Secrets Management at Scale with Vault & Rancher 24. June Robert de Bock Senior DevOps Engineer Adfinis robert.debock@adfinis.com Kapil Arora Senior Solution Engineer HashiCorp kapil@hashicorp.com

Jason Webb Vrushali Joshi Istio Service Mesh at Enterprise Scale Feb, 2021 Who are we? Founded 5,000 Developers 50M Customers 1993 IPO $6.8B FY19 Revenue 20 Locations 1983 Why Service

#IstioCon Moving large scale consumer e-commerce Infrastructure to Mesh Rajath Ramesh Principal Software Engineer @Carousell Harshad Rotithor Software Architect @Carousell #IstioCon About Carousell

Istio at Scale: How eBay is building a massive Multitenant Service Mesh using Istio Sudheendra Murthy #IstioCon Agenda ● Introduction ● Applications Deployment ● Service Mesh Journey ● Scale Testing Management & Security Enforcement ■ Updating hardware devices is slow ○ Achieving micro-segmentation at scale ○ Enabling TLS for all applications in a consistent way ● Service Mesh ○ An architectural pattern Istio #IstioCon How does it all scale …? ● Extensive Data-plane & Control-plane scale testing ● Data-plane performance of Envoy is well documented ● Control-plane scale testing ○ Primary Goal ■ Understand

#IstioCon Performance tuning and best practices in a Knative based, large-scale serverless platform with Istio 张龚, Gong Zhang, IBM China Development Lab 庄宇, Yu Zhuang, IBM China Development Lab #IstioCon running, and managing serverless, cloud- native applications. It provides benefits: Focus on code Scale to zero Quick entry to serverless computing … … traffic management observability security

指标、日志和追踪 1.16. 性能和可扩展性 1.17. 为生产环境配置 SERVICE MESH 1.18. 连接服务网格 1.19. 扩展 1.20. 使用 3SCALE WEBASSEMBLY 模块 1.21. 使用 3SCALE ISTIO 适配器 1.22. 服务网格故障排除 1.23. ENVOY 代理故障排除 1.24. SERVICE MESH CONTROL PLANE 配置参考 SERVICE MESH 中自定义安全性 2.7. 流量管理 2.8. 在 SERVICE MESH 上部署应用程序 2.9. 数据可视化和可观察性 2.10. 自定义资源 2.11. 使用 3SCALE ISTIO 适配器 2.12. 删除 SERVICE MESH 3 3 3 27 32 33 38 40 42 48 58 62 77 79 90 103 111 113 115 混合器插件需要移植到 WebAssembly 扩展。 1.2.2.12.5. 3scale WebAssembly Adapter(WASM) Mixer 现已正式删除，OpenShift Service Mesh 2.1 不支持 3scale 混合器适配器。在升级到 Service Mesh 2.1 之前，删除基于 Mixer 的 3scale 适配器和任何其他 Mixer 插件。然后，使用 Service MeshExtension

1. 流量管理 第 第 6 章 章 支持 支持 6.1. 为红帽支持收集 RED HAT OPENSHIFT SERVICE MESH 数据 第 第 7 章 章 3SCALE 适配器 适配器 7.1. 使用 3SCALE ISTIO 适配器 3 3 3 3 6 7 9 9 12 13 14 18 18 19 30 43 44 49 49 52 53 57 62 64 66 观察控制台只支持 Chrome 、Edge 、Firefox 或 SDomain 浏览器的最新的两个版本。 1.3.2. 支持的 Mixer 适配器 此发行版本只支持以下 Mixer 适配器： 3scale Istio Adapter Red Hat OpenShift Service Mesh 在服务网络间提供了实现关键功能的统一方式： 流量管理 流量管理 - 控制服务间的流量和 API 调用 OpenShift Service Mesh 1.1.2 版中包含的组件版本 组 组件 件 版本 版本 Istio 1.4.6 Jaeger 1.17.1 Kiali 1.12.7 3scale Istio Adapter 1.0.0 1.3.4. Red Hat OpenShift Service Mesh 1.1.2 的新功能 此 Red Hat OpenShift Service

Promising results both visually and quantitatively Fully Scalable Arbitrary input size Arbitrary scale factor Arbitrary temporal frames Our Method 44 45 Data from Vid4 [Ce Liu et al.] Motion Estimation ???? = ???????????? + 1 skip connections Input size: Fully convolutional Decoder Arbitrary Scale Factors 50 2× 3× 4× Parameter Free ???????????????????????? ???????????? ????????????0 ????? hour / frame Scale Factor: 4× Frames: 31 MFSR [Ma et al, 2015] Running Time 65 10 min / frame Scale Factor: 4× Frames: 31 DESR [Liao et al, 2015] Running Time 66 / frame Scale Factor: 4× Frames:

Automatic scaling overview 6 scaling controller detect symptoms decide whether to scale decide how much to scale metrics policy scaling action ??? Vasiliki Kalavri | Boston University 2020 Automatic Performance ▸ fast convergence scaling controller detect symptoms decide whether to scale decide how much to scale metrics policy scaling action ??? Vasiliki Kalavri | Boston University 2020 Scaling Control theory models: e.g., PID controller • Rule-based models, e.g. if CPU utilization > 70% => scale out • Analytical dataflow-based models Action • Speculative: small changes at one operator at

cooldown period (a property of the ​ScaledObject​, default of 300 seconds) the last replica will scale back down to zero. - Benchmark the ScaledObject will be deployed when there is change in the scaling RocketMQ operator deployment on Kubernetes also support Horizontal scale with Name server cluster scale, Broker Cluster Scale RocketMQ has Client SDK for Go, Java More in detailed (more detailed Open Messaging Connect - OpenMessaging Connect API can be loaded by RocketMQ connection Main scale handler Authentication - Add NewRocketMQScaler - Secure patterns & config for authentication