Shulou(Shulou.com)05/31 Report--

This article introduces the relevant knowledge of "what has been modified by Istio1.3". In the course of the operation of the actual case, many people will encounter such a dilemma. Then let the editor lead you to learn how to deal with these situations. I hope you can read it carefully and be able to achieve something!

1. Intelligent protocol detection

In previous versions, the port naming of Service had to use a special naming format if you wanted to use the routing features of Istio. If the user does not follow this naming convention, the routing feature cannot be used. Starting with version 1.3, Istio automatically recognizes the protocol for outbound traffic as HTTP or TCP, even if the port of Service is not named according to the rules. At present, the protocol for automatically identifying inbound traffic is not supported, and it will be supported in the next version.

two。 Telemetry without Mixer (experimental)

This is what everyone is most looking forward to! This version migrates most common security policy-related features (such as RBAC) directly to Envoy, as well as most of the telemetry capabilities to Envoy. Now Istio proxy can directly expose the collected HTTP metrics to Prometheus without having to transfer and enrich the metric information through istio-telemetry services. If you are only concerned with telemetry for HTTP services, you can try this new feature. For specific steps, refer to HTTP Telemetry without Mixer. This feature will be gradually improved in the next few months to support telemetry of TCP services when two-way TLS authentication is enabled.

3. No need to define containerPort

Previous versions required each Pod in the grid to explicitly declare the containerPort of each container, and any undeclared port would bypass the Istio Proxy. Version 1.3 uses a simpler and more secure method to handle all inbound traffic on any port of the workload without the need for a declaration containerPort. In the previous version, when the workload sent traffic to itself, it fell into an infinite loop caused by the iptables rule table, which was also fixed.

4. Fully customized Envoy configuration is supported

Although Istio 1.3 focuses on usability, advanced users can still use advanced features in Envoy that are not part of Istio Networking API. Version 1.3 enhances EnvoyFilter API to allow users to fully customize the following Envoy configurations:

The HTTP/TCP listener and filter chain configuration returned by LDS.

The HTTP route configuration returned by RDS.

The Cluster configuration returned by CDS.

5. Other enhancements

Many new debugging features have been added to istioctl to help you troubleshoot various problems during installation. For more information, please see the reference page of istioctl.

The function of region-aware load balancing is transferred from the experimental branch to the default branch. Istio can now use the existing location information to prioritize the load balancing pool and support forwarding requests to the nearest geographically located backend.

Istio can better support headless service when two-way TLS authentication is enabled.

The monitoring of the control plane is enhanced from the following aspects:

Add new metrics to monitor the status of the configuration

Added the index of sidecar injector

Added a new Grafana dashboard for Citadel

Improved Pilot dashboard and added several key indicators

New Istio deployment model documentation has been added to help you choose the appropriate deployment model.

The contents of the instructions have been reorganized and a new chapter containing all troubleshooting tasks has been added to help you quickly find the information you need.

This is the end of "what has been modified by Istio1.3"? thank you for your reading. If you want to know more about the industry, you can follow the website, the editor will output more high-quality practical articles for you!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.