Shulou(Shulou.com)06/01 Report--

This article introduces you how the local operation of Istio is, the content is very detailed, interested friends can refer to, hope to be helpful to you.

Overview of pilot-discovery

Provides two kinds of http/grpc interfaces, of which grpc is a two-way channel

Running

Available commands:

. / pilot-discovery discovery-- kubeconfig / root/.kube/config-- caCertFile. / docker_build/docker.pilot/cacert.pem

Where / root/.kube/config is the configuration file of local K8S. / docker_build/docker.pilot/cacert.pem is the certificate file that comes with Istio compilation.

At the same time, it implicitly requires a configuration file:. / etc/istio/config/mesh, one of which is available as follows (not necessarily the most simplified):

{"disablePolicyChecks": true, "disableMixerHttpReports": true, "proxyListenPort": 15001, "connectTimeout": "10s", "protocolDetectionTimeout": "5s", "defaultConfig": {"configPath": ". / etc/istio/proxy", "binaryPath": "/ usr/local/bin/envoy", "serviceCluster": "istio-proxy", "drainDuration": "45s" "parentShutdownDuration": "60s", "discoveryAddress": "localhost:15012", "proxyAdminPort": 15000, "controlPlaneAuthPolicy": "NONE", "statNameLength": 189, "concurrency": 2, "envoyAccessLogService": {}, "envoyMetricsService": {}, "statusPort": 15020, "terminationDrainDuration": "5s"} "outboundTrafficPolicy": {"mode": "ALLOW_ANY"}, "defaultServiceExportTo": ["*"], "defaultVirtualServiceExportTo": ["*"], "defaultDestinationRuleExportTo": ["*"], "localityLbSetting": {"enabled": true}, "dnsRefreshRate": "5s", "reportBatchMaxEntries": 100th "reportBatchMaxTime": "1s", "certificates": [], "thriftConfig": {}, "serviceSettings": []} envoy

You can access pilot-discovery through http/grpc, which is subdivided into DELTA prefixes such as GPRC/DELTAGRPC/REST, which means: get incrementally, and break the link after getting it.

Running

Available command

. / envoy-c envoy.yaml

Among them, the envoy.yaml content is (not necessarily the most simplified):

{"node": {"id": "router~172.26.33.33~istio123456~local", "cluster": "localhost-cluster", "locality": {}}, "admin": {"access_log_path": "/ dev/null", "address": {"socket_address": {"address": "0.0.0.0" "port_value": 15000}}, "dynamic_resources": {"lds_config": {"ads": {}}, "cds_config": {"ads": {}}, "ads_config": {"api_type": "GRPC" "grpc_services": [{"envoy_grpc": {"cluster_name": "xds-grpc"}]}}, "static_resources": {"clusters": [{"name": "xds-grpc", "type": "STRICT_DNS" "respect_dns_ttl": true, "dns_lookup_family": "V4_ONLY", "connect_timeout": "1s", "lb_policy": "ROUND_ROBIN", "load_assignment": {"cluster_name": "xds-grpc" "endpoints": [{"lb_endpoints": [{"endpoint": {"address": {"socket_address": {"address": "127.0.0.1", "port_value": 15010}}]}]} "circuit_breakers": {"thresholds": [{"priority": "DEFAULT", "max_connections": 100000, "max_pending_requests": 100000, "max_requests": 100000}, {"priority": "HIGH" "max_connections": 100000, "max_pending_requests": 100000, "max_requests": 100000}]}, "upstream_connection_options": {"tcp_keepalive": {"keepalive_time": 100000}} "max_requests_per_connection": 1, "http2_protocol_options": {}

When envoy starts, you can access envoy's simple management interface through the IP:15000/ where http:// is located in the browser (management, but in fact, most of them are only viewable, not editable).

About how the local operation of Istio is shared here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.