🥇Sevhisi mesh ekushandisa makesi

Cherechedza. transl.: Munyori wechinyorwa ichi (Luc Perkins) mumiriri wekuvandudza kuCNCF, kumusha kune akavhurika sosi mapurojekiti seLinkerd, SMI (Service Mesh Interface) uye Kuma (nenzira, wakambozvibvunzawo here kuti sei Istio isiri pane iyi runyorwa?...). Mune kumwe kuedza kuunza kunzwisisa kuri nani kweiyo hype yemazuva ano inonzi "sevhisi mesh" kunharaunda yeDevOps, anonyora gumi nematanhatu hunhu hunopihwa nemhinduro dzakadaro.

nhasi service mesh ― ndeimwe yemisoro inopisa kwazvo muinjiniya yesoftware (uye ndizvozvo!). Ini ndinofunga tekinoroji inovimbisa zvinoshamisa uye ndinorota kuiona ichigamuchirwa zvakanyanya (kana zvine musoro, hongu). Nekudaro, ichine aura yechakavanzika pamusoro payo kune vanhu vazhinji. Kunyange avo vano Ndinomuziva zvakanaka nayo, kazhinji inoomerwa kugadzira zvayakanakira uye kuti chii chaizvo (kusanganisira muranda wako anozvininipisa). Muchikamu chino, ndichaedza kugadzirisa mamiriro acho nekunyora zvakasiyana-siyana kushandiswa kwezviitiko "sevhisi grids"*.

* Chiziviso chemushanduri: kubva pano zvichienda mberi muchinyorwa chino, shandurudzo iyi ("sevhisi mesh") ichashandiswa kune ichiri nyowani temu sevhisi mesh.

Asi chekutanga ndinoda kutaura zvishoma:

Handisati ndamboshanda kana kushandisa meshes yebasa kunze kwemapurojekiti akaitirwa dzidzo yangu. Kune rimwe divi, ini ndakanyora toni yezvinyorwa zve Twitter yemukati mesh mesh muna 2015 (yaisatombonzi "sevhisi mesh" kare ikako) uye ndakabatsira kune saiti uye zvinyorwa zve. Linkerd, saka zvinoreva chimwe chinhu.
Rondedzero yangu ndeye tentative uye haina kukwana. Panogona kunge paine nyaya dzekushandisa dzandisiri kuziva, uye nyowani dzinogona kubuda nekufamba kwenguva sezvo tekinoroji inoshanduka uye ichiwedzera kufarirwa.
Panguva imwecheteyo, haasi ese aripo sevhisi mesh kuita anotsigira ese ekushandisa kesi akanyorwa. Saka zvirevo zvangu senge "sevhisi mesh inogona ..." inofanirwa kuverengerwa se "vamwe, uye pamwe zvese, zvakakurumbira sevhisi mesh kuita zvinogona ...".
Kurongeka kwemienzaniso hakuna basa.

Rondedzero pfupi:

kuwanikwa kwesevhisi;
encryption;
chokwadi uye mvumo;
load balancing;
circuit breaking;
autoscaling;
canary deployments;
blue-green deployments;
kuongorora utano;
load shedding;
traffic mirroring;
insulation;
kukumbira chiyero chekudzikamisa, kuedzazve uye nguva yekubuda;
telemetry;
audit;
kuona.

1. Kuwanikwa kwebasa

TL; DR: Batanidza kune mamwe masevhisi pane network uchishandisa mazita akareruka.

Masevhisi anofanirwa kukwanisa "kuwana" otomatiki mumwe nemumwe achishandisa mazita akakodzera - semuenzaniso, service.api.production, pets/staging kana cassandra. Cloud nharaunda dzinoratidzwa nekusimba kwavo, uye zita rimwe rinogona kuvanza akawanda masevhisi zviitiko. Zviri pachena kuti mumamiriro ezvinhu akadaro hazvibviri kuita hardcode ese IP kero.

Uyezve, kana imwe sevhisi ikawana imwe, inofanirwa kutumira zvikumbiro kune iyo sevhisi pasina kutya kuti vanozopedzisira vasvika pakuiswa kwechiitiko chayo chakatyoka. Mune mamwe mazwi, mesh yesevhisi inofanirwa kutarisa hutano hwese zviitiko zvesevhisi uye chengetedza runyorwa rwevaenzi sechizvino-zvino sezvinobvira.

