{"id":56218,"date":"2020-02-07T00:00:00","date_gmt":"2020-02-06T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/dark-launch-v-istio-sekretnye-sluzhby"},"modified":"2020-02-18T14:04:26","modified_gmt":"2020-02-18T11:04:26","slug":"dark-launch-v-istio-sekretnye-sluzhby","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby","title":{"rendered":"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00abRrezi \u2013 emri im i dyt\u00eb\u00bb, thoshte Austin Powers, njeriu-i mistersh\u00ebm i nivelit nd\u00ebrkomb\u00ebtar. Por ajo q\u00eb \u00ebsht\u00eb e vler\u00ebsuar nga superagjent\u00ebt dhe sh\u00ebrbimet sekrete, nuk \u00ebsht\u00eb aspak e p\u00ebrshtatshme p\u00ebr sh\u00ebrbimet kompjuterike, ku m\u00ebrzia \u00ebsht\u00eb shum\u00eb m\u00eb e mir\u00eb se rreziku. <\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/c29a2cabb6fca30d622401987f3e488a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDhe Istio s\u00eb bashku me OpenShift dhe Kubernetes e kthejn\u00eb implementimin e mikrosh\u00ebrbimeve n\u00eb nj\u00eb proces n\u00eb t\u00eb v\u00ebrtet\u00eb t\u00eb m\u00ebrzitsh\u00ebm dhe parashikues \u2013 dhe kjo \u00ebsht\u00eb e shk\u00eblqyer. P\u00ebr k\u00ebt\u00eb dhe shum\u00eb t\u00eb tjera do t\u00eb flasim n\u00eb postin e kat\u00ebrt dhe t\u00eb fundit t\u00eb seris\u00eb p\u00ebr Istio. <br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Kur m\u00ebrzia \u00ebsht\u00eb e drejt\u00eb<\/h3>\n<p>\nN\u00eb rastin ton\u00eb, m\u00ebrzia ndodh vet\u00ebm n\u00eb faz\u00ebn p\u00ebrfundimtare, kur mbetet vet\u00ebm t\u00eb ulesh dhe t\u00eb v\u00ebshzhgosh procesin. Por p\u00ebr k\u00ebt\u00eb \u00ebsht\u00eb e nevojshme t\u00eb paraprihen t\u00eb gjitha konfigurimet, dhe k\u00ebtu ju pret shum\u00eb interesante.<\/p>\n<p>Gjat\u00eb implementimit t\u00eb nj\u00eb versioni t\u00eb ri t\u00eb softuerit tuaj, duhet t\u00eb shqyrtoni t\u00eb gjitha mund\u00ebsit\u00eb p\u00ebr t\u00eb minimizuar rreziqet. Puna n\u00eb m\u00ebnyr\u00eb paralel \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb shum\u00eb e fuqishme dhe e provuar p\u00ebr testim, dhe Istio lejon p\u00ebrdorimin e nj\u00eb \u00abagjencie sekrete\u00bb (nj\u00eb version t\u00eb fsheht\u00eb t\u00eb mikrosh\u00ebrbimit tuaj) pa nd\u00ebrhyr\u00eb n\u00eb funksionimin e sistemit t\u00eb prodhimit. P\u00ebr k\u00ebt\u00eb ka madje nj\u00eb term t\u00eb ve\u00e7ant\u00eb \u2013 \u00abL\u00ebshimi i fsheht\u00eb\u00bb (Dark Launch), i cili aktivizohet nga nj\u00eb funksion me nj\u00eb em\u00ebr po aq spiun si \u00abmirrorimi i trafikut\u00bb.<\/p>\n<p>V\u00ebreni se n\u00eb propozimin e par\u00eb t\u00eb paragrafit t\u00eb m\u00ebparsh\u00ebm p\u00ebrdoret termi \u00abimplementim\u00bb (deploy), dhe jo \u00abl\u00ebshim\u00bb (release). Ju v\u00ebrtet duhet t\u00eb keni mund\u00ebsin\u00eb t\u00eb implementoni \u2013 dhe, natyrisht, t\u00eb p\u00ebrdorni \u2013 mikrosh\u00ebrbimin tuaj sa her\u00eb q\u00eb d\u00ebshironi. Ky sh\u00ebrbim duhet t\u00eb jet\u00eb i aft\u00eb t\u00eb pranoj\u00eb dhe t\u00eb p\u00ebrpunoj\u00eb trafik, t\u00eb jap\u00eb rezultate dhe gjithashtu t\u00eb shkruaj\u00eb n\u00eb log dhe t\u00eb monitorohet. Por ai vet\u00eb nuk \u00ebsht\u00eb domosdoshm\u00ebrisht i l\u00ebshuar n\u00eb prodhim. Implementimi dhe l\u00ebshimi i softuerit nuk jan\u00eb gjithmon\u00eb nj\u00ebsoj. Implementimin mund ta kryeni gjithmon\u00eb kur t\u00eb d\u00ebshironi, por l\u00ebshimi vet\u00ebm at\u00ebher\u00eb kur t\u00eb jeni plot\u00ebsisht t\u00eb gatsh\u00ebm.