Istio Service mesh explained

Subscribe to show your support! goo.gl/1Ty1Q2 .
Patreon 👉🏽 / marceldempers
In this exciting episode we're taking a look at the most popular service mesh technologies.
We take a look at what it takes to add Istio to a cluster, it's architecture and how to mesh existing microservices to a service mesh.
We cover:
✅Meshing
✅Metrics
✅Traffic Splits
✅Canary Deployments
✅Retries
✅Mutual TLS
Introduction to Service Mesh playlist:
• Guide to ServiceMesh
Checkout the source code below 👇🏽 and follow along 🤓
Also if you want to support the channel further, become a member 😎
marceldempers.dev/join
Checkout "That DevOps Community" too
marceldempers.dev/community
Source Code 🧐
--------------------------------------------------------------
github.com/marcel-dempers/doc...
If you are new to Kubernetes, check out my getting started playlist on Kubernetes below :)
Kubernetes Guide for Beginners:
---------------------------------------------------
• Kubernetes development...
Kubernetes Monitoring Guide:
-----------------------------------------------
• Kubernetes Monitoring ...
Kubernetes Secret Management Guide:
--------------------------------------------------------------
• Kubernetes Secret Mana...
Like and Subscribe for more :)
Follow me on socials!
marceldempers.dev
Twitter | / marceldempers
GitHub | github.com/marcel-dempers
Facebook | thatdevopsguy
LinkedIn | / marceldempers
Instagram | / thatdevopsguy
Music:
Track: Fox Beat 2 - Jeff Kalee - Pillow Talk - Royalty Free Vlog Music [BUY=FREE] | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / jeff-kalee-pillow-talk...
Track: mythic - JUMP OUT DA POT w/ ASERI | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / jump-out-da-pot-w-aseri
Track: WG $P_BEATZ - SAD LOFI CHILL TYPE BEAT [Uso Livre!] (Prod.WG $P) | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / sad-lofi-chill-type-be...
Track: Amine Maxwell - Le Soir | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / le-soir
Track: J3bii - camel toe [ Prod. J3bi ] | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / camel-toe-prod-j3bi
Track: souKo - souKo - Parallel | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / parallel

[@MarcelDempers]

Introduction to Service mesh 👉🏽 kzbin.info/aero/PLHq1uqvAteVsmxHpGsMjTOROn3i99lzTA

[@portiseremacunix]

Thanks. Do you have any videos on how you developed the microservices in go?

[@CallMeAlade]

Your videos are usually not at the top of my search results, but I must say I am blown away by the amount/depth of info packed into a 33 min video. This is simply amazing. Please continue making such videos. Thank you.

[@kennyj5805]

Hey man, just started a new devops role with a bunch of new technology I've never used. Your channel helps a lot in my onboarding process. Thanks for making the videos

[@hectormejia499]

this guy is so underrated, why is he not more popular?

[@cirobessa610]

Yeah, a lot of Amazing vídeos with great value, maybe the hair....

[@bdogman1313]

Just stumbled across your channel and I have to say you are the man... Very solid and detailed content on complex topics, yet easy to digest... Now what to learn next...

[@testuserselvaraj]

Thanks for creating service mesh topic. As always every minutes of your video is high quality with usefull content.

[@MrSssCool]

Whatever my experience with service mesh is, my experience watching your videos is great. Thanks to your videos, I can overcome many obstacles I encounter flawlessly. Thank you bro. 🙏

[@pajeetsingh]

I thought Nana's videos were prime istio. I was wrong. Thanks for helping everyone out.

[@Dedeepya9]

Awesome.usualy i watch videos in 1.5x speed but this video nrml speed convered 3hrs useful content within 33 min without any lag and cleared lots of my doubts in istios.its helpful Nd perfect.great job! 👍

[@devopskey6251]

You have a great instructor with God gifted teaching capabilities💯💯💯💯💯❤❤❤

[@MarkDurbin]

Your channel is one of the few that I watch at 1x speed. The pace is perfect, thanks :)

[@marklong6572]

This is something I've been looking forward to. Thanks!

[@lserranov]

This video is one of your best. Thanks for posting

[@shivakumara6312]

Very informative and pragmatic examples, great going!!

[@VLADICA94KG]

Thanks a lot for such a nice and concise turorial! I really appreciate! :)

[@jagadishr122]

Very informative, learnt more than what I came for

[@pragathiplacements1863]

I learned a lot from this video @Marcel Dempers. Thank you very much.

[@PradeepKumar-jh2gn]

Thank you very much for the great content on istio service mesh!

[@imyashkale]

King of DevOps🎉❤

[@joebit85gocrypto81]

Thanks for your videos! Really helpfull, and a complete introduction guide !