Imwe neimwe mesh sevhisi inoshandisa kuwanikwa kwesevhisi zvakasiyana. Parizvino, nzira yakajairika ndeyekugovera kune ekunze maitiro seKubernetes DNS. Munguva yakapfuura, pa Twitter, takashandisa zita rezita rechinangwa ichi. Finagle. Uye zvakare, sevhisi mesh tekinoroji inoita kuti zvikwanise kugadzira tsika yekutumidza zita nzira (kunyangwe ini ndisati ndasangana nechero SM kuita nekuita kwakadaro).

2. Encryption

TL; DR: Bvisa traffic isina kunyorwa pakati pemasevhisi uye ita kuti maitiro aya aite otomatiki uye awedzere.

Zvakanaka kuziva kuti vanorwisa havagone kupinda mukati mako network. Firewalls anoita basa guru rekudzivirira izvozvo. Asi chii chinoitika kana hacker ikapinda? Vachakwanisa kuita chero chavanoda neiyo intra-service traffic? Ngativimbei kuti hazviitike. Kuti udzivise mamiriro akadai, iwe unofanirwa kuita zero-trust network, uko traffic yese pakati pesevhisi yakavharirwa. Mazhinji emazuva ano sevhisi meshes anowana izvi kuburikidza nekubatana TLS (mutual TLS, mTLS). Mune zvimwe zviitiko, mTLS inoshanda mumakore ese nemasumbu (ndinofunga kuti kutaurirana kwepakati peplanetary rimwe zuva kucharongwa zvakafanana).

Ehe, kune mTLS sevhisi mesh optional. Sevhisi yega yega inogona kutarisira yayo TLS, asi izvo zvinoreva kutsvaga nzira yekugadzira zvitupa, kuaparadzira kune ese masevhisi masevhisi, sanganisira kodhi mukushandisa iyo inotakura izvi zvitupa kubva kumafaira. Ah, uye usakanganwe kuvandudza zvitupa izvi nguva nenguva. Sevhisi meshes otomatiki mTLS ine masisitimu akadai SIFFE, iyo, zvakare, inogadzirisa maitiro ekuburitsa uye kutenderera zvitupa.

3. Huchokwadi uye mvumo

TL; DR: Gadzira kuti ndiani ari kutanga chikumbiro uye sarudza zvavanotenderwa kuita chikumbiro chisati chasvika pasevhisi.

Masevhisi kazhinji anoda kuziva, uyo anoita chikumbiro (kusimbisa) uye, achishandisa ruzivo urwu, anosarudza kuti nyaya iyi inotenderwa kuita (mvumo). Muchiitiko ichi, chirevo chokuti "ndiani" anogona kuvanza:

Mamwe mabasa. Izvi zvinonzi " authentication peer'a"Somuenzaniso, service web anoda kuwana sevhisi dbMasevhisi meshes anowanzo kugadzirisa matambudziko akadaro uchishandisa mTLS: zvitupa mune ino kesi kuita seinodiwa identifier.
Vamwe vashandisi vevanhu. Izvi zvinonzi " authentication zvikumbiro"Semuenzaniso, mushandisi haxor69 anoda kutenga mwenje mutsva. Magetsi ebasa anopa nzira dzakasiyana, dzakadai se JSON Web Zviratidzo.
Vazhinji vedu takaita izvi mukodhi yedu yekushandisa. Chikumbiro chinopinda, tinotarisa patafura users, tsvaga mushandisi uye enzanisa password, wobva watarisa iyo column permissions etc. Munyaya ye mesh yebasa, izvi zvinoitika kunyange chikumbiro chisati chasvika kubasa.

Kana tangoona kuti chikumbiro chabva kunaani, tinofanira kuona kuti nyaya yacho inotenderwa kuita sei. Mamwe masevhisi meshes anobvumidza iwe kuseta base marongero (nekuti ndiani angaite chii) seYAML mafaera kana pamutsetse wekuraira, nepo mamwe achipa kubatanidzwa nemafuremu senge. Vhura Policy AgentChinangwa chekupedzisira ndechekuita kuti masevhisi ako agamuchire chero chikumbiro, uine chivimbo chekuti chiri kubva kune yakavimbika sosi. и Ichi chiito chinobvumirwa.