<\/p>\n<h3>Organizimi i m\u00ebrzis\u00eb \u00ebsht\u00eb interesant<\/h3>\n<p>\nShikoni rregullin e m\u00ebposht\u00ebm t\u00eb ruterit t\u00eb Istio, i cili drejton t\u00eb gjitha k\u00ebrkesat HTTP n\u00eb mikrosh\u00ebrbimin recommendation v1 (t\u00eb gjitha shembujt jan\u00eb marr\u00eb nga <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/redhat-developer-demos\/istio-tutorial#mirroring-traffic-dark-launch\">Istio Tutorial GitHub repo<\/a><\/noindex>), duke mirrored edhe ato n\u00eb mikrosh\u00ebrbimin recommendation v2:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/7139950ed58f23ceb43546ec932c6b92.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nV\u00ebreni etiket\u00ebn <code>mirror:<\/code> n\u00eb fund t\u00eb ekranit \u2013 ajo p\u00ebrcakton mirrorimin e trafikut. Po, kaq e thjesht\u00eb!<\/p>\n<p>Rezultati i k\u00ebtij rregulli do t\u00eb jet\u00eb se sistemi juaj i prodhimit (v1) do t\u00eb vazhdoj\u00eb t\u00eb p\u00ebrpunoj\u00eb k\u00ebrkesat e ardhura, por k\u00ebrkesat vet\u00eb do t\u00eb pasqyrohen asinkronisht n\u00eb v2, q\u00eb do t\u00eb thot\u00eb se ato do t\u00eb d\u00ebrgohen si kopje t\u00eb plota. K\u00ebshtu, do t\u00eb keni mund\u00ebsi t\u00eb testoni funksionimin e v2 n\u00eb kushte reale \u2013 me t\u00eb dh\u00ebna dhe trafik t\u00eb v\u00ebrtet\u00eb \u2013 pa nd\u00ebrhyr\u00eb n\u00eb pun\u00ebn e sistemit t\u00eb prodhimit. A e b\u00ebn kjo organizimin e testimit t\u00eb m\u00ebrzitsh\u00ebm? Po, patjet\u00ebr. Por po b\u00ebhet n\u00eb nj\u00eb m\u00ebnyr\u00eb interesante.<\/p>\n<h3>Shtojm\u00eb dram\u00ebn<\/h3>\n<p>\nKujdes, n\u00eb kodin e v2 duhet t\u00eb parashikoni situata kur k\u00ebrkesat e ardhura mund t\u00eb shkaktojn\u00eb ndryshimin e t\u00eb dh\u00ebnave. K\u00ebrkesat vet\u00eb pasqyrohen leht\u00ebsisht dhe n\u00eb m\u00ebnyr\u00eb transparente, por zgjedhja e m\u00ebnyr\u00ebs s\u00eb p\u00ebrpunimit n\u00eb testim mbetet n\u00eb duar tuaja \u2013 kjo \u00ebsht\u00eb pak m\u00eb emocionuese.<\/p>\n<h3>T\u00eb p\u00ebrs\u00ebrisim nj\u00eb moment t\u00eb r\u00ebnd\u00ebsish\u00ebm <\/h3>\n<p>\nLansimi i fsheht\u00eb me pasqyrimin e trafikut (Dark Launch\/Request Mirroring) mund t\u00eb realizohet pa prekur kodin.