集群外部流量出口：Egress Gateway（可选,在一个集中点对外部访问进行控制） • Service discovery • Load balancing • Time out • Retries • Circuit breaker • Routing • Auth • Telemetry collecting 外部流量出口 外部流量入口 Pilot 2 Istio 流量管理 – 控制面 两类数据： 1:9080，即 reviews 服务进行业务处理。 10 Istio 协议支持现状 • 七层服务治理 – 服务发现（基于服务的逻辑名称） – LB、基于应用协议的错误码进行 Retries 和 Circuit Breaker – 基于七层协议 Meta data 的路由（RPC协议中的调用 服务名、方法名等） – Fault Injection（RPC 协议层的错误码） – RPC 调用的 Metrics（调用次数，调用失败率等） Tracing • 四层服务治理 – 服务发现（基于 VIP 或者 Pod IP：DNS 只用于解析得 到 IP，不能被 Envoy 感知） – LB、基于四层链接错误的 Retries 和 Circuit Breaker – 基于四层的路由（IP + Port） – 基于四层的 Metrics（TCP收发包数量等） IP Header TCP Header Layer 7 Protocol Header

filtering. • Inbound port bypass: By default, Istio’s sidecar iptables inbound redirection rules short- circuit if the destination port is 15090, 15021, 1502, or 22. As Envoy does not listen on port 22, this enables so and receive connections to the port. Additionally, even if this port were not granted a short-circuit, Istio’s sidecar Envoy proxy process exposes its administration interface on port 15000. This API

- ○ Functions: TLS Termination, Traffic Management, Tracing, Rate Limiting, Protocol Adapter, Circuit breaker, Caching, etc. #IstioCon Service Mesh Journey ● Capture application traffic characteristics

challenges [1] ■ Traffic steering (network slicing) ■ Fault injection (resilience of the app) ■ Circuit detection and outlier detection (reliability) etc. ■ Pervasive security (via mtls) ■ Extensibility

Generate LDS/RDS for Envoy Filter AwesomeRPC Filter ● Decoding/Encoding ● Routing ● Load balancing ● Circuit breaker ● Fault injection ● Stats ● ... Pros: ● It’s relatively easy to add support for a new protocol

● HTTP/2 Load-balancing ● Traffic Shifting ● mTLS Features under investigation: ● Retries ● Circuit breaking Istio at Mercari Stabilizing Istio 10 Stabilizing Istio ● Istio sidecar proxy specifications

Architecture 4 ©2021 Aspen Mesh. All rights reserved. Key Platform Requirements Multi-Vendor Real-Time (RAN) Workload Mobility Networking outside CNF Encryption & Authorization between CNFs 5 ©2021