Phawula. transl.: Umnatha wenkonzo yinto engekabinayo inguqulelo ezinzileyo kwisiRashiya (ngaphezulu kweminyaka emi-2 eyadlulayo sanikezela ngenketho ethi "i-mesh yeenkonzo", kwaye emva kwexeshana, abanye oogxa baqala ukukhuthaza indibaniselwano "yesihluzo senkonzo"). . Ukuthetha rhoqo malunga nale teknoloji kuye kwakhokelela kwimeko apho ukuthengisa kunye namacandelo ezobugcisa asondelene kakhulu. Esi sixhobo esimangalisayo esivela komnye wababhali begama lokuqala senzelwe ukuzisa ukucaca kwiinjineli kwaye kungekhona kuphela.
Comic evela
Intshayelelo
Ukuba uyinjineli yesoftware esebenza kwenye indawo kwindawo ye-backend systems, igama elithi "mesh service" mhlawumbi sele lizinzile engqondweni yakho kule minyaka imbalwa idlulileyo. Ngombulelo ngengozi engaqhelekanga, eli binzana lithatha ishishini ngakumbi nangakumbi, kwaye i-hype kunye nezibonelelo ezihambelanayo zokuthengisa zikhula njengebhola lekhephu, libhabha phantsi endulini kwaye lingabonisi zimpawu zokucotha.
Umnatha wenkonzo wazalelwa kumanzi amdaka, athambileyo wendalo yendalo yamafu. Ngelishwa, oku kuthetha ukuba ininzi yempikiswano ejikelezayo ukusuka "kwingxoxo ephantsi kweekhalori" ukuya-ukusebenzisa igama lobugcisa-i-bullshit ecacileyo. Kodwa ukuba ucoca yonke ingxolo, unokufumanisa ukuba i-mesh yenkonzo inomsebenzi wokwenyani, oqinisekileyo nobalulekileyo.
Kule post, ndiya kuzama ukwenza oko kanye: ukubonelela ngokunyaniseka, ngokunzulu, isikhokelo esijoliswe kubunjineli kumnatha wenkonzo. Ndiza kuphendula ngaphezu kombuzo nje: "Yintoni?", - kodwa kwakhona "Ngoba?", kwakunye "Kutheni ngoku?". Ekugqibeleni, ndiya kuzama ukuchaza ukuba kutheni (ngokombono wam) le teknoloji ibangele i-hype ephosa, yona ngokwayo ibali elinomdla.
Ndingubani
Molweni nonke! Igama lam ndingu . Ndingomnye wabadali - Iprojekthi yokuqala yemesh yenkonzo kunye neprojekthi ebekek' ityala ngokubonakala kwexesha umnatha wenkonzo ngokunjalo (uxolo guys!). (Qaphela uguqulelo.: Ngendlela, ekuqaleni kokubonakala kweli gama, ngaphezu kweminyaka eyi-2,5 edlulileyo, sele siguqulele izinto zokuqala zombhali ofanayo othi "".) Nam ndiyakhokela sisiqalo esakha izinto ezipholileyo zemesh ezifana ne-Linkerd kunye .
Ungaqikelela ukuba ndinoluvo olucalu-calukileyo noluzimeleyo ngalo mba. Nangona kunjalo, ndiya kuzama ukugcina umkhethe ubuncinci (ngaphandle kwecandelo elinye: "Kutheni kukho ukuthetha okuninzi malunga ne-service mesh?", - apho ndiya kwabelana ngezimvo zam zangaphambili). Ndiya kwenza konke okusemandleni am ukwenza esi sikhokelo sibe yinjongo kangangoko. Kwimizekelo ethile, ndiya kuthembela kakhulu kumava e-Linkerd, ngelixa ndibonisa ukungafani (ukuba kukho) endikwaziyo ekuphunyezweni kwezinye iindidi ze-mesh yenkonzo.
Kulungile, lixesha lokudlulela kwizinto eziphathwayo.
Yintoni umnatha wenkonzo?
Ngaphandle kwayo yonke i-hype, i-mesh yenkonzo ilula ngokwesakhiwo. Liqela nje lezithuba zomsebenzisi ezibekwe "kufuphi" neenkonzo (siya kuthetha kancinci malunga "kufuphi" kamva), kunye neseti yeenkqubo zolawulo. Abameli babizwa ngokudibeneyo inqwelomoya yedatha, kwaye iinkqubo zolawulo zibizwa inqwelomoya yokulawula. Inqwelomoya yedatha ibamba iifowuni phakathi kweenkonzo kwaye yenza "nantoni na eyahlukileyo" ngazo; indiza yokulawula, ngokulandelanayo, ilungelelanisa ukuziphatha kwe-proxy kwaye inikezela ukufikelela kuwe, oko kukuthi. umsebenzisi, kwi-API, evumela uthungelwano ukuba lusetyenziswe kwaye lulinganiswe lulonke.
Yintoni le proxy? Lo ngummeli we-TCP wodidi lwe-"Layer 7-aware". (okt "ukuthathela ingqalelo" umaleko we-7 wemodeli ye-OSI) njenge-HAProxy kunye ne-NGINX. Unokukhetha ummeli ngokuthanda kwakho; I-Linkerd isebenzisa ummeli we-Rust, obizwa ngegama elingantsonkothanga . Siyiqulunqe ngokukodwa i-mesh yenkonzo. Ezinye iimeshes zikhetha ezinye iiproxies (Umthunywa lukhetho oluqhelekileyo). Nangona kunjalo, ukukhetha i-proxy yinto nje yokuphunyezwa.