<\/p>\n<h3>Ushqim p\u00ebr mendimin<\/h3>\n<p>\nPor \u00e7far\u00eb n\u00ebse, n\u00eb vend t\u00eb pasqyrimit t\u00eb k\u00ebrkesave, d\u00ebrgoni nj\u00eb pjes\u00eb t\u00eb tyre jo n\u00eb v1, por n\u00eb v2? P\u00ebr shembull, nj\u00eb p\u00ebrqindje nga t\u00eb gjitha k\u00ebrkesat ose vet\u00ebm k\u00ebrkesat nga nj\u00eb grup i caktuar p\u00ebrdoruesish. Dhe pastaj, duke par\u00eb si funksionon v2, gradualisht t\u00eb transferoni t\u00eb gjitha k\u00ebrkesat n\u00eb versionin e ri. Ose p\u00ebrndryshe, t\u00eb kthehen t\u00eb gjitha n\u00eb v1, n\u00ebse di\u00e7ka nuk shkon mir\u00eb me v2. M\u00eb duket se kjo quhet Canary Deployment (\"implementim canary\" \u2013 termi <noindex><a rel=\"nofollow\" href=\"http:\/\/miningwiki.ru\/wiki\/%D0%9A%D0%B0%D0%BD%D0%B0%D1%80%D0%B5%D0%B9%D0%BA%D0%B0_%D0%B2_%D1%88%D0%B0%D1%85%D1%82%D0%B5\">\u00ebsht\u00eb i lidhur me minierat<\/a><\/noindex>, dhe n\u00ebse do t\u00eb kishte nj\u00eb origjin\u00eb ruse, do t\u00eb p\u00ebrmbante padyshim nj\u00eb referenc\u00eb p\u00ebr <noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/watch?v=7yGrgwE_k4I\">mackat<\/a><\/noindex>), dhe tani do ta shqyrtojm\u00eb k\u00ebt\u00eb m\u00eb n\u00eb detaje.<\/p>\n<h2>Canary Deployment n\u00eb Istio: thjeshtojm\u00eb aktivizimin<\/h2>\n<p><\/p>\n<h3>Me kujdes dhe gradualisht<\/h3>\n<p>\nThelbi i modelit t\u00eb implementimit Canary Deployment \u00ebsht\u00eb jasht\u00ebzakonisht i thjesht\u00eb: kur lansoni nj\u00eb version t\u00eb ri t\u00eb softuerit tuaj (n\u00eb rastin ton\u00eb \u2013 mikrosh\u00ebrbimi), s\u00eb pari i jepni akses nj\u00eb grupi t\u00eb vog\u00ebl p\u00ebrdoruesish. N\u00ebse gjith\u00e7ka shkon mir\u00eb, ngadal\u00eb rritni k\u00ebt\u00eb grup derisa versioni i ri t\u00eb filloj\u00eb t\u00eb ket\u00eb probleme, ose \u2013 n\u00ebse kjo nuk ndodh \u2013 p\u00ebrfundimisht ta transferoni t\u00eb gjith\u00eb p\u00ebrdoruesit n\u00eb t\u00eb. Duke e futur versionin e ri n\u00eb operim n\u00eb m\u00ebnyr\u00eb t\u00eb menduar dhe duke kontrolluar kalimin n\u00eb t\u00eb, mund t\u00eb zvog\u00ebloni rreziqet dhe t\u00eb maksimizoni reagimet.<\/p>\n<p>Natyrisht, Istio e thjesht\u00ebson Canary Deployment, duke ofruar disa mund\u00ebsi t\u00eb mira p\u00ebr riorganizimin inteligjent t\u00eb k\u00ebrkesave. Po, t\u00eb gjitha k\u00ebto mund t\u00eb b\u00ebhen pa prekur kodin tuaj t\u00eb burimit.<\/p>\n<h3>Filtrimi i shfletuesit<\/h3>\n<p>\nNj\u00eb nga kriteret m\u00eb t\u00eb thjeshta t\u00eb riorganizimit \u00ebsht\u00eb drejtimi n\u00eb p\u00ebrputhje me shfletuesin. Le t\u00eb themi se doni q\u00eb n\u00eb v2 t\u00eb kalohen vet\u00ebm k\u00ebrkesat nga shfletuesit Safari. Ja si b\u00ebhet kjo:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/3d9b763ec32c250ba88c8e54f701c602.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nT\u00eb aplikohet ky rregull riorganizimi dhe pastaj me komand\u00ebn <code>curl<\/code> do t\u00eb simulonim n\u00eb cik\u00ebl k\u00ebrkesa reale ndaj mikrosh\u00ebrbimit. Si\u00e7 duket n\u00eb screenshot, t\u00eb gjitha ato kalojn\u00eb n\u00eb v1:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/cf270c01680b6bd19045bca239bf89c6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nPor ku \u00ebsht\u00eb trafiku n\u00eb v2? Duke qen\u00eb se n\u00eb shembullin ton\u00eb t\u00eb gjitha k\u00ebrkesat vinin vet\u00ebm nga linja jon\u00eb e komand\u00ebs, thjesht nuk ka trafik. Por vini re rreshtat e fundit n\u00eb screenshot-in m\u00eb sip\u00ebr: kjo \u00ebsht\u00eb p\u00ebrgjigjja ndaj k\u00ebrkes\u00ebs nga shfletuesi Safari, i cili nga ana tjet\u00ebr ka dh\u00ebn\u00eb k\u00ebt\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/dc17ede0c2aac97284d27a2a77ce0651.