[@Amitkumar-xc7ep]

Thanks Marcel for this solid and detailed content about service mesh

[@viktorgadachek3933]

Great coverage of Istio components including Kiali! You are going to hit 10k subscribers soon which is great, man! Hard work pays off! Thanks for helping devops/SRE community!

[@lindelaninema8850]

I agree man, he’s really helpful.

[@varshithreddy5954]

I will share this in my office slack

[@g_c6668]

Bless you good sir! So good at explaining things

[@christianibiri]

wooow, now I understand ISTIO Service Mesh! a big thank you :)

[@Naren061982]

Wow ! complete e2e information , thank you

[@galwije]

Awesome presentation. Flawless

[@zainabjahan5989]

awesome video i have ever seen on Istio

[@basudebamandal3758]

This guy is awesome. Thanks for this video.

[@tiagobarreto7853]

Totally amazing! Thank you a lot!

[@flavb83music]

Wow this is gold.

[@ahmed20stoune]

Magnificent work Thank you !

[@pratikbhandari5649]

Damn what a superb video .. this is the exact video that I was looking for .. to the point information ❤️❤️💯💯👍🏻👍🏻👌👌

[@evgeniysurma8116]

that is really really good explanation

[@navneet5781]

superb video on istio..

[@polmaksim]

Finally! Thank you very much!!!

[@CeezGeez]

Thank you so much!

[@mariotubelecce]

That's a nice explanation

[@DamienMalakay]

really good video Marcel!!! learned Istio in 30 minutes and it was very clear!!! only thing i'll ding you for is nano lol VIM till I die lol

[@johnday3645]

Just watched a 2hr video in 33 minutes. Awesome

[@marafetcristian]

I ussualy don't comment and just watch, but this was a really well though video that forces me to comment and gratulate you on the content! Congrats! Subscribed

[@MarcelDempers]

Thanks for the kind words, welcome aboard 🤓

[@eduardosanzb]

I love your videos! Always! Some things that come to my head: - What's your opinion on Istio towards performance. It seems to be the slowest of all of them. - Have you checked Istio Ambient? Thoughts? - What would be your go-to mesh technology?

[@athreyapatel]

Finally. Thanks

[@romeoarnado3127]

u r a hidden gem

[@emachines3447]

i remember working in a team where the devops engineer was really struggling with istio

[@trocomerlo]

Awesome content

[@antoineartaud-tj3my]

Always excellent, an other video with istio with AWS cognito or okta for idp would be awesome !!!

[@gipperize28]

Outstanding

[@rajivbaviskar5290]

great content ! Thank you so much for sharing :) I am not able to get metrics when my servicePort on ingress resource is 443 ? Any special configuration I need to do?

[@makzzz1986]

Thank you for this video. I should say, the official documentation is quite awkward. Now I have a better understanding.

[@musclecode]

Awesome!

[@cirobessa610]

Ninja DevOps, a lot great Great valuable to a youtube free video!

[@simo47768]

Great tutorial. Question when is destination rule needed? I see that virtual service is enough

[@sambasiva1702]

Great video.Can you make a video on Hashicorp Consul Service mesh?

[@ponnurangamh6093]

You Rock !!

[@rommelandrea]

Very good video, one of the best on Istio. Did you thinks that istio orchestrator is a good choice for a production grade deployment? My choice also depends on the ease of upgrading Istio with new versions, because I found the upgrade with the operator less difficult than the basic installation

[@ruslanramazanov5814]

How can i press (Heart) button instead of like button in youtube :) Tutorial is perfect!

[@stephenakerson1808]

Your videos are AMAZING and have become my go-to method for learning new Ops technologies. One Q on this vid - following the instructions in the README, I'm hitting permission denied on the port forwarding part (since 80 is privileged). Running on OSX, what's the best way to get around this you'd recommend other than running the port forwarding command as root? Could I update port (or targetPort?) values in the application YAMLs from 80 to a non-privileged port? Thanks again, your videos RULE!

[@MarcelDempers]

Interesting, ive not faced that before. Not to familiar with your OS but you could try running it with sudo? Do not change target port unless yoy change the target application to listen on the new port. You could change the local port though

[@vishnupradeep1792]

Thanks a lot for this epic video. I was able to read istio basics in just one night. Q: you have used Nginx ingress controller to access the applications inside service mesh. where does the istio ingress controller fit in here? are we using 2 ingress controllers? how does the traffic flow?

[@MarcelDempers]

Thanks for the kind words 💪🏽 I've used NGINX ingress controller since its the most popular ingress controller used by most. Most folks looking to adopt a mesh, already have an ingress controller so its good to know how you'd integrate your current cluster with a mesh. Istio one is only used if you prefer to use it depending on your needs.Personally would recommend using popular ingress controllers instead as they are more battle hardened than the Istio one.

