Build Observability, Reliability, and Security Service Mesh using Istio on Amazon EKS

Transcript

1. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
2. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Observability, Reliability, and Security with Service Mesh: Istio on Amazon EKS Ananda Dwi Rahmawati (she/her) C O M 2 0 4 Sr. Cloud Engineer AWS Container Hero
3. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Gain greater observability and reliability, reduce complexity, and ensuring high availability and fault tolerance communication between containerized application with service mesh using Istio on Amazon EKS Key Takeaway
4. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Challenges in Microservices Service Mesh – What and Why? Istio on Amazon EKS Demo Today’s Agenda
5. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Challenges in Managing Microservices
6. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Challenges in Microservices • Interaction between services • Traffic management at each service endpoint • Communication security • Timeout and communication failures Service Service Service Service Service Service Service Services need to communicate with each other
7. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Service Mesh
8. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Service Mesh – What? Agnostic programmable framework that has policies and controls to govern how microservices interact App1 Proxy App2 Proxy Control Plane
9. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Service Mesh Behaviors • Traffic shaping with dynamic routing controls • Resiliency support for service communication • Observability of traffic • Tracing of communication flows • Secure communication
10. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Service Mesh Implementations Istio Linkerd Consul AWS App Mesh Workloads Kubernetes + VMs Kubernetes Kubernetes + VMs AWS Fargate, Amazon EC2, Amazon ECS, Amazon EKS, Kubernetes Supported Ingress Controller Istio Ingress Any Envoy AWS ALB Ingress Controller Traffic Management Feature Yes Yes Yes Yes Monitoring Grafana + Prometheus Grafana + Prometheus Grafana + Prometheus AWS X-Ray Multicluster Yes No Yes Yes Deployment Helm and Operator Helm Helm Helm Complexity High Low Medium Medium
11. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Istio
12. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Istio Istio will break down the complexity of distributed cloud native deployments Features: observability, traffic management, security
13. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Istio on Amazon EKS
14. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. DEMO
15. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. https://s.id/1FtQ7 Demo
16. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. References
17. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. References •https://aws.amazon.com/blogs/opensource/getting-started-istio-eks/ •https://github.com/aws-samples/istio-on-amazon-eks •https://istio.io/latest/docs/setup/install/helm/ •https://istio.io/latest/docs/examples/bookinfo/
18. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Your time is now Build in-demand cloud skills your way skillbuilder.aws
19. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Thank you for attending AWS Summit Online ASEAN 2023. Please complete the session survey to help us improve your Summit experience in the future. aws-asean-marketing@amazon.com twitter.com/AWSCloudSEAsia linkedin.com/company/amazon-web-services facebook.com/AmazonWebServices instagram.com/amazonwebservices youtube.com/user/AmazonWebServices twitch.tv/aws
20. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Thank you! © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Please complete the session survey in the mobile app Ananda Dwi Rahmawati @misskecupbung linkedin.com/in/anandadwir