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Pushtet i pakufizuar<\/h3>\n<p>\nNe kemi shkruar tashm\u00eb se shprehjet e rregullta ofrojn\u00eb mund\u00ebsi shum\u00eb t\u00eb fuqishme p\u00ebr riorganizimin e k\u00ebrkesave. Shikoni shembullin e m\u00ebposht\u00ebm (mendojm\u00eb se do ta kuptoni vet\u00eb se \u00e7far\u00eb b\u00ebn):<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/edf8d60651eef50af3e83aae67fde1db.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nTani, ndoshta e keni tashm\u00eb nj\u00eb ide p\u00ebr at\u00eb q\u00eb jan\u00eb t\u00eb afta shprehjet e rregullta.<\/p>\n<h3>Veproni me men\u00e7uri<\/h3>\n<p>\nRiorganizimi i men\u00e7ur, ve\u00e7an\u00ebrisht p\u00ebrpunimi i titujve t\u00eb paketeve duke p\u00ebrdorur shprehjet e rregullta, ju lejon t\u00eb udh\u00ebheqni trafikun ashtu si t\u00eb doni. Dhe kjo e thjeshton ndjesh\u00ebm implementimin e kodit t\u00eb ri \u2013 \u00ebsht\u00eb thjesht, nuk k\u00ebrkon ndryshimin e vet\u00eb kodit dhe, n\u00ebse \u00ebsht\u00eb e nevojshme, gjith\u00e7ka mund t\u00eb kthehet shpejt si\u00e7 ishte.<\/p>\n<h3>A jeni t\u00eb interesuar?<\/h3>\n<p>\nA keni d\u00ebshir\u00eb t\u00eb eksperimentoni me Istio, Kubernetes dhe OpenShift n\u00eb kompjuterin tuaj? Ekipi <noindex><a rel=\"nofollow\" href=\"https:\/\/developers.redhat.com\/about\/\">Red Hat Developer Team<\/a><\/noindex> ka p\u00ebrgatitur nj\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/redhat-developer-demos\/istio-tutorial\">manuali<\/a><\/noindex> shk\u00eblqyer mbi k\u00ebt\u00eb tem\u00eb dhe e ka publikuar t\u00eb gjitha skedar\u00ebt p\u00ebrkat\u00ebs. Pra, p\u00ebrpara, dhe mos e kufizoni veten.<br \/>\n\u2003<\/p>\n<h2>Istio Egress: dalja p\u00ebrmes dyqanit t\u00eb suvenireve<\/h2>\n<p>\nDuke aplikuar Istio s\u00eb bashku me Red Hat OpenShift dhe Kubernetes, mund t\u00eb leht\u00ebsoni shum\u00eb jet\u00ebn tuaj me mikrosh\u00ebrbimet. Rrjeti i sh\u00ebrbimeve Istio \u00ebsht\u00eb i fshehur brenda pod-\u00ebve t\u00eb Kubernetes-it, nd\u00ebrsa kodi juaj ekzekutohet (n\u00eb p\u00ebrgjith\u00ebsi) n\u00eb m\u00ebnyr\u00eb t\u00eb izoluar. Performanca, leht\u00ebsi e ndryshimit, gjurmimi dhe shum\u00eb t\u00eb tjera \u2013 t\u00eb gjitha k\u00ebto jan\u00eb t\u00eb lehta p\u00ebr t'u p\u00ebrdorur fal\u00eb p\u00ebrdorimit t\u00eb kontejner\u00ebve sidecar. Por \u00e7far\u00eb t\u00eb b\u00ebni n\u00ebse mikrosh\u00ebrbimi juaj duhet t\u00eb komunikoj\u00eb me sh\u00ebrbime tjera q\u00eb ndodhen jasht\u00eb sistemit tuaj OpenShift-Kubernetes?<\/p>\n<p>K\u00ebtu n\u00eb ndihm\u00eb vjen Istio Egress. N\u00eb dy fjal\u00eb, ai thjesht lejon qasje n\u00eb burimet (lexo: \u00absh\u00ebrbimet\u00bb) q\u00eb nuk jan\u00eb brenda sistemit tuaj Kubernetes. N\u00ebse nuk b\u00ebni konfigurime shtes\u00eb, at\u00ebher\u00eb n\u00eb ambientin Istio Egress, trafiku rihyr\u00eb vet\u00ebm brenda klasthit t\u00eb pod-ve dhe midis k\u00ebtyre klashtave bazuar n\u00eb tabelat e brendshme IP. Dhe ky izolim funksionon mjaft mir\u00eb derisa t\u00eb keni nevoj\u00eb p\u00ebr qasje n\u00eb sh\u00ebrbime jasht\u00eb.