Istio

wikipedia:Istio (2017-2018) Service mesh provides a way to control how microservices share data with one another. Istio includes APIs that let it integrate into any logging platform, telemetry or policy system.

Istio runs in different environments: on-premise, cloud-hosted, in Kubernetes or in virtual machines,

Features

• Traffic management
• Security
• Observability

History

Istio was started by teams from Google and IBM in partnership with the Envoy team from Lyft. And it’s been developed fully in the open on GitHub.

Architecture

Istio’s architecture is divided into the data plane and the control plane. In the data plane, Istio support is added to a service by deploying a sidecar proxy within your environment. This sidecar proxy sits alongside a microservice and routes requests to and from other proxies. Together, these proxies form a mesh network that intercepts network communication between microservices. The control plane manages and configures proxies to route traffic. The control plane also configures components to enforce policies and collect telemetry. Istio uses an extended version of the Envoy proxy. Envoy is proxy developed in C++

News

• December 2018, Istio launches as beta on GKE

Versions

• 1.5 (5 March 2020) https://istio.io/news/releases/1.5.x/announcing-1.5/
  • 1.5.1
  • 1.5.2
  • 1.5.3
  • 1.5.4
• 1.4 (14 November 2019) https://istio.io/news/releases/1.4.x/announcing-1.4/

• 1.0 (31 July 2018) https://istio.io/news/releases/1.0.x/announcing-1.0/
  • JWT Authentication

• 0.1 (24 May 2017)

Activities

• Read Istio vs. Linkerd vs. Consul Connect https://jpetazzo.github.io/2019/05/17/containers-microservices-service-meshes/
• Install Istio https://istio.io/docs/setup/getting-started/#download

Related terms

• Knative
• Red Hat OpenShift Service Mesh
• istioctl
• Envoy proxy

See also

• Kubernetes: distributions, tools, CKA, CKS, Kubernetes interfaces: CSI, CNI, installation, workloads, networking, kubeadm, Kubernetes API, Kubernetes API Server, kubectl, kubeadm, kubelet, kube-proxy, Cloud services: EKS, GKE, TKE, DKS, Helm, Kubernetes RBAC, Kubernetes deployments, Minikube, Rancher, OpenShift, Charmed Kubernetes, Ingress, Kubernetes scheduler, Kubernetes Finalizers, logging, Kubernetes operator, Orka, kind:, Kubernetes namespaces, Kubernetes dashboard, Kubernetes Metrics Server, Field Selectors, CoreDNS, CRI, Kubernetes Topology Manager, Kubernetes governance: (SIG, KEP), Kustomize, controllers, ReadinessProbe, LivenessProbe, KOPS, K9s, Kui, k3s, ImagePullBackOff, PDB, EndPoints, Kots, metadata, Karpenter, Replicated.com, Kubernetes Authenticating, Kubernetes timeline, Changelog/Versions, service accounts, Kubernetes Pod Lifecycle, Kubernetes Conformance Certified, Kubernetes backup, Kubernetes Pod Security Admission, tEKS, Kubernetes events, Kubernetes ports, Kubernetes policies, Connect, addons, DoKC, Kubernetes control plane, Kubernetes Federation, Kubernetes info, Kubetest2, Sidecar (Kubernetes)
• Service mesh: Istio, Linkerd, Consul, containerpilot, AWS App Mesh, Kiali, INNOQ, Kuma, Kong Mesh

https://www.redhat.com/en/topics/microservices/what-is-istio

https://istio.io/docs/ops/deployment/architecture/

https://techcrunch.com/2018/12/11/google-launches-istio-on-gke/