Zenza ntoni ezi seva zommeli? Ngokucacileyo, benza umnxeba wokuya nokubuya kwiinkonzo (ukuthetha ngokuthe ngqo, basebenza njenge proxies kunye nokubuyisela umva ii-proxies, bebamba zombini iifowuni ezingenayo neziphumayo). Kwaye baphumeza iseti yenqaku egxile kwiifowuni phakathi iinkonzo. Olu gxininiso kwi-traffic phakathi kweenkonzo yintoni eyahlula i-proxy ye-mesh yenkonzo ukusuka, yithi, i-API gateways okanye i-ingress proxies (eyokugqibela igxile kwiifowuni eziza kwiqela elivela kwihlabathi langaphandle). (Phawula. transl.: Ukuthelekisa abalawuli abakhoyo be-Kubernetes Ingress, abaninzi babo basebenzisa uMthunywa osele ukhankanyiwe, bona .)
Ke, sicinge ngendiza yedatha. Inqwelomoya yokulawula ilula: yiseti yamacandelo abonelela bonke oomatshini ukuba indiza yedatha idinga ukusebenza ngendlela elungelelanisiweyo, kubandakanywa ukufunyanwa kwenkonzo, ukukhutshwa kwesatifikethi se-TLS, ukuhlanganiswa kweemetrics, njl njl. ukuziphatha kwayo; kwakhona, indiza yokulawula inika i-API evumela ukuba utshintshe kwaye ulandele indlela yokuziphatha kwedatha yedatha ngokubanzi.
Ngezantsi umzobo wendiza yokulawula kunye nedatha yedatha kwi-Linkerd. Njengoko ubona, inqwelomoya yolawulo ibandakanya izinto ezininzi ezahlukeneyo, kubandakanya umzekelo wePrometheus oqokelela iimetrics ezivela kwiiseva zommeli, kunye namanye amacandelo afana destination (ukufunyanwa kwenkonzo), identity (igunya lesatifikethi, CA) kunye public-api (isiphelo sewebhu kunye ne-CLI). Ngokwahlukileyo, indiza yedatha yi-linker-proxy elula ecaleni komzekelo wesicelo. Lo ngumzobo nje wengqiqo; Kusasazo lwehlabathi lokwenyani, unokuba neekopi ezintathu zecandelo ngalinye lenqwelomoya yolawulo kunye namakhulu okanye amawaka e proxies kwinqwelomoya yedatha.
(Iibhokisi eziblowu kulo mzobo zimele imida ye-Kubernetes pods. Uyabona ukuba izikhongozeli ezine-linker-proxy zikwipod efanayo nezikhongozeli zesicelo. Olu dweliso lwaziwa njenge isitya semoto esecaleni.)
Ulwakhiwo lomnatha wenkonzo luneziphumo ezininzi ezibalulekileyo. Okokuqala, ekubeni umsebenzi we-proxy kukuthintela iifowuni phakathi kweenkonzo, i-mesh yenkonzo yenza ingqiqo kuphela ukuba isicelo sakho sakhelwe uluhlu lweenkonzo. umnatha unako sebenzisa nge-monoliths, kodwa oku akufuneki ngokucacileyo ngenxa ye-proxy enye, kwaye ukusebenza kwayo akunakwenzeka ukuba kufunwa.
Esinye isiphumo esibalulekileyo kukuba i-mesh yenkonzo ifuna enkulu inani labameli. Enyanisweni, i-Linkerd idibanisa i-linker-proxy kuyo yonke imizekelo yenkonzo nganye (ezinye izinto eziphunyeziweyo zongeza i-proxy kuyo yonke inginginya / inginginya / i-VM. Kuninzi kunjalo). Usetyenziso olusebenzayo olunjalo lwe-proxy ngokwayo luthwala inani leengxaki ezongezelelweyo:
- Iiproksi kwindiza yedatha kufuneka zibe ngokukhawuleza, kuba kumnxeba ngamnye kukho iifowuni ezimbalwa eziya kummeli: enye kwicala lomxhasi, enye kwicala lomncedisi.
- Kwakhona, iiproksi kufuneka zibe encinci и ilula. Ngamnye uya kusebenzisa imemori kunye nezixhobo ze-CPU, kwaye oku kusetyenziswa kuya kukhula ngokuhambelana nesicelo.
- Uya kudinga isixhobo sokusebenzisa kunye nokuhlaziya inani elikhulu le proxies. Ukwenza ngesandla akusiyo inketho.
Ngokubanzi, i-mesh yenkonzo ijongeka ngolu hlobo (ubuncinci ukusuka kwiliso leentaka): uhambisa iqela le-userspace proxies "enza into ethile" kunye ne-traffic yangaphakathi, ye-inter-service traffic, kwaye usebenzise indiza yokulawula ukujonga nokulawula.
Lixesha lombuzo othi "Kutheni?"
Yenzelwe ntoni i-mesh yenkonzo?
Kwabo baqala ukudibana nombono we-mesh yenkonzo, kuyaxoleleka ukuba noloyiko oluncinci. Uyilo lwe-mesh yenkonzo luthetha ukuba ayizukwandisa umva wesicelo kuphela, kodwa iya kwandisa tya izixhobo kunye iyakongeza iqela leendlela ezintsha kwiziseko ezingundoqo. Okokuqala useta umnatha wenkonzo, kwaye emva koko uzifumana ufuna ukukhonza amakhulu (ukuba ayingawo amawaka) e proxies. Umbuzo ngowokuba, ngubani oza kuvolontiya kule nto?
Impendulo yalo mbuzo inamacandelo amabini. Okokuqala, iindleko zentengiselwano ezinxulumene nokuthunyelwa kwezi proxies zinokuncitshiswa kakhulu ngenxa yolunye utshintsho olwenzekayo kwi-ecosystem (ngaphezulu koku kamva).
