Istio — platform for managing and connecting your microservices. Service mesh

Table of Contents

https://istio.io/docs/concepts/what-is-istio/overview.html

It’s flexible and modular service mesh made by Google, IBM and Lyft. It is a platform for managing your kubernetes system. It’s responsible traffic management, observability, policy enforcement, service identity and security.
It provides features like service discovery, load balancing, A/B experiments, canary deployments, circuit breaking and health checks.

Architecture

Envoy

It’s a proxy written is C++ that is injected into every pod near your service instance. It’s responsible for implementing everything that managing units will tell like service discovery, load balancing, circuit breaking and health checks.

Mixer

Collects telemetry from envoys and limits access to instances according to rules.

Pilot

Provides service discovery, traffic management (A/B experiments, canary deployments). Responsible for timeouts, retries and circuit breakers. It also sends rule updates in real-time to envoys.

Istio-auth

Responsible for authentication (TLS) and credential management.

Cool talk about istio:

https://youtu.be/AGztKw580yQ

Slides — https://speakerdeck.com/saturnism/making-microservices-micro-with-istio-service-mesh.