4. Mutoro kuenzanisa

TL; DR: Govera mutoro mukati mezviitiko zvesevhisi zvinoenderana neimwe pateni.

"Sevhisi" muchikamu chebasa kazhinji kazhinji ine makopi akawanda akafanana. Somuenzaniso, nhasi sevhisi cache ine 5 makopi, uye mangwana nhamba yavo inogona kuwedzera kusvika 11. Zvikumbiro zvinotumirwa kune cache, inofanira kugoverwa maererano nechinangwa chaicho. Semuyenzaniso, kuderedza latency kana kuwedzera mukana wekusvika pakushanda chiitiko. Iyo inonyanya kushandiswa algorithm ndeye Round-robin sevhisi algorithm, asi kune mamwe akawanda, akadai seyakayerwa. (kurema) mibvunzo (unogona kusarudza zvibodzwa zvaunofarira), mhete (ring) hashing (shandisa hashing inopindirana kune vanokwidza kumusoro) kana nzira-mubvunzo-mudiki (sarudzo inopiwa kumuenzaniso nemibvunzo mishoma).

Classic mitoro mabharari ane zvimwe zvinhu, seHTTP caching uye DDoS dziviriro, asi iwo haana kunyanya kukosha kune kumabvazuva-kumadokero traffic (yakajairika mashandisirwo ebasa mesh). Ehe, haufanirwe kushandisa mesh sevhisi yekuenzanisa mitoro, asi inokutendera iwe kuti uise uye udzore kuremedza mitemo yesevhisi yega yega kubva kune yepakati inodzora ndege, nekudaro kubvisa kudikanwa kwekumhanya nekugadzirisa zvakaparadzana zvinoremedza zviremera mune network stack.

5. Kupwanya kwedunhu

TL; DR: Misa traffic kune ine dambudziko sevhisi uye kudzora kukuvadzwa mumamiriro akaipisisa.

Kana nekuda kwechimwe chikonzero sevhisi isingakwanise kubata traffic, iyo mesh sevhisi inopa akati wandei sarudzo kugadzirisa dambudziko iri (zvimwe zvichakurukurwa muzvikamu zvakakodzera). Circuit breaking ndiyo yakanyanya kuomarara sarudzo yekubvisa sevhisi kubva mutraffic. Nekudaro, hazvina musoro pachazvo - chirongwa chekuchengetedza chinodiwa. Backpressure inogona kupihwa (backpressure) kumasevhisi anoita zvikumbiro (ingoyeuka kuseta mesh yako yebasa kune izvi!), Kana, semuenzaniso, kupendesa peji yemamiriro tsvuku uye kudzosera vashandisi kune inotevera vhezheni yepeji ne "falling whale" ("Twitter iri pasi").

Sevhisi grids haingobvumiri iwe kuti uone, when kuvhara kuchatevera uye kuti zvichatevera. Muchiitiko ichi, "nguva" inogona kusanganisira chero musanganiswa weakatsanangurwa paramita: huwandu hwese hwezvikumbiro zveimwe nguva, nhamba yekubatana kwakafanana, zvikumbiro zvakamirira, kuyedza zvekare, nezvimwe.

Iwe hausi kuda kushandisa zvakanyanya kutyora kwedunhu, asi zvakanaka kuziva kuti une chirongwa chekuchengetedza kana paine emergency.

6. Autoscaling

TL; DR: Wedzera kana kuderedza nhamba yezviitiko zvesevhisi zvichienderana nemaitiro akataurwa.

Sevhisi meshes havasi vanoronga, saka havaite ita kuyera voga. Zvisinei, vanogona kupa ruzivo rungashandiswa nevarongi kuita sarudzo. Sezvo sevhisi meshes inokwanisa kuwana traffic yese pakati pemasevhisi, vane hupfumi hweruzivo nezve zviri kuitika: ndeapi masevhisi ari kusangana nematambudziko, ayo asingashandiswe pasi (yavo yakapihwa simba iri kuraswa), nezvimwe.