Okwesibini, isixhobo esinjalo siyindlela entle yokwazisa ingqiqo eyongezelelweyo kwinkqubo. Kwaye kungekuphela ngenxa yokuba uninzi lweempawu ezintsha zinokongezwa kusetyenziswa i-mesh yenkonzo, kodwa nangenxa yokuba inokwenziwa ngaphandle kokuphazamisana ne-ecosystem. Enyanisweni, yonke imodeli ye-mesh yenkonzo isekelwe kule postulate: kwi-multiservice system, kungakhathaliseki ukuba yintoni yenza iinkonzo zomntu ngamnye, i-traffic phakathi kwabo yeyona ndawo ifanelekileyo yokongeza umsebenzi.
Umzekelo, kwi-Linkerd (njengakwii-meshes ezininzi) ukusebenza kugxininiswe ikakhulu kwiifowuni ze-HTTP, kuquka i-HTTP/2 kunye ne-gRPC*. Umsebenzi utyebile kakhulu - unokwahlulwa ube ziiklasi ezintathu:
- Iimpawu ezinxulumeneyo ukuthembeka. Phinda uzame izicelo, ukuvalwa kwexesha, indlela yecanary (ukwahlulwa kwetrafikhi/ukwalathisa kwakhona), njl.
- Iimpawu ezinxulumeneyo ukubeka esweni. Ukudityaniswa kwamazinga empumelelo, ukulibaziseka kunye nomthamo wezicelo zenkonzo nganye okanye indawo ekusingwa kuyo umntu ngamnye; ukwakha iimephu zeenkonzo ze-topological, njl.
- Iimpawu ezinxulumeneyo ukhuseleko. I-TLS edibeneyo, ulawulo lokufikelela, njl.
* Ukusuka kwimbono ye-Linkerd, i-gRPC ayifani kwaphela ne-HTTP/2: isebenzisa nje iprotobuf kumthwalo wokuhlawula. Ngokwembono yomphuhlisi, ezi zinto zimbini, ngokuqinisekileyo, zahlukile.
Uninzi lwezi ndlela zisebenza kwinqanaba lesicelo (kungoko "i-L7 proxy"). Umzekelo, ukuba inkonzo ka-Foo yenza umnxeba we-HTTP kwiBar yenkonzo, i-link-proxy kwicala le-Foo inokulayisha ngobukrelekrele ibhalansi kunye neminxeba yendlela ukusuka kwi-Foo ukuya kwi-Bar yemizekelo esekwe kwi-latency ephawulweyo; inokusiphinda isicelo ukuba kuyimfuneko (kwaye ukuba asinamandla); unokurekhoda ikhowudi yokuphendula kunye nexesha lokuvala, njalo njalo. Ngokufanayo, i-link-proxy ye-link kwicala leBar ingasikhaba isicelo ukuba ayivumelekanga okanye ukuba umda wesicelo ugqithisiwe; inokulungisa ukulibaziseka kwicala layo, njl.
Iiproxies zinokwenza "into" kwinqanaba loqhagamshelwano ngokunjalo. Umzekelo, i-linker-proxy kwicala le-Foo inokuqalisa uxhulumaniso lwe-TLS, kwaye i-linker-proxy kwicala leBar ingayiphelisa, kwaye omabini amacala anokuqinisekisa iziqinisekiso ze-TLS zomnye nomnye. Oku akuboneleli kuphela uguqulelo oluntsonkothileyo phakathi kweenkonzo, kodwa kunye nendlela ekhuselekileyo yokuchonga iinkonzo: I-Foo kunye neBar ino "ubungqina" bokuba ngaba bathi bayiyo.
* "Umhlobo womhlobo" uthetha ukuba isiqinisekiso somthengi sikwaqinisekisiwe (mutual TLS). Kwi-TLS "yakudala", umzekelo, phakathi kwesikhangeli kunye nomncedisi, isatifikethi secala elinye kuphela (umncedisi) sikholisa ukuqinisekiswa.
Ingaba zisebenza kwisicelo okanye kwinqanaba loxhulumaniso, kubalulekile ukugxininisa ukuba zonke iimpawu ze-mesh zenkonzo esebenzayo umlinganiswa. I-Linkerd ayikwazi ukuguqula i-semantics yomthwalo wokuhlawula, njengokongeza imihlaba kwiqhekeza le-JSON okanye ukwenza utshintsho kwiprotobuf. Siza kuthetha ngeli nqaku libalulekileyo kamva xa sithetha nge-ESB kunye ne-middleware.
Le yisethi yeempawu ezinikezelwa ngumnatha wenkonzo. Umbuzo uvela: kutheni ungaziphumezi ngokuthe ngqo kwisicelo? Kwaye kutheni uphazamisana ne-proxy kwaphela?
Kutheni i-mesh yenkonzo ingumbono olungileyo
Ngelixa amandla e-mesh yenkonzo enomtsalane, ixabiso lawo eliphambili alikho kwiimpawu. Ekugqibeleni thina Ngaba unako ziphumeze ngokuthe ngqo kwisicelo (kamva siza kubona ukuba le yayiyimvelaphi ye-mesh yenkonzo). Ukuyibeka kwisivakalisi esinye, ixabiso le-mesh yenkonzo yile: ibonelela ngokusebenza okubalulekileyo ekuqhubeni isoftwe yeseva yanamhlanje ngendlela engaguqukiyo, ebanzi, ye-application-code-agnostic..
Makhe sihlalutye esi siphakamiso.
