Debugging Istio: How to Fix a Broken Service Mesh (Cloud Next '19)

[@ahatom]

This is one of the most helpful Istio videos I have watched. Do wish Google can make an updated version of this though. Istio has changed so much since.

[@ChaimLeibHalbert]

Istio is insane! There’s so much manual work, and so many things that are too easily forgotten. We’ve got to make something better. This can’t last.

[@meganokeefe3948]

Hi Chaim, I completely agree. One of our main takeaways after delivering this talk is that debugging Istio configuration is way too hard. Fortunately, the community heard us + all the users saying the same thing. Now, Istio has a radically simplified monolith architecture - istio.io/news/releases/1.5.x/announcing-1.5/ And a new set of command line tools for validating bad configuration - istio.io/docs/ops/diagnostic-tools/istioctl-analyze/ . The Authn/Authz APIs have gotten a makeover and are a lot more human-readable -- istio.io/docs/tasks/security/authorization/authz-http/#configure-access-control-for-workloads-using-http-traffic Still a ways to go, but I've been super impressed by how much has changed in a year!

[@alyssapipe6840]

This should be required viewing for anyone using Istio

[@ilanhirschman6126]

Thanks for this video. What's up with the "upstream connect error or disconnect/reset before headers" error that was 0.4% of your calls at about 19:50 in the video. Why did those happen? What can be done to fix those?

[@samys288]

Thank you, excellent video

[@yibaoren]

good example for debug

[@HenryPan]

Cool

[@herp_derpingson]

O_O