Istio in Action

<b>Solve difficult service-to-service communication challenges around security, observability, routing, and resilience with an Istio-based service mesh. Istio allows you to define these traffic policies as configuration and enforce them consistently without needing any service-code changes. </b><br><br>In <i>Istio in Action</i> you will learn:<br> <br> Why and when to use a service mesh<br> Envoy’s role in Istio’s service mesh<br> Allowing “North-South” traffic into a mesh<br> Fine-grained traffic routing<br> Make your services robust to network failures<br> Gain observability over your system with telemetry “golden signals”<br> How Istio makes your services secure by default<br> Integrate cloud-native applications with legacy workloads such as in VMs<br> <br> Reduce the operational complexity of your microservices with an Istio-powered service mesh! <i>Istio in Action</i> shows you how to implement this powerful new architecture and move your application-networking concerns to a dedicated infrastructure layer. Non-functional concerns stay separate from your application, so your code is easier to understand, maintain, and adapt regardless of programming language. In this practical guide, you’ll go hands-on with the full-featured Istio service mesh to manage microservices communication. Helpful diagrams, example configuration, and examples make it easy to understand how to control routing, secure container applications, and monitor network traffic.<br> <br> Foreword by Eric Brewer.<br> <br> Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.<br> <br> About the technology<br> Offload complex microservice communication layer challenges to Istio! The industry-standard Istio service mesh radically simplifies security, routing, observability, and other service-to-service communication challenges. With Istio, you use a straightforward declarative configuration style to establish application-level network policies. By separating communication from business logic, your services are easier to write, maintain, and modify.<br> <br> About the book<br> <i>Istio in Action</i> teaches you how to implement an Istio-based service mesh that can handle complex routing scenarios, traffic encryption, authorization, and other common network-related tasks. You’ll start by defining a basic service mesh and exploring the data plane with Istio’s service proxy, Envoy. Then, you’ll dive into core topics like traffic routing and visualization and service-to-service authentication, as you expand your service mesh to workloads on multiple clusters and legacy VMs.<br> <br> What's inside<br> <br> Comprehensive coverage of Istio resources<br> Practical examples to showcase service mesh capabilities<br> Implementation of multi-cluster service meshes<br> How to extend Istio with WebAssembly<br> Traffic routing and observability<br> VM integration into the mesh<br> <br> About the reader<br> For developers, architects, and operations engineers.<br> <br> About the author<br> <b>Christian Posta</b> is a well-known architect, speaker, and contributor. <b>Rinor Maloku</b> is an engineer at Solo.io working on application networking solutions.<br> <br> Table of Contents<br> PART 1 UNDERSTANDING ISTIO<br> 1 Introducing the Istio service mesh<br> 2 First steps with Istio<br> 3 Istio’s data plane: The Envoy proxy<br> PART 2 SECURING, OBSERVING, AND CONTROLLING YOUR SERVICE’S NETWORK TRAFFIC<br> 4 Istio gateways: Getting traffic into a cluster<br> 5 Traffic control: Fine-grained traffic routing<br> 6 Resilience: Solving application networking challenges<br> 7 Observability: Understanding the behavior of your services<br> 8 Observability: Visualizing network behavior with Grafana, Jaeger, and Kiali<br> 9 Securing microservice communication<br> PART 3 ISTIO DAY-2 OPERATIONS<br> 10 Troubleshooting the data plane<br> 11 Performance-tuning the control plane<br> PART 4 ISTIO IN YOUR ORGANIZATION<br> 12 Scaling Istio in your organization<br> 13 Incorporating virtual machine workloads into the mesh<br> 14 Extending Istio on the request path