«Imisebenzi ebalulekileyo ekusebenzeni kweSoftware yeSeva yanamhlanje". Ukuba wakha umncedisi wesicelo se-transaction eqhagamshelwe kwi-intanethi yoluntu eyamkela izicelo ezivela kwihlabathi langaphandle kwaye iphendule kubo ngexesha elifutshane-umzekelo, isicelo sewebhu, iseva ye-API, kunye noninzi lwezinye izicelo zanamhlanje - kwaye ukuba uyayiphumeza njengeseti yeenkonzo ezisebenzisana ngokuhambelanayo, kwaye ukuba uhlala uphucula le software, ukongeza izinto ezintsha, kwaye ukuba unyanzelekile ukuba ugcine le nkqubo ikwimeko yokusebenza ngexesha lenkqubo yokuguqulwa - kulo mzekelo, sivuyisana nawe, wenza isoftware yeseva yangoku. Kwaye zonke ezi zinto zibalaseleyo zidweliswe ngasentla zijika zibaluleke kakhulu kuwe. Isicelo kufuneka sithembeke, sikhuseleke, kwaye kufuneka ukwazi ukubona into esiyenzayo. Yile mibuzo ukuba i-mesh yenkonzo inceda ukusombulula.
(Kulungile, ukukholelwa kwam ukuba le ndlela yindlela yanamhlanje yokwakha isofthiwe yeseva iye yangena kumhlathi wangaphambili. Abanye bakhetha ukuphuhlisa i-monoliths, "i-microservices esebenzayo" kunye nezinye izinto ezingawi phantsi kwenkcazo engentla. Aba bantu mhlawumbi banombono eyahlukayo kum, kwaye ke, ndiyakholelwa ukuba "ayilunganga" - nangona kuyo nayiphi na imeko, i-mesh yenkonzo ayiloncedo kakhulu kubo).
«Iyunifomu yesitaki sonke". Iimpawu ezibonelelwa ngumnatha wenkonzo azibalulekanga nje. Basebenza kuzo zonke iinkonzo kwisicelo, kungakhathaliseki ukuba babhalwe ngoluphi ulwimi, basebenzise siphi isakhelo, babhalwe ngubani, basasazwe njani, kunye nazo zonke ezinye izinto ezifihlakeleyo zophuhliso nokusetyenziswa kwazo.
«Ikhowudi yesicelo ezimeleyo". Okokugqibela, i-mesh yenkonzo ayiboneleli kuphela ngokusebenza okuhambelanayo kuyo yonke isitakhi, ikwenza oko ngendlela engafuni ukuhlelwa kwesicelo. Isiseko esisisiseko somsebenzi we-mesh yenkonzo, kubandakanywa imisebenzi yokuqwalasela, ukuhlaziya, ukusebenza, ukugcina, njl., kuxhomekeke kwinqanaba leqonga kwaye lizimeleyo kwisicelo. Isicelo sinokutshintsha ngaphandle kokuchaphazela umnatha wenkonzo. Emva koko, i-mesh yenkonzo inokutshintsha ngaphandle kokungenelela kwesicelo.
Ngamafutshane, i-mesh yenkonzo ayiboneleli nje ngokusebenza okubalulekileyo, kodwa ikwenza oko kwihlabathi jikelele, ngokufanayo, nangendlela ezimeleyo yesicelo. Kwaye ke, ngelixa ukusebenza kwe-mesh yenkonzo kunokuphunyezwa kwikhowudi yenkonzo (umzekelo, njengethala leencwadi elibandakanyiweyo kunye nenkonzo nganye), le ndlela ayiyi kubonelela ngokufana kunye nokuzimela okubaluleke kakhulu kwimeko umnatha wenkonzo.
Kwaye konke okufuneka ukwenze kukongeza iqela le proxies! Ndiyathembisa, kungekudala siza kujonga iindleko zokusebenza ezinxulumene nokongeza ezi proxies. Kodwa kuqala, makhe sime kwaye sijonge le ngcamango yokuzimela kwimbono yeentlobo ezahlukeneyo abantu.
Unceda bani umnatha wenkonzo?
Nangona kusenokuba nzima, ukuze iteknoloji ibe yinxalenye ebalulekileyo ye-ecosystem, kufuneka yamkelwe ngabantu. Ke ngubani onomdla kumnatha wenkonzo? Ngubani ozuzayo ngokusetyenziswa kwayo?
Ukuba uphuhlisa isoftware yeseva yanamhlanje, unokucinga ukuba iqela lakho njengeqela abanini benkonzoabathi kunye baphuhlise kwaye baphumeze ingqiqo yoshishino, kunye abanini platforminxaxheba kuphuhliso lweqonga langaphakathi apho ezi nkonzo zisebenza khona. Kwimibutho emincinci, aba banokuba ngabantu abafanayo, kodwa njengoko inkampani ikhula, ezi nxaxheba zivame ukucaca ngakumbi kwaye zide zihlulwe kwiindima ezincinci ... (Kuninzi okuthethwa apha malunga nokutshintsha kwemvelo ye-devops, ifuthe lombutho weenkonzo ezincinci, njl.njl) n. Kodwa okwangoku, masizithathe kancinci ezi nkcazo).
Ukususela kulo mbono, abaxhamli abacacileyo be-mesh yenkonzo ngabanini beqonga. Emva kwayo yonke loo nto, eyona njongo iphambili yeqela leqonga kukudala iqonga langaphakathi apho abanikazi benkonzo banokusebenzisa ingqiqo yeshishini kwaye bayenze ngendlela eqinisekisa ukuzimela okukhulu kwiinkcukacha ezibuhlungu zokusebenza kwayo. I-mesh yenkonzo ayinikezeli kuphela izakhono ezibalulekileyo ekufezekiseni le njongo, ikwenza oko ngendlela yokuba, ngokulandelayo, ibeke kungabikho kuxhomekeka kubanini benkonzo.
Abanini benkonzo nabo bayazuza, nangona ngendlela engathanga ngqo. Injongo yomnini wenkonzo kukuba ibe nemveliso kangangoko kunokwenzeka ekuphumezeni ingqiqo yenkqubo yeshishini, kwaye ngaphantsi kufuneka akhathazeke malunga nemiba yokusebenza, ngcono. Esikhundleni sokunyanzelisa, yithi, uzame kwakhona imigaqo-nkqubo okanye i-TLS, banokugxila kuphela kwishishini kwaye banethemba lokuba iqonga likhathalela abanye. Kubo, oku kuyinzuzo enkulu.