Semuenzaniso, Kubernetes anoyera masevhisi akavakirwa pane pods 'CPU uye ndangariro kushandiswa. (Ona report yedu "Autoscaling uye zviwanikwa manejimendi muKubernetes"- approx. transl.), asi kana ukafunga kuyera zvichibva pane chero imwe metric (munyaya yedu, ine chekuita netraffic), iwe unozoda yakazvipira metric. chinhu chakadai inoratidza maitiro ekuita izvi ne nhume, Istio и Prometheus, asi maitiro acho pachawo akaoma kunzwisisa. Tinoda kuti sevhisi mesh iite nyore, ichitibvumira kungoisa mamiriro se "kuwedzera huwandu hwemasevhisi. auth, kana nhamba yezvikumbiro zvakamirira kuitwa ikadarika chikumbaridzo kweminiti."

7. Canary deployments

TL; DR: Edza maitiro matsva kana shanduro dzesevhisi pane subset yevashandisi.

Ngatiti iwe uri kuvaka SaaS chigadzirwa uye wave kuda kutumira inotonhorera vhezheni. Wakazviyedza mustaging, uye inoshanda zvikuru. Asi iwe uchine zvimwe zvekunetsekana pamusoro pekuti zvichaita sei mumamiriro ezvinhu epasirese. Mune mamwe mazwi, iwe unoda kuyedza iyo vhezheni itsva pamabasa epasirese pasina kuisa njodzi kuvimba nevashandisi vako. Canary deployments yakanakira izvi. Ivo vanokutendera iwe kuratidza chinhu chitsva kune subset yevashandisi. Iyi subset inogona kunge iri yako vashandisi vakavimbika, kana avo vari kushandisa yemahara vhezheni yechigadzirwa, kana vashandisi vakazvipira kuve "guinea pigs."

Sevhisi meshes ita izvi nekukubvumidza kuti utaure maitiro ekuti ndiani anoona kuti ndeipi vhezheni yeapp yako, uye kuendesa traffic zvinoenderana. Hapana chinoshanduka kumasevhisi pachawo. Shanduro 1.0 yesevhisi inofungidzira kuti zvikumbiro zvese zviri kubva kuvashandisi vanofanirwa kuzviona, uye vhezheni 1.1 inotora zvakafanana kune vashandisi vayo. Zvichakadaro, unogona kushandura chikamu chetraffic pakati pechinyakare uye chitsva vhezheni, uchidzosera nhamba iri kukura yevashandisi kune itsva kana yakagadzikana uye yako "guinea pigs" inopa kuenda-mberi.

8. Blue-green deployments

TL; DR: Buritsa chinhu chitsva chinotonhorera, asi gadzirira kuchidzosera nekukurumidza.

Zvinoreva blue-green deployments ndeyekuburitsa sevhisi nyowani “yebhuruu”, uchiifambisa inoenderana neyakare, “yegirinhi”. Kana zvinhu zvose zvikafamba zvakanaka uye sevhisi itsva ichizviratidza zvakanaka, ipapo yekare inogona kudzimwa zvishoma nezvishoma. (Maiwe, rimwe zuva iyi sevhisi nyowani "yebhuruu" ichasanganawo nedambudziko rakafanana nere "girinhi" uye yonyangarika…) Kutumirwa kweBlue-girini kunosiyana nea canary mukuti chinhu chitsva chinovhara. zvose kamwechete vashandisi (kwete chikamu); poindi apa ndeye kuve ne "backup port" yakagadzirira kana chimwe chinhu chikatadza.

Masevhisi meshes anopa nzira iri nyore yekuyedza "blue" sevhisi uye ipapo chinja kune inoshanda "girinhi" imwe kana paine matambudziko. Tisingatauri kuti ivo vanopawo ruzivo rwakawanda (ona "Telemetry" pasi apa) pamusoro pekushanda kwebasa re "blue", iyo inobatsira kunzwisisa kana yakagadzirira kushanda zvakakwana.

Cherechedza. transl.: Unogona kuverenga zvakawanda nezve nzira dzakasiyana dzekutumira muKubernetes (kusanganisira yakataurwa canary, yebhuruu/girinhi uye nezvimwe) mu ichi chinyorwa.