[@rashidshiplu]

👏 Awsome

[@biaerotech8898]

Hello Devops Guy, your video's are simply knowledgable. I got a question. Once the Envoy side car getting all the data and sending to control plane. From there using grafana or other dashboard s we see the status. Could you please aware how this is working. From what sources the data is getting displayed in grafana. Mainly the control plane Dashboard in grafana. Thanks for your video S again

[@valentinvonrichthofen9323]

Hey @That DevOps Guy thanks for good stuff here! One question : why are you using nginx-ingress controller and not the istio one in your demo?

[@MarcelDempers]

I believe NGINX is more popular, since most folks may already have an existing ingress controller they'd want to see how a mesh would work with an existing ingress controller. It also has a ton more features :)

[@weitanglau162]

Will you recommend using Istio Gateway as our Load Balancer or Nginx / Traefik ?

[@bqwood]

Nice vid, boet... It would be cool to do an istio vs linderd shoot-out... pros/cons, features, etc...

[@Alestrix76]

When an mTLS connection terminates on the istio gateway, the certificate info is put into the XFCC field that is forwarded to the actual service via the istio mesh. However, the gateway uses its own certificate for the mesh connection to the service's istio proxy sidecar. The proxy sidecar then overwrites the XFCC header with the info from the mesh mTLS connection, losing the original info from the external client. How can I change the proxy sidecar config to either append the new mesh's XFCC info or just forward the original XFCC header to the workload? This configuration can be done in the gateway, but unfortunately not in the sidecar proxy.

[@KaderZobiri]

update: use "kind create cluster --name istio --image kindest/node:v1.19.16" instead

[@numonamir9145]

Could you make video about Kubesphere?

[@Fayaz-Rehman]

Great video on istio - question: do we need to deploy a CNI plugin like weavenet, calico, etc along with istio to work with. Thanks

[@MarcelDempers]

Nope, its not needed. It will work with bare bones Kubernetes 💪🏽

[@Fayaz-Rehman]

@@MarcelDempers Thank you very much.

[@pcfreak1992]

Great video but when I compare it with the video on linkerd, it feels like one project copy-pasted the other's code and search-and-replaced the project's name :D

[@oi_faen]

microk8s next?

[@devopssimon]

Hi, First of all thanks for the video, it really helped me. I have setup an ISTIO Ingress Gateway and two virtual services that handle calls to my Front End JS GUI and API calls from the GUI. The traffic comes in for both services over HTTPS. Everything works fine except retries. I have added a 30% chance of a 502 error being thrown to my API, but the retries have no effect. Any ideas?

[@devopssimon]

I solved the problem. For anyone else, I had to implicitly specify what error conditions I wanted to retry on. retries: attempts: 10 perTryTimeout: 2s retryOn: gateway-error,connect-failure,refused-stream

[@yukselbey913]

I will try

[@devopssimon]

@@yukselbey913 Another thing to note, is that you must be using the ISTIO ingress (ITSIO GATEWAY) for this to work. If your using another ingress such as NGINX, then ISTIO can not control the traffic.

[@yukselbey913]

@@devopssimon Thank you

[@ganeshanageshappa9341]

For a moment I thought Arnold Schwarzenegger is teaching istio

[@shinebayar]

Does applications also need to have Jaeger clients installed to get those tracing metrics or Istio does that automatically for us? I don't really understand how Jaeger fits in this ecosystem.

[@MarcelDempers]

For the telemetry shown in the video, no. However for tracing, i believe some mesh proxies have traces built in. I think Istio does however I may be wrong. I have plans to cover Jaeger in more detail soon 💪🏽

[@teste-yh5df]

You have so much knowleadge that your brain is almost exploding

[@sohaibkhan1386]

Guru

[@sergeibatiuk3468]

What a weird camera angle

[@shreneekpatil220]

Very interesting video.Thank you so much thatDevOps Guy #Peace

[@user-fi9hn4vd5s]

Hey, our k8s is using Istio to collect application's log, i can see in splunk search dashboard such like xxx.log in path /var/containers/applicationxxxx.log. All log files name seems like auto generated. But when i login the k8s container. I can't find these log files , and even no such path in my application's container. That makes me confused, so where are these log files? Do u have any experience on that ? Or am I in wrong place? thanks

[@MarcelDempers]

Did a three part series on container logging. That should clarify it for you Logging Guide for DevOps: kzbin.info/aero/PLHq1uqvAteVvfDxFW50Mdezk0xum-tyHT