Ixabiso lentlangano yolwahlulo olunjalo phakathi kwabanini bamaqonga kunye neenkonzo azikwazi ukugqithiswa. Ndicinga ukuba uyanegalelo eyona nto iphambili igalelo kwixabiso le-mesh yenkonzo.
Sifunde esi sifundo xa umlandeli we-Linkerd wokuqala wasixelela ukuba kutheni bekhethe umnatha wenkonzo: kuba ibavumele ukuba "baqhubeke bethetha kancinci." Nazi ezinye iinkcukacha: abafana benkampani enye enkulu bafudukele iqonga labo baya eKubernetes. Kuba isicelo sisebenze ngolwazi olubuthathaka, bafuna ukufihla lonke unxibelelwano kumaqela. Nangona kunjalo, imeko yayinzima ngenxa yobukho bamakhulu eenkonzo kunye namaqela amakhulu ophuhliso. Ithemba lokuqhagamshelana nomntu wonke nokubaqinisekisa ukuba babandakanye inkxaso ye-TLS kwizicwangciso zabo alizange libakholise konke konke. Ngokufaka i-Linkerd, bafuduka uxanduva ukusuka kubaphuhlisi (ngokwembono yabo yayiyingxaki engeyomfuneko) ukuya kumaqonga, kubo le nto yayiphambili kwinqanaba eliphezulu. Ngamanye amazwi, i-Linkerd yayibasombulula hayi kakhulu ingxaki yobugcisa njengeyombutho.
Ngamafutshane, i-mesh yenkonzo, kunoko, ayisiso isisombululo sobugcisa, kodwa ezentlalo-zobugcisa Iingxaki. (Enkosi ukwazisa eli gama.
Ngaba umnatha wenkonzo uza kuzisombulula zonke iingxaki zam?
Ewe. Ndiyathetha, hayi!
Ukujonga kwiiklasi ezintathu zeempawu ezichazwe ngasentla - ukuthembeka, ukhuseleko, kunye nokubonwa - kuyacaca ukuba i-mesh yenkonzo ayisiso isisombululo esipheleleyo kuyo nayiphi na yezi ngxaki. Nangona i-Linkerd ingathumela izicelo eziphindaphindiweyo (ukuba iyazi ukuba i-idempotent), ayikho kwindawo yokuthatha izigqibo malunga noko kubuyela kumsebenzisi ukuba inkonzo iphelile ekugqibeleni - ezo zigqibo kufuneka zenziwe ngesicelo. I-Linkerd inokugcina izibalo kwizicelo eziyimpumelelo, kodwa ayikwazi ukujonga kwinkonzo kwaye ibonelele ngeemetriki zayo zangaphakathi - isicelo kufuneka sibe nesixhobo esinjalo. Kwaye ngelixa i-Linkerd ikwazi ukubamba i-mTLS, izisombululo zokhuseleko ezigcweleyo zifuna okungakumbi.
I-subset yeempawu kwezi ndawo ezinikezelwa yi-mesh yenkonzo zinxulumene iimpawu zeqonga. Ngale nto ndithetha imisebenzi ethi:
- Ukuzimela kwingqiqo yezoshishino. Indlela apho iihistograms zokufowuna zakhiwe phakathi kweFo kunye neBar izimele ngokupheleleyo nokuba kutheni UFo ufowunela iBar.
- Kunzima ukuphumeza ngokuchanekileyo. Kwi-Linkerd, ii-retries ziphinde zenziwe parametered nazo zonke iintlobo zezinto ezintle ezifana nohlahlo lwabiwo-mali lokuphinda uzame. (Phinda uzame uhlahlo lwabiwo-mali), ekubeni indlela elula yokuphunyezwa kwezinto ezinjalo ngokuqinisekileyo iya kukhokelela ekuveleni kwento ebizwa ngokuba "yi-avalanche yezicelo" (Zama kwakhona isaqhwithi) kunye nezinye iingxaki ezithe ngqo kwiinkqubo ezisasazwayo.
- Isebenza kakhulu xa isetyenziswa rhoqo. Indlela ye-TLS iyavakala kuphela xa isetyenziswa kuyo yonke indawo.
Ngenxa yokuba ezi mpawu ziphunyezwa kumaleko ommeli (kwaye hayi kumaleko wesicelo), umnatha wenkonzo uyaziveza iqonga, hayi izicelo. Ngoko ke, akukhathaliseki nokuba loluphi ulwimi iinkonzo ezibhalwe ngalo, zeziphi isakhelo ezizisebenzisayo, zibhalwe ngubani kwaye kutheni. Iiproksi zisebenza ngaphaya kwazo zonke ezi nkcukacha, kunye nesiseko esisisiseko salo msebenzi, kubandakanywa nemisebenzi yokuqwalasela, ukuhlaziya, ukusebenza, ukugcina, njl., ilele kuphela kwinqanaba leqonga.
Imizekelo yezakhono zemesh yenkonzo
Isishwankathelo, i-mesh yenkonzo ayisosisombululo esipheleleyo sokuthembeka, ukubonwa, okanye ukhuseleko. Umda wale mimandla uquka ukuthatha inxaxheba okunyanzelekileyo kwabanini-nkonzo, amaqela e-Ops/SRE kunye nabanye abachaphazelekayo beenkampani. Umnatha wenkonzo ubonelela kuphela “ngesiqwenga” kwinqanaba leqonga kwindawo nganye kwezi.
Kutheni le nto i-mesh yenkonzo sele idumile ngoku?