<\/p>\n<p>Egress lejon kalimin p\u00ebrtej tabelave t\u00eb IP-\u00ebve t\u00eb p\u00ebrmendura m\u00eb sip\u00ebr, qoft\u00eb n\u00eb baz\u00eb t\u00eb rregullave Egress, ose p\u00ebr nj\u00eb gam\u00eb IP-sh.<\/p>\n<p>T\u00eb supozojm\u00eb se kemi nj\u00eb program Java, i cili b\u00ebn nj\u00eb k\u00ebrkes\u00eb GET n\u00eb httpbin.org\/headers.<\/p>\n<p>(httpbin.org \u00ebsht\u00eb thjesht nj\u00eb burim i p\u00ebrshtatsh\u00ebm p\u00ebr testimin e k\u00ebrkesave sh\u00ebrbim-d\u00ebrguese.)<\/p>\n<p>N\u00ebse futni n\u00eb komand\u00ebn e linj\u00ebs <code>curl http:\/\/httpbin.org\/headers<\/code>, do t\u00eb shohim k\u00ebt\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/df0a2e1be00da0077bdb94a4d9fa091c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nOse mund ta hapni k\u00ebt\u00eb adres\u00eb n\u00eb shfletues:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/4fe04b4e888106d98b8f71cccf6ab430.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSi\u00e7 e shohim, sh\u00ebrbimi aty thjesht kthen titujt e d\u00ebrguar.<\/p>\n<h3>Z\u00ebvend\u00ebsimi i importit n\u00eb m\u00ebnyr\u00eb direkte<\/h3>\n<p>\nTani le t\u00eb marrim kodin Java t\u00eb k\u00ebtij sh\u00ebrbimi t\u00eb jasht\u00ebm n\u00eb lidhje me sistemin ton\u00eb dhe ta ekzekutojm\u00eb at\u00eb n\u00eb sistemin ton\u00eb, ku, kujtojm\u00eb, \u00ebsht\u00eb vendosur Istio. (Mund ta b\u00ebni k\u00ebt\u00eb vet\u00eb, duke iu referuar <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/redhat-developer-demos\/istio-tutorial#egress\">udhezuesit ton\u00eb p\u00ebr Istio<\/a><\/noindex>.) Pas nd\u00ebrtimit t\u00eb imazhit p\u00ebrkat\u00ebs dhe ekzekutimit t\u00eb tij n\u00eb platform\u00ebn OpenShift, do t\u00eb th\u00ebrrasim k\u00ebt\u00eb sh\u00ebrbim me komand\u00ebn <code>curl egresshttpbin-istioegress.$(minishift ip).nip.io<\/code>, dhe m\u00eb pas do t\u00eb shohim n\u00eb ekran k\u00ebt\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/ed71b5ba2e62415d1bbe3b54bba71eb8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nOo, \u00e7far\u00eb ndodhi? Ajo sapo punonte. \u00c7far\u00eb do t\u00eb thot\u00eb Not Found? Ne sapo e b\u00ebm\u00eb p\u00ebr t\u00eb <code>curl<\/code>.<\/p>\n<h3>Zgjerimi i tabelave IP p\u00ebr t\u00ebr\u00eb internetin<\/h3>\n<p>\nDuhet ta faj\u00ebsojm\u00eb (ose ta falenderojm\u00eb) Istio-n p\u00ebr k\u00ebt\u00eb. Sepse Istio \u00ebsht\u00eb thjesht kontejner\u00eb sidecar, t\u00eb cil\u00ebt jan\u00eb p\u00ebrgjegj\u00ebs p\u00ebr zbulimin dhe rihyrjen (dhe p\u00ebr shum\u00eb gj\u00ebra t\u00eb tjera, p\u00ebr t\u00eb cilat kemi folur m\u00eb par\u00eb). P\u00ebr k\u00ebt\u00eb arsye, tabelat IP din\u00eb vet\u00ebm at\u00eb q\u00eb ndodhet brenda sistemit tuaj t\u00eb klashtave. Dhe httpbin.org ndodhet jasht\u00eb dhe, si rezultat, \u00ebsht\u00eb i paarritsh\u00ebm. Dhe k\u00ebtu n\u00eb ndihm\u00eb vjen Istio Egress - pa asnj\u00eb ndryshim n\u00eb kodin tuaj t\u00eb burimit.