9. Kuongorora utano

TL; DR: Tarisa kuti ndeapi masevhisi emhando ane hutano uye pindura kune ayo asisina hutano.

Kuongorora utano (kuongorora hutano) inobatsira kusarudza kana masevhisi akagadzirira kugamuchira uye kugadzirisa traffic. Semuenzaniso, kana iri nyaya yeHTTP masevhisi, cheki yehutano inogona kuita senge GET chikumbiro kune yekupedzisira /health. Pindura 200 OK zvichareva kuti muenzaniso une hutano, chero humwe - kuti hauna kugadzirira kugamuchira traffic. Sevhisi meshes inobvumidza iwe kutsanangura ese ari maviri nzira iyo hutano hunotariswa uye frequency iyo cheki iyi inoitwa. Ruzivo urwu runogona kuzoshandiswa kune zvimwe zvinangwa - semuenzaniso, kuenzanisa mitoro uye kutyora kwedunhu.

Nekudaro, macheki ehutano haasi ega ekushandisa, asi anowanzo shandiswa kuzadzisa zvimwe zvinangwa. Zvakare, zvichienderana nemhedzisiro yekuongororwa kwehutano, zvekunze (zvinei kune mamwe masevhisi mesh zvinangwa) zviito zvinogona kudikanwa: semuenzaniso, kugadzirisa peji remamiriro, kugadzira nyaya paGitHub, kana kuzadza tikiti reJIRA. Uye iyo mesh sevhisi inopa yakanakira nzira ye automating zvese izvi.

10. Load shedding

TL; DR: Reroute traffic mukupindura kune yenguva spike mukushandiswa.

Kana sevhisi yaremerwa netraffic, unogona kuendesa imwe traffic kune imwe nzvimbo kwenguva pfupi (kureva "donhedza" kana "kudurura" iyo) (shedhi) ipapo). Semuenzaniso, kune sevhisi yekuchengetedza kana data data, kana kune zvachose Pulsar topic. Nekuda kweizvozvo, sevhisi inoenderera mberi nekugadzirisa zvimwe zvikumbiro panzvimbo yekuputsika uye kusagadzirisa chero chinhu zvachose. Load shedding inodiwa pane kutyoka kwecheni, asi haisati yakafanira kuishandisa zvakanyanya. Inobatsira kudzivirira kutadza kudonha kunoita kuti masevhisi ari pasi perwizi aparadzike.

11. Parallelization/mirroring of traffic

TL; DR: Tumira chikumbiro chimwe kunzvimbo dzinoverengeka kamwechete.

Dzimwe nguva pane chikonzero chekutumira chikumbiro (kana imwe sarudzo yezvikumbiro) kune akati wandei masevhisi kamwechete. Muenzaniso wakajairika kutumira chikamu cheiyo traffic yekugadzira kune sevhisi sevhisi. Iyo huru yekugadzira webhu server inotumira chikumbiro kune yakadzika sevhisi products.production uye chete kwazviri. Uye iyo mesh sevhisi inokopa zvine hungwaru chikumbiro ichi uye ichitumira kune products.staging, iyo sevha yewebhu isingatomboziva nezvayo.

Imwe yakabatana yekushandisa kesi yebasa mesh iyo inogona kuitwa pamusoro petraffic parallelization ndeye regression test. Zvinosanganisira kutumira zvikumbiro zvakafanana kune akasiyana vhezheni sevhisi uye kutarisa kana mavhezheni ese anoita zvakafanana. Ini ndisati ndaona sevhisi mesh kusevenzeswa ine yakasanganiswa regression yekuyedza system senge Diffy, asi pfungwa yacho pachayo inoita seinovimbisa.

12. Insulation

TL; DR: Dhonza mesh yako yebasa kuita mini-network.

Inozivikanwawo se chidimbu, kuzviparadzanisa inyanzvi yekukamura mesh yesevhisi kuita zvikamu zvakapatsanurwa zvine mutsindo izvo zvinoziva nezveumwe neumwe. Kuzviparadzanisa nevamwe kwakafanana nekugadzira chaiwo akavanzika network. Musiyano wakakosha ndewekuti iwe uchiri kuwana ese mabhenefiti esevhisi mesh (sevhisi kuwanikwa), asi nekuwedzera kuchengetedzeka. Semuenzaniso, kana munhu anorwisa akakwanisa kupinda musevhisi mune imwe subnet, haakwanise kuona kuti ndeapi masevhisi ari kushanda mune mamwe ma subnets kana kubata traffic yavo.

Panogonawo kuva nezvinobatsira zvesangano. Iwe ungangoda kutyora masevhisi kuita ma subnets zvichienderana nekambani yako chimiro uye kusunungura vanogadzira kubva kune yekuziva mutoro wekuchengeta track yese sevhisi mesh.

13. Chikumbiro chekumisa, kuedzazve uye nguva yekubuda

TL; DR: Hapasisina chikonzero chekusanganisira-inopedza nguva yekukumbira manejimendi mabasa mucodebase yako.

Zvese izvi zvinhu zvinogona kutorwa semakesi ekushandisa akasiyana, asi ndakafunga kuzvibatanidza pamwechete nekuda kwechinhu chimwe chete chavakaita zvakafanana: vanoregedzera chikumbiro chehupenyu hwekuita mabasa anowanzo batwa nemaraibhurari ekushandisa. Kana iwe uri kuvaka Ruby paRails web server (isina kubatanidzwa neyesevhisi mesh) inoita zvikumbiro zvekudzosera kumashure masevhisi kuburikidza. gRPC, chikumbiro chinozofanira kuzvisarudzira zvekuita kana N zvikumbiro zvikatadza. Ichafanirwawo kuona kuti ingani traffic masevhisi aya anogona kubata uye hardcode aya ma paramita uchishandisa yakakosha raibhurari. Uyezve, chikumbiro chinozofanira kusarudza nguva yekukanda mapfumo pasi uye kurega chikumbiro chichienda chakaipa (nenguva yekupera). Uye kuti uchinje chero ipi yeaya ari pamusoro apa, sevha yewebhu inofanirwa kumira, kugadziridzwa uye kutangwazve.

Kugovera mabasa aya kune mesh yebasa hazvireve chete kuti vanogadzira masevhisi havafanirwe kufunga nezvawo, asi zvakare kuti anogona kutariswa nenzira yepasirese. Kana iwe uine ketani yakaoma yemasevhisi, taura A -> B -> C -> D -> E, unofanirwa kufunga nezve hupenyu hwese hwekukumbira. Kana iwe uchida kuwedzera nguva yekubuda mubasa C, zvine musoro kuzviita zvese kamwechete, pane kuita chidimbu: kugadzirisa kodhi yebasa uye kumirira kuti chikumbiro chekudhonza chigamuchirwe uye iyo CI system yekuisa iyo yakagadziridzwa sevhisi.

14. Telemetry

TL; DR: Unganidza zvese zvinodikanwa (uye zvisinganyanyi kukosha) ruzivo kubva kumasevhisi.

Telemetry ishoko reamburera rinosanganisira metrics, kugoverwa kwekuteedzera, uye matanda. Sevhisi meshes inopa maitiro ekuunganidza uye kugadzirisa ese matatu marudzi e data. Apa ndipo panoita kuti zvinhu zvinyanye kupenga, sezvo huwandu hwesarudzo hungaite hwakakurisa. Kune metrics, kune Prometheus nemamwe maturusi anogona kushandiswa kuunganidza matanda fluentd, Loki, Vector uye vamwe. (semuenzaniso, ClickHouse neyedu loghouse yeK8s — chinyorwa chemuturikiri), yekutsvagisa yakagoverwa iripo Muvhimi etc. Imwe neimwe sevhisi mesh inogona kutsigira mamwe maturusi uye kwete mamwe. Zvichave zvinonakidza kuona kana purojekiti ichigona Vhura Telemetry kupa kumwe kusangana.

Muchiitiko ichi, mukana wesevhisi mesh tekinoroji ndeyekuti midziyo yepadivi inogona, mumusimboti, kuunganidza ese ari pamusoro data kubva kumasevhisi avo. Mune mamwe mazwi, iwe unowana imwechete telemetry yekuunganidza sisitimu yaunayo, uye sevhisi mesh inogona kugadzirisa ese aya ruzivo nenzira dzakasiyana. Semuyenzaniso:

muswe matanda kubva kune imwe sevhisi muCLI;
tarisa vhoriyamu yekukumbira kubva kune sevhisi mesh dashboard;
unganidza zvakagoverwa uye uzvitumire kune system seJaeger.

Attention, subjective kutonga: Kazhinji kutaura, telemetry inzvimbo yausingade kuwanda kwesevhisi mesh kukanganiswa. Kuunganidza ruzivo rwekutanga uye kuronda mamwe "yegoridhe metrics" panhunzi senge budiriro uye latency zvakanaka, asi ngativimbei isu hatione Frankenstein mirwi ichibuda iyo inoedza kutsiva hunyanzvi masisitimu, mamwe atove akasimbiswa uye anonzwisiswa.

15. Ongorora

TL; DR: Avo vanokanganwa zvidzidzo zvenhoroondo vakatongerwa kuzvidzokorora.

Auditing inyanzvi yekutarisa zviitiko zvakakosha muhurongwa. Panyaya yemasevhisi mesh, izvi zvinogona kureva kuteedzera kuti ndiani aita zvikumbiro kune chaiwo magumo emasevhisi chaiwo, kana kuti kangani chimwe chiitiko chine chekuita nekuchengetedza chakaitika mumwedzi wapfuura.

Zviripachena kuti kuongorora kwakabatana zvakanyanya ne telemetry. Musiyano ndewekuti telemetry inowanzobatanidzwa nezvinhu zvakaita sekuita uye kusimba kwehunyanzvi, nepo kuongororwa kunogona kuita nezvemutemo uye zvimwe zvinhu zvinowira kunze kwenzvimbo yehunyanzvi (semuenzaniso, kutevedzera EU General Data Dziviriro Regulation).

16. Preview

TL; DR: Kurarama kwenguva refu React.js, chitubu chezvisinganzwisisike zvinosangana.

Panogona kunge paine temu iri nani, asi ini handizvizive. Ini ndinongoreva graphical inomiririra mesh yebasa kana zvimwe zvezvikamu zvayo. Aya maonesheni anogona kusanganisira zviratidzi senge avhareji latencies, sidecar mudziyo kugadzirisa ruzivo, hutano cheki mhinduro, uye chenjedzo.

Kushanda munzvimbo yakatarisana nesevhisi kunobatanidzwa nehukuru hwekuziva mutoro uchienzaniswa neHumambo Hwake Monolith. Nokudaro, kudzvinyirirwa kwepfungwa kunofanira kuderedzwa pazvose. A trivial graphical interface ye mesh yesevhisi nekugona kudzvanya bhatani uye kuwana mhedzisiro yaunoda inogona kuita sarudzo mukukura kweiyi tekinoroji.

Hatina kuverengerwa murondedzero

Ini pakutanga ndaida kusanganisa mamwe mashoma ekushandisa kesi murondedzero, asi ndakazofunga kusadaro. Hezvino izvo, pamwe nezvikonzero zvechisarudzo changu:

Multi-data centreMupfungwa dzangu, iyi haisi nyaya yekushandisa seyakamanikana uye yakananga mashandisiro emasevhisi meshes kana mamwe seti yezvimiro sevhisi kuwanikwa.
Ingress uye egress. Iyi inzvimbo ine hukama, asi ini ndakazviganhurira (pamwe manyepo) kune "kumabvazuva-kumadokero traffic" kesi yekushandisa. Ingress uye egress inokodzera chinyorwa chakasiyana.

mhedziso

Ndizvo zvose ikozvino! Zvekare, runyorwa urwu rune zvimiso uye kazhinji haruna kukwana. Kana iwe uchifunga kuti ndapotsa chimwe chinhu kana kukanganisa, ndibate pa Twitter (@lucperkins) Ndapota cherechedzai mitemo yehutsika.

PS kubva kumushanduri

Mufananidzo mukuru wechinyorwa unobva pamufananidzo kubva pachinyorwa "Chii chinonzi Service Mesh (uye nguva yekushandisa imwe)?" (naGregory MacKinnon) Inoratidza kuti kumwe kushanda kubva kumashandisirwo (mugirini) kwatamira kune mesh yebasa inopa hukama pakati pavo (mubhuruu).

Verenga zvakare pablog yedu:

Source: www.habr.com