Mhlawumbi uyazibuza ngoku: Kulungile, ukuba i-mesh yenkonzo ilungile, kutheni singazange siqalise ukuthumela izigidi zeeproxies kwisitaki kwiminyaka elishumi eyadlulayo?
Kukho impendulo ye-banal kulo mbuzo: kwiminyaka elishumi edlulileyo wonke umntu wakha i-monoliths, kwaye akukho mntu wayefuna i-mesh yenkonzo. Oku kuyinyaniso, kodwa ngombono wam, le mpendulo iphosa inqaku. Kwiminyaka elishumi edlulileyo, ingcamango ye-microservices njengendlela ethembisayo yokudala iinkqubo ezinkulu zaxoxwa ngokubanzi kwaye zisetyenziswe kwiinkampani ezifana ne-Twitter, Facebook, Google kunye neNetflix. Umbono jikelele - ubuncinci kumacandelo oshishino endikhe ndadibana nawo - yayikukuba i-microservices "indlela elungileyo" yokwakha iinkqubo ezinkulu, nokuba kwakunzima kakhulu.
Ewe kunjalo, nangona bekukho iinkampani ebezixhaphaza ii-microservices kwiminyaka elishumi eyadlulayo, azizange zincamathele iiproxi naphi na apho zinakho ukwenza i-mesh yenkonzo. Nangona kunjalo, ukuba ujongisisa, benza into efanayo: ezininzi zezi nkampani zigunyazise ukusetyenziswa kwethala leencwadi elikhethekileyo langaphakathi kuthungelwano (ngamanye amaxesha kuthiwa yilayibrari yabathengi abatyebileyo, fat client library).
I-Netflix yayine-Hysterix, i-Google yayine-Stubby, i-Twitter yayinelayibrari ye-Finagle. Umzekelo, uFinagle unyanzelekile kuyo yonke inkonzo entsha kuTwitter. Yaphatha zombini umxhasi kunye necala lomncedisi woxhulumaniso, kuvunyelwe izicelo eziphindaphindiweyo, ukuxhaswa kwesicelo somzila, ukulinganisa umthwalo, kunye nokulinganisa. Inikeze umaleko ongaguqukiyo wokuthembeka kunye nokubonwa kuyo yonke i-Twitter stack, kungakhathaliseki ukuba yintoni eyenziwa yinkonzo. Ewe kunjalo, yayisebenza kuphela kwiilwimi ze-JVM kwaye yayisekwe kwimodeli yenkqubo ekwakufuneka isetyenziswe kuso sonke isicelo. Nangona kunjalo, ukusebenza kwayo kwakuphantse kwafana naleyo ye-mesh yenkonzo. (Enyanisweni, inguqulelo yokuqala yeLinkerd yayiyiFinagle esongelwe kwifomu yommeleli.)
Ke, kwiminyaka elishumi eyadlulayo bekungekho kuphela ii-microservices, kodwa kunye neelayibrari ezikhethekileyo zeproto-service-mesh ezisombulule iingxaki ezifanayo ezisonjululwa ngumnatha wenkonzo namhlanje. Nangona kunjalo, i-mesh yenkonzo ngokwayo yayingekho ngoko. Kwakufuneka kubekho olunye utshintsho ngaphambi kokuba avele.
Kwaye kulapho impendulo enzulu ilala khona, efihliweyo kolunye utshintsho olwenzeka kwiminyaka eyi-10 edlulileyo: kukho ukuhla ngokukhawuleza kweendleko zokuthumela i-microservices. Iinkampani ezikhankanywe ngasentla ezazisebenzisa i-microservices kwiminyaka elishumi edlulileyo-i-Twitter, i-Netflix, i-Facebook, i-Google-yayiyinkampani enkulu kunye nezixhobo ezinkulu. Abazange babe nesidingo kuphela, kodwa kunye nokukwazi ukwakha, ukuthumela, kunye nokusebenza kwezicelo ezinkulu ezisekelwe kwiinkonzo ezincinci. Amandla kunye nomzamo owenziwe ziinjineli ze-Twitter ekuhambeni ukusuka kwi-monolithic ukuya kwindlela ye-microservices iyamangalisa. (Ngokunyaniseka, njengoko kwakunjalo ukuba iyasebenza.) Olu hlobo lolawulo lweziseko ezingundoqo lwalungenakwenzeka kwiinkampani ezincinci.
Masihambe siye kweli ngoku. Namhlanje kukho iziqalo apho umlinganiselo weenkonzo ezincinci kubaphuhlisi ngu-5: 1 (okanye nokuba ), kwaye ngaphezu koko, bahlangabezana ngokuphumelelayo nabo! Ukuba ukuqaliswa kwabantu aba-5 kukwazi ukusebenzisa ii-microservices ezingama-50 ngaphandle koxinzelelo, ngoko into ethile yanciphisa ngokucacileyo iindleko zokuphunyezwa kwazo.
Iinkonzo ezincinci ezili-1500 eMonzo; umgca ngamnye ngumgaqo wothungelwano omiselweyo ovumela i-traffic
Ukwehliswa okumangalisayo kweendleko zokusebenza kwee-microservices sisiphumo senkqubo enye: ukwanda kokuthandwa kwezikhongozeli и iiokhestra. Le yeyona mpendulo inzulu kumbuzo wento ebinegalelo ekuveleni komnatha wenkonzo. Itekhnoloji efanayo yenze zombini i-mesh yenkonzo kunye ne-microservices zinomtsalane: Kubernetes kunye ne-Docker.
