyright 2024Service Mesh Evolution 20211source:https:/ 20

6、24Can eBPF Perform Layer7 Functions?source:https:/ 2024eBPF is GreatWhat about Layer 7 Tasks-Resiliency-L7 routing-L7 route table can be complex-Request manipulation-Supporting the full breath of LB algorithms and features will not be easy-Decoding and encoding h2 is not easy as sending the bytes as