网易 曾宇星&裴斐 网易大规模ServiceMesh混合部署实践

CodeWarrior

2019/07/08 发布于 编程 分类

GIAC2019 

文字内容
3. • ServiceMesh • • ServiceMesh
4. ServiceMesh
5. >
6. -
7. -
8. - ) 50% user 50%
9. ServiceMesh • Envoy RPC • istio • Dubbo • • IP based ACLs • RPC
11. - kubernetes VM/ I - / ServiceMesh ?
12. - I - /
13. - I - 1 2 SOA / Dubbo - OSGI
14. ServiceMesh
15. I - > • • • • • • • •
16. • • • • • • •
17. K8S Consul • • Istio • • • • Pilot Consul • •
18. • • •
19. • Istio Ingress Gateway • • • • • • •
20. • • •
22. • • • • L4&L7
23. Sidecar header (x-prefer-color) color Proxy protocol
24. Istio ServiceMesh • sidecar • iptables -> ebpf -> cilium Istio Mixer -> mixer filter
25. sockops sockops linux-5.1.4 Kernel : SockOps
26. sockops - envoy worker both sidecar 1k client sidecar 10% 15~20% qps qps 20% 20%
27. sockops both sidecar • • pod 15%+ Pod sockops lo qps -qps OVS 20~30% pod both sidecar pod both sidecar sockops lo qps
28. • Istio&Envoy ServiceMesh POD/VM/PHYSICAL • • • • / / ServiceMesh