Ngoba? Ewe, iDocker isombulula ingxaki enye enkulu-ingxaki yokupakisha. Ngokupakisha isicelo kunye nokuxhomekeka kwayo (okungeyo-inethiwekhi) ngexesha lokuqhuba kwi-container, i-Docker ijika isicelo sibe yiyunithi enokungunda enokuthi ibanjwe kwaye iqhutywe naphi na. Kwangaxeshanye, ilula kakhulu ukusebenza. iilwimi ezininzi isitaki: Ekubeni isitya siyunithi yeathom yokubulawa, akukhathaliseki ukuba yintoni na ngaphakathi, nokuba yi-JVM, i-Node, i-Go, i-Python, okanye i-Ruby yesicelo, ukuthunyelwa kunye neenjongo zokusebenza. Uyiqhube nje kwaye yiloo nto.
I-Kubernetes ithatha yonke into iye kwinqanaba elilandelayo. Ngoku kukho “izinto eziphunyezwayo” kunye noomatshini abaninzi abaza kuziqhuba, kukho imfuneko yesixhobo esinokuzithelekisa nezinye. Ngomqondo obanzi, unika i-Kubernetes izitya ezininzi kunye noomatshini abaninzi, kwaye ihambelana nabo kunye nomnye (ewe, le yinkqubo eguquguqukayo neguquguqukayo rhoqo: izikhongozeli ezintsha zijikeleza inkqubo, oomatshini baqala kwaye bayeke, njl. U-Kubernetes uthatha konke oku kwi-akhawunti ).
Emva kokuba i-Kubernetes isetyenzisiwe, ixesha elithathayo ukuhambisa nokusebenza kwenkonzo enye ayifani kakhulu neendleko zokusebenzisa kunye nokusebenza kweenkonzo ezilishumi (enyanisweni, iphantse ifane neenkonzo ze-100). Yongeza kule migqomo njengendlela yokupakisha ekhuthaza ukuphunyezwa kweelwimi ezininzi, kwaye unetoni yezicelo ezitsha eziphunyeziweyo njengeenkonzo ezincinci ezibhalwe ngeelwimi ezininzi, uhlobo nje lwemo engqongileyo apho i-mesh yenkonzo ifaneleka kakuhle.
Ke, siza kwimpendulo yombuzo wokuba kutheni umbono we-mesh yenkonzo uthandwa ngoku: ukufana okubonelelwa nguKubernetes kwiinkonzo kusebenza ngokuthe ngqo kwimisebenzi ejongene ne-mesh yenkonzo. Upakisha iiproxies kwizikhongozeli, unike uKubernetes umsebenzi wokuzincamathela naphi na apho kunokwenzeka, kwaye voila! Ngenxa yoko, ufumana i-mesh yenkonzo, ngelixa i-Kubernetes ilawula bonke oomatshini bokuthunyelwa kwayo. (Ubuncinane ngokwembono yentaka. Kakade ke, maninzi amacangca kule nkqubo.)
Ukushwankathela: isizathu sokuba i-mesh yenkonzo idume ngoku kwaye hayi kwiminyaka elishumi eyadlulayo kukuba uKubernetes kunye noDocker abanyukanga kakhulu. isidingo kuyo, ukwenza lula ukuphunyezwa kwezicelo njengeseti zeenkonzo ezincinci zeelwimi ezininzi, kodwa zincitshiswe kakhulu. iindleko ngokusebenza kwayo ngokubonelela ngeendlela zokumisela nokugcina iipaki ezisecaleni.
Kutheni kukho intetho eninzi malunga nomnatha wenkonzo?
Ukuthintela: Kweli candelo, ndibhenela kuzo zonke iintlobo zeengqikelelo, iingqikelelo, izinto ezenziweyo kunye nolwazi lwangaphakathi.
Ukukhangela "i-mesh yenkonzo" kuya kuvelisa inqwaba yezinto ezisetyenzisiweyo, eziphantsi kweekhalori, iiprojekthi ezingaqhelekanga, kunye ne-kaleidoscope yokugqwesa efanele igumbi le-echo. Nayiphi na itekhnoloji entsha enefashoni inale nto, kodwa kwimeko ye-mesh yenkonzo, ingxaki ibukhali ngakumbi. Ngoba?
Ewe, lityala lam ngokuyinxenye. Ndenze konke okusemandleni am ukukhuthaza i-Linkerd kunye ne-mesh yenkonzo ngalo lonke ithuba, ngokusebenzisa izithuba zeblogi ezingenakubalwa kunye namanqaku afana neli. Kodwa andinamandla kangako. Ukuphendula lo mbuzo ngokwenene, kufuneka sithethe kancinci malunga nemeko jikelele. Kwaye akunakwenzeka ukuthetha ngayo ngaphandle kokukhankanya iprojekthi enye: yinkonzo yomthombo ovulekileyo yemesh ephuhliswe ngokudibeneyo nguGoogle, IBM kunye neLyft.
(Ezo nkampani zintathu zineendima ezihluke kakhulu: Ukubandakanyeka kweLyft kubonakala kukhawulelwe kwigama lodwa; babhala uMthunywa kodwa bangasebenzisi okanye babandakanyeka ekuphuhliseni i-Istio. I-IBM ibandakanyeka ekuphuhlisweni kwe-Istio kwaye iyisebenzisa. I-Google inzima kakhulu. ibandakanyeka kuphuhliso lwe-Istio, kodwa njengoko ndikwazi ukuxelela, ayisebenzisi ngokwenene.)
Iprojekthi ye-Istio iphawuleka kwizinto ezimbini. Okokuqala, ngumzamo omkhulu wokuthengisa uGoogle, ngakumbi, awubekayo ekukhuthazeni. Ndiqikelela ukuba abantu abaninzi ngoku abayaziyo imbono yemesh yenkonzo baqale bafunda ngayo ngenxa ye-Istio. Inqaku lesibini yindlela eyamkelwe kakubi ngayo i-Istio. Kulo mba, mna, ngokucacileyo, ndingumntu onomdla, kodwa ndizama ukuhlala ndinenjongo kangangoko ndinako, andikwazi kuzibamba. , ayingcaci kakhulu (nangona ingeyodwa: systemd iza engqondweni, ...) yeprojekthi yoMthombo oVulekileyo.
(Kwinkqubo, i-Istio ibonakala ineengxaki kungekhona nje ngobunzima kunye ne-UX, kodwa kunye nokusebenza. Ngokomzekelo, ngexesha eqhutywe ngumntu wesithathu, iingcali zifumene iimeko apho i-Istio's latency latency yayiphezulu ngamaxesha angama-100 ngaphezu kwe-Linkerd, kunye neemeko zokungabikho kwezibonelelo, xa i-Linkerd yaqhubeka isebenza ngempumelelo, kwaye i-Istio yayeka ngokupheleleyo ukusebenza.)
Ukushiya iithiyori zam malunga nokuba kutheni le nto yenzekile, ndiyakholelwa ukuba i-hype ejikeleze umnatha wenkonzo kungenxa yokubandakanyeka kukaGoogle. Oko kukuthi, indibaniselwano yezi zinto zintathu zilandelayo:
- ukukhuthazwa kwe-Istio nguGoogle;
- isimo sengqondo esifanelekileyo sokungavumi, ukugxeka malunga neprojekthi;
- ukuthandwa okunyukayo kweKubernetes, inkumbulo yayo isentsha.
Ngokudibeneyo, ezi zinto zidibana zibe luhlobo olunxilisayo, indawo enobungozi apho amandla okugweba anengqiqo abuthathaka, kwaye kushiyeke kuphela iindidi ezimangalisayo. .
Ngokwembono ka-Linkerd, oku…Ndingayichaza njengentsikelelo exutyiweyo. Ndiyathetha, kuhle ukuba i-mesh yenkonzo ingene kwi-mainstream - okwakungenjalo ngo-2016 xa i-Linkerd ibonakala okokuqala kwaye kwakunzima ngokwenene ukufumana ingqalelo yabantu kwiprojekthi. Ngoku akukho ngxaki enjalo! Kodwa iindaba ezimbi zezokuba imeko yemesh yenkonzo iyabhideka kakhulu namhlanje kangangokuba phantse akunakwenzeka ukuba ufumanise ukuba zeziphi iiprojekthi ngokwenene ezikudidi lomnatha wenkonzo (singasathethi ke ukuba yeyiphi eyona ilungileyo kwimeko yosetyenziso oluthile). Ngokuqinisekileyo oku kungena endleleni yomntu wonke (kwaye ngokuqinisekileyo kwezinye iimeko i-Istio okanye enye iprojekthi ingcono kune-Linkerd, ekubeni le yokugqibela ayisona isisombululo esisodwa).
Kwicala lika-Linkerd, iqhinga lethu ibikukungayihoyi loo ngxolo, siqhubeke sigxile ekusombululeni iingxaki zokwenyani eluntwini, kwaye ngokusisiseko silindele ukudamba kwe-hype. Ekugqibeleni i-hype iya kuncipha kwaye sinokuqhubeka nokusebenza ngoxolo.
Kude kube ngoko, sonke kuya kufuneka sibe nomonde.
Ngaba i-mesh yenkonzo iya kuba luncedo kum, injineli yesoftware ethobekileyo?
Le khweshine ilandelayo iya kunceda ukuphendula lo mbuzo:
Ngaba ujongana kuphela nokuphunyezwa kwengqiqo yoshishino? Kule meko, i-mesh yenkonzo ayiyi kuba luncedo kuwe. Oko kukuthi, ngokuqinisekileyo, unokuba nomdla kuyo, kodwa ngokufanelekileyo, i-mesh yenkonzo ayifanele ichaphazele ngokuthe ngqo nantoni na kwindawo yakho. Qhubeka usebenza kwinto oyibhatalwayo.
Ngaba ugcina iqonga kwinkampani esebenzisa iKubernetes? Ewe, kule meko ufuna i-mesh yenkonzo (ewe, ukuba awusebenzisi ii-K8s nje ukuqhuba i-monolith okanye i-batch processing - kodwa ke ndingathanda ukubuza ukuba kutheni ufuna ii-K8s). Ngokunokwenzeka, uya kuzifumana ukwimeko eneenkonzo ezincinci ezininzi ezibhalwe ngabantu abohlukeneyo. Zonke zisebenzisana kunye kwaye ziboshwe kwi-tangle yokuxhomekeka kwexesha lokusebenza, kwaye kufuneka ufumane indlela yokujongana nayo yonke le nto. Ukusetyenziswa kwe-Kubernetes kukuvumela ukuba ukhethe i-mesh yenkonzo "yakho". Ukwenza oku, ziqhelanise nezakhono zabo kunye neempawu kwaye uphendule umbuzo wokuba ngaba nayiphi na iiprojekthi ezikhoyo zikulungele konke (ndincoma ukuqala uphando lwakho nge-Linkerd).
Ngaba uqhuba iqonga lenkampani ENGASEBENZI i-Kubernetes kodwa isebenzisa ii-microservices? Kule meko, i-mesh yenkonzo iya kuba luncedo kuwe, kodwa ukusetyenziswa kwayo akuyi kuba yinto encinci. Ewe unako xelisa inkonzo ye-mesh ngokubamba iqela le-proxies, kodwa i-advanteji ebalulekileyo ye-Kubernetes ngokuchanekileyo imodeli yokuthunyelwa: ukugcinwa ngesandla kwezi proxies kuya kufuna ixesha elininzi, umzamo kunye neendleko.
Ngaba uphethe iqonga kwinkampani esebenza nge-monoliths? Kule meko, awufuni nkonzo inemesh. Ukuba usebenza kunