Cloud Native Application Management and Service Mesh Across Multicloud Guang Ya Liu (liugya@cn.ibm.com) Senior Software Engineer - IBM Cloud Private Kubernetes Member Istio Maintainer Why Multicloud Development & Programming Models Data Placement & Governance Operational & Application Management IBM Cloud Private 3rd Party Private Clouds 3rd Party Public Clouds IBM Public Cloud Service Security Application Management IBM Cloud Private IBM DevOps Hybrid Cloud Management Enterprise Infrastructure Application Development, Integration, Operations & Management Next Generation Middleware

Azure NPM Calico NetworkPolicy Identity Management Access to API server Integrate with Azure Active Directory Identity Management Identity Management Access to other Azure service • MSI • Pod

Continuous Deployment 持续部署 CI Continuous Integration 持续集成 CIEM Cloud Infrastructure Entitlements Management 云基础设施授权管理 CIS Center for Internet Security 互联网安全中心 CNAPP Cloud-Native Application Protection Central Processing Unit 中央处理器 CSA Cloud Security Alliance 云安全联盟 CSPM Cloud Security Platform Management 云安全平台管理 CSRF Cross Site Request Forgery 跨站请求伪造 CWPP Cloud Workload Protection Platform 云工作负载保护平台 网际互连协议 JWT JSON Web Token JSON Web 令牌 K8s Kubernetes 容器编排引擎 KSPM Kubernetes Security Posture Management Kubernetes 安全态势管理 OT Operational Technology 运营技术 OWASP Open Web Application Security Project

一个活档，指导集成。 形成市场，能力 互补 全生命周期API管理-2-Azure API Management 配置Http Header， 比如CORS等 配置入站协议转 换等 配置后端治理策略 等，比如限流规则 定义API或者导入 API 全生命周期API管理-3-Azure API Management • 把自己关在小黑 屋里面，自己就 可以自助的从API 使用角度定义、 驱动研发、发布

to ○ Improve maintenance window ○ Test monitoring and alerting system ○ Simulate poor internet connection ● Testing components(redis rabbitmq scheduler) ● Testing bugs 3+ 20 !

in Cache by PodGroup Job JobSpec 用户案例：荷兰ING银行大数据平台云原生化改造 • Platform Entry-point • Project Management Data Science in a box (Advanced analytics toolbox) • Data Discovery • Metadata engine • SQL+BI

Developer: Administrator: docker pull ... docker pull/push ... Project operation & management Settings 提供以项目为单位的逻辑隔离，存储共享 不同角色具有不同的访问权限，可以与其它用户系统集成 配额管理 制品的高效分发-复制 [1] 基于策略的内容复制机制：支

具备“双模”能力，可同时满足 大规模及云原生的服务发现通 道 MOE 方案介绍 — 如何 Debug Envoy • Admin API • Debug log • Request/Connection metrics Envoy 和 MOSN 交互层 • MOSN（GoLang） 侧耗时统计 • 交互异常数统计 • GoLang 程序异常场景下的容灾 处理 MOSN(GoLang)

nebula�kind/bin/console �u root �p password ��address=192.168.8.137 ��port=32669 2021/09/01 20�38�39 [INFO] connection pool is initialized successfully Welcome to Nebula Graph! (root@nebula) [(none)]> show hosts

access_log handler 执行顺序不合理 • etc MoE 方案介绍 — 如何 Debug Envoy • Admin API • Debug log • Request/Connection metrics MOSN(GoLang) • Admin API • Debug log • GoLang runtime 指标 Envoy 和 MOSN 交互层 • MOSN（GoLang）