<\/p>\n<p>Rregulli i Egress m\u00eb posht\u00eb e detyron Istio-n t\u00eb k\u00ebrkoj\u00eb (n\u00ebse \u00ebsht\u00eb e nevojshme, edhe n\u00eb t\u00eb gjith\u00eb internetin) sh\u00ebrbimin e nevojsh\u00ebm, n\u00eb k\u00ebt\u00eb rast, httpbin.org. Si\u00e7 duket nga ky skedar (egress_httpbin.yml), funksionaliteti k\u00ebtu \u00ebsht\u00eb mjaft i thjesht\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/47c65b06769d077a46e456f802b32a55.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nMbetej vet\u00ebm t\u00eb aplikoni k\u00ebt\u00eb rregull:<\/p>\n<pre><code class=\"plaintext\">istioctl create -f egress_httpbin.yml -n istioegress\n<\/code><\/pre>\n<p>\nT\u00eb shihni rregullat e Egress mund t\u00eb b\u00ebni me komand\u00ebn <code>istioctl get egressrules<\/code>:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/dbbd11def744eacd98ce4638ea4dd30a.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nDhe fund, p\u00ebrs\u00ebri e fillojm\u00eb komand\u00ebn <i>curl<\/i> \u2013 dhe shohim se gjith\u00e7ka funksionon:<\/p>\n<p><img decoding=\"async\" alt=\"Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete\" src=\"\/wp-content\/uploads\/2020\/02\/3ab69421969e4fdd35a4a712d22df785.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Mendoni hapur<\/h3>\n<p>\nAshtu si\u00e7 e shihni, Istio lejon organizimin e interaksioneve edhe me bot\u00ebn jasht. N\u00eb fjal\u00eb t\u00eb tjera, ju mund t\u00eb krijoni sh\u00ebrbime OpenShift dhe t'i menaxhoni ato p\u00ebrmes Kubernetes, duke mbajtur gjith\u00e7ka n\u00eb pod'\u00eb q\u00eb shkall\u00ebzohen lart-posht\u00eb sipas nevoj\u00ebs. Dhe n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, mund t\u00eb lidheni pa ndonj\u00eb shqet\u00ebsim me sh\u00ebrbime q\u00eb jan\u00eb jasht\u00eb mjedisit tuaj. Dhe po, le t\u00eb p\u00ebrs\u00ebrisim se e gjith\u00eb kjo mund t\u00eb b\u00ebhet pa prekur kodin tuaj.<\/p>\n<p>Ky ishte postimi i fundit n\u00eb serin\u00eb p\u00ebr Istio. Q\u00ebndroni me ne \u2013 ka shum\u00eb gj\u00ebra interesante p\u00ebrpara!<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/redhatrussia\/blog\/487214\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u00ab\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u2013 \u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0435 \u0438\u043c\u044f\u00bb, \u2013 \u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u043b \u041e\u0441\u0442\u0438\u043d \u041f\u0430\u0443\u044d\u0440\u0441, \u0447\u0435\u043b\u043e\u0432\u0435\u043a-\u0437\u0430\u0433\u0430\u0434\u043a\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430. \u041d\u043e \u0442\u043e, \u0447\u0442\u043e \u0432 \u043f\u043e\u0447\u0435\u0442\u0435 \u0443 \u0441\u0443\u043f\u0435\u0440\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431, \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0433\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043b\u0443\u0436\u0431 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445, \u0433\u0434\u0435 \u0441\u043a\u0443\u043a\u043e\u0442\u0438\u0449\u0430 