Istio Service mesh explained

[@MarcelDempers]

Introduction to Service mesh 👉🏽 kzbin.info/aero/PLHq1uqvAteVsmxHpGsMjTOROn3i99lzTA

[@portiseremacunix]

Thanks. Do you have any videos on how you developed the microservices in go?

[@CallMeAlade]

Your videos are usually not at the top of my search results, but I must say I am blown away by the amount/depth of info packed into a 33 min video. This is simply amazing. Please continue making such videos. Thank you.

[@kennyj5805]

Hey man, just started a new devops role with a bunch of new technology I've never used. Your channel helps a lot in my onboarding process. Thanks for making the videos

[@testuserselvaraj]

Thanks for creating service mesh topic. As always every minutes of your video is high quality with usefull content.

[@MrSssCool]

Whatever my experience with service mesh is, my experience watching your videos is great. Thanks to your videos, I can overcome many obstacles I encounter flawlessly. Thank you bro. 🙏

[@imyashkale]

King of DevOps🎉❤

[@Dedeepya9]

Awesome.usualy i watch videos in 1.5x speed but this video nrml speed convered 3hrs useful content within 33 min without any lag and cleared lots of my doubts in istios.its helpful Nd perfect.great job! 👍

[@bdogman1313]

Just stumbled across your channel and I have to say you are the man... Very solid and detailed content on complex topics, yet easy to digest... Now what to learn next...

[@jagadishr122]

Very informative, learnt more than what I came for

[@viktorgadachek3933]

Great coverage of Istio components including Kiali! You are going to hit 10k subscribers soon which is great, man! Hard work pays off! Thanks for helping devops/SRE community!

[@lindelaninema8850]

I agree man, he’s really helpful.

[@lserranov]

This video is one of your best. Thanks for posting

[@Amit_shr6779]

Thanks Marcel for this solid and detailed content about service mesh

[@zainabjahan5989]

awesome video i have ever seen on Istio

[@marafetcristian]

I ussualy don't comment and just watch, but this was a really well though video that forces me to comment and gratulate you on the content! Congrats! Subscribed

[@MarcelDempers]

Thanks for the kind words, welcome aboard 🤓

[@hectormejia499]

this guy is so underrated, why is he not more popular?

[@cirobessa610]

Yeah, a lot of Amazing vídeos with great value, maybe the hair....

[@marklong6572]

This is something I've been looking forward to. Thanks!

[@DevOpsKey1]

You have a great instructor with God gifted teaching capabilities💯💯💯💯💯❤❤❤

[@joebit85gocrypto81]

Thanks for your videos! Really helpfull, and a complete introduction guide !

[@MarkDurbin]

Your channel is one of the few that I watch at 1x speed. The pace is perfect, thanks :)

[@shivakumara6312]

Very informative and pragmatic examples, great going!!

[@basudebamandal3758]

This guy is awesome. Thanks for this video.

[@chunji6489]

In my linux env, somehow, I am not able to make the traffic-split and cookie part working. But I am happy for what I have learnt so far. This is really useful video, and I wish I had found it earlier. Thanks.

[@varshithreddy5954]

I will share this in my office slack

[@eduardosanzb]

I love your videos! Always! Some things that come to my head: - What's your opinion on Istio towards performance. It seems to be the slowest of all of them. - Have you checked Istio Ambient? Thoughts? - What would be your go-to mesh technology?

[@DamienMalakay]

really good video Marcel!!! learned Istio in 30 minutes and it was very clear!!! only thing i'll ding you for is nano lol VIM till I die lol

[@johnday3645]

Just watched a 2hr video in 33 minutes. Awesome

[@VLADICA94KG]

Thanks a lot for such a nice and concise turorial! I really appreciate! :)

[@christianibiri]

wooow, now I understand ISTIO Service Mesh! a big thank you :)

[@pajeetsingh]

I thought Nana's videos were prime istio. I was wrong. Thanks for helping everyone out.

[@flavmusic]

Wow this is gold.

[@emachines3447]

i remember working in a team where the devops engineer was really struggling with istio

[@ahmed20stoune]

Magnificent work Thank you !

[@athreyapatel]

Finally. Thanks

[@galwije]

Awesome presentation. Flawless

[@WeekendVibesss]

Damn what a superb video .. this is the exact video that I was looking for .. to the point information ❤️❤️💯💯👍🏻👍🏻👌👌

[@PradeepKumar-jh2gn]

Thank you very much for the great content on istio service mesh!

[@shijilts4139]

Very good tutorial

[@g_c6668]

Bless you good sir! So good at explaining things

[@pragathiplacements1863]

I learned a lot from this video @Marcel Dempers. Thank you very much.

[@polmaksim]

Finally! Thank you very much!!!

[@evgeniysurma8116]

that is really really good explanation

[@Naren061982]

Wow ! complete e2e information , thank you

[@romeoarnado3127]

u r a hidden gem

[@navneet5781]

superb video on istio..

[@tiagobarreto7853]

Totally amazing! Thank you a lot!

[@ybonda]

amazing, thank you!

[@prudvikovvuri5802]

Hey Man, your videos are top notch , can you do video of envoyproxy with routing and load balnacer.

[@antoineartaud-tj3my]

Always excellent, an other video with istio with AWS cognito or okta for idp would be awesome !!!

[@KaderZobiri]

update: use "kind create cluster --name istio --image kindest/node:v1.19.16" instead

[@makzzz1986]

Thank you for this video. I should say, the official documentation is quite awkward. Now I have a better understanding.

[@quipitisi]

Awesome content

[@cirobessa610]

Ninja DevOps, a lot great Great valuable to a youtube free video!

[@Alestrix76]

When an mTLS connection terminates on the istio gateway, the certificate info is put into the XFCC field that is forwarded to the actual service via the istio mesh. However, the gateway uses its own certificate for the mesh connection to the service's istio proxy sidecar. The proxy sidecar then overwrites the XFCC header with the info from the mesh mTLS connection, losing the original info from the external client. How can I change the proxy sidecar config to either append the new mesh's XFCC info or just forward the original XFCC header to the workload? This configuration can be done in the gateway, but unfortunately not in the sidecar proxy.

[@numonamir9145]

Could you make video about Kubesphere?

[@karanagarwal2045]

Best content!

[@mariotubelecce]

That's a nice explanation

[@gipperize28]

Outstanding

[@CeezGeez]

Thank you so much!

[@weitanglau]

Will you recommend using Istio Gateway as our Load Balancer or Nginx / Traefik ?

[@simo47768]

Great tutorial. Question when is destination rule needed? I see that virtual service is enough

[@iamrajbaviskar]

great content ! Thank you so much for sharing :) I am not able to get metrics when my servicePort on ingress resource is 443 ? Any special configuration I need to do?

[@biaerotech8898]

Hello Devops Guy, your video's are simply knowledgable. I got a question. Once the Envoy side car getting all the data and sending to control plane. From there using grafana or other dashboard s we see the status. Could you please aware how this is working. From what sources the data is getting displayed in grafana. Mainly the control plane Dashboard in grafana. Thanks for your video S again

[@vishnupradeep1792]

Thanks a lot for this epic video. I was able to read istio basics in just one night. Q: you have used Nginx ingress controller to access the applications inside service mesh. where does the istio ingress controller fit in here? are we using 2 ingress controllers? how does the traffic flow?

[@MarcelDempers]

Thanks for the kind words 💪🏽 I've used NGINX ingress controller since its the most popular ingress controller used by most. Most folks looking to adopt a mesh, already have an ingress controller so its good to know how you'd integrate your current cluster with a mesh. Istio one is only used if you prefer to use it depending on your needs.Personally would recommend using popular ingress controllers instead as they are more battle hardened than the Istio one.

[@Fayaz-Rehman]

Great video on istio - question: do we need to deploy a CNI plugin like weavenet, calico, etc along with istio to work with. Thanks

[@MarcelDempers]

Nope, its not needed. It will work with bare bones Kubernetes 💪🏽

[@Fayaz-Rehman]

@@MarcelDempers Thank you very much.

[@ponnurangamh6093]

You Rock !!

[@rommelandrea]

Very good video, one of the best on Istio. Did you thinks that istio orchestrator is a good choice for a production grade deployment? My choice also depends on the ease of upgrading Istio with new versions, because I found the upgrade with the operator less difficult than the basic installation

[@sambasiva1702]

Great video.Can you make a video on Hashicorp Consul Service mesh?

[@ruslanramazanov5814]

How can i press (Heart) button instead of like button in youtube :) Tutorial is perfect!

[@pcfreak1992]

Great video but when I compare it with the video on linkerd, it feels like one project copy-pasted the other's code and search-and-replaced the project's name :D

[@shinebayar]

Does applications also need to have Jaeger clients installed to get those tracing metrics or Istio does that automatically for us? I don't really understand how Jaeger fits in this ecosystem.

[@MarcelDempers]

For the telemetry shown in the video, no. However for tracing, i believe some mesh proxies have traces built in. I think Istio does however I may be wrong. I have plans to cover Jaeger in more detail soon 💪🏽

[@musclecode]

Awesome!

[@valentinvonrichthofen9323]

Hey @That DevOps Guy thanks for good stuff here! One question : why are you using nginx-ingress controller and not the istio one in your demo?

[@MarcelDempers]

I believe NGINX is more popular, since most folks may already have an existing ingress controller they'd want to see how a mesh would work with an existing ingress controller. It also has a ton more features :)

[@devopssimon]

Hi, First of all thanks for the video, it really helped me. I have setup an ISTIO Ingress Gateway and two virtual services that handle calls to my Front End JS GUI and API calls from the GUI. The traffic comes in for both services over HTTPS. Everything works fine except retries. I have added a 30% chance of a 502 error being thrown to my API, but the retries have no effect. Any ideas?

[@devopssimon]

I solved the problem. For anyone else, I had to implicitly specify what error conditions I wanted to retry on. retries: attempts: 10 perTryTimeout: 2s retryOn: gateway-error,connect-failure,refused-stream

[@yukselbey913]

I will try

[@devopssimon]

@@yukselbey913 Another thing to note, is that you must be using the ISTIO ingress (ITSIO GATEWAY) for this to work. If your using another ingress such as NGINX, then ISTIO can not control the traffic.

[@yukselbey913]

@@devopssimon Thank you

[@rashidshiplu]

👏 Awsome

[@stephenakerson1808]

Your videos are AMAZING and have become my go-to method for learning new Ops technologies. One Q on this vid - following the instructions in the README, I'm hitting permission denied on the port forwarding part (since 80 is privileged). Running on OSX, what's the best way to get around this you'd recommend other than running the port forwarding command as root? Could I update port (or targetPort?) values in the application YAMLs from 80 to a non-privileged port? Thanks again, your videos RULE!

[@MarcelDempers]

Interesting, ive not faced that before. Not to familiar with your OS but you could try running it with sudo? Do not change target port unless yoy change the target application to listen on the new port. You could change the local port though

[@chunji6489]

@@MarcelDempers On linux, port 1 ~1023 are reserved for sudo users. In order to have theinstructions work as a regular user, I need to run this extra command, so that the kubectl in my environment, would be able to allocate port 80, " sudo setcap 'cap_net_bind_service=+ep' /usr/local/bin/kubectl ".

[@oi_faen]

microk8s next?

[@bqwood]

Nice vid, boet... It would be cool to do an istio vs linderd shoot-out... pros/cons, features, etc...

[@ganeshanageshappa9341]

For a moment I thought Arnold Schwarzenegger is teaching istio

[@teste-yh5df]

You have so much knowleadge that your brain is almost exploding

[@sergeibatiuk3468]

What a weird camera angle

[@sohaibkhan1386]

Guru

[@shreneekpatil220]

Very interesting video.Thank you so much thatDevOps Guy #Peace

[@张一-z7f]

Hey, our k8s is using Istio to collect application's log, i can see in splunk search dashboard such like xxx.log in path /var/containers/applicationxxxx.log. All log files name seems like auto generated. But when i login the k8s container. I can't find these log files , and even no such path in my application's container. That makes me confused, so where are these log files? Do u have any experience on that ? Or am I in wrong place? thanks

[@MarcelDempers]

Did a three part series on container logging. That should clarify it for you Logging Guide for DevOps: kzbin.info/aero/PLHq1uqvAteVvfDxFW50Mdezk0xum-tyHT