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043b\u0443\u0447\u0448\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0435\u0439. \u0418 Istio \u0432\u043c\u0435\u0441\u0442\u0435 OpenShift \u0438 Kubernetes \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0432 \u0434\u0435\u043b\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0441\u043a\u0443\u0447\u043d\u043e\u0435 \u0438 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u043e\u0435 \u2013 \u0438 \u044d\u0442\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u043e. \u041e\u0431 \u044d\u0442\u043e\u043c \u0438 \u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-56218","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u00ab\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u2013 \u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0435 \u0438\u043c\u044f\u00bb, \u2013 \u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u043b \u041e\u0441\u0442\u0438\u043d \u041f\u0430\u0443\u044d\u0440\u0441, \u0447\u0435\u043b\u043e\u0432\u0435\u043a-\u0437\u0430\u0433\u0430\u0434\u043a\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Dark Launch \u0432 Istio: \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u00ab\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u2013 \u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0435 \u0438\u043c\u044f\u00bb, \u2013 \u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u043b \u041e\u0441\u0442\u0438\u043d \u041f\u0430\u0443\u044d\u0440\u0441, \u0447\u0435\u043b\u043e\u0432\u0435\u043a-\u0437\u0430\u0433\u0430\u0434\u043a\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-06T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:04:26+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dark Launch n\u00eb Istio: sh\u00ebrbime sekrete | ProHoster","description":"\u00abRreziku \u00ebsht\u00eb emri im i dyt\u00eb\u00bb, thoshte Austin Powers, nj\u00eb njeri misteri me p\u00ebrmasa nd\u00ebrkomb\u00ebtare.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Dark Launch \u0432 Istio: \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b | ProHoster","og:description":"\u00ab\u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u2013 \u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0435 \u0438\u043c\u044f\u00bb, \u2013 \u0433\u043e\u0432\u0430\u0440\u0438\u0432\u0430\u043b \u041e\u0441\u0442\u0438\u043d \u041f\u0430\u0443\u044d\u0440\u0441, \u0447\u0435\u043b\u043e\u0432\u0435\u043a-\u0437\u0430\u0433\u0430\u0434\u043a\u0430 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/dark-launch-v-istio-sekretnye-sluzhby","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56218","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:28:24","updated":"2022-10-05 04:55:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/56218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=56218"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/56218\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=56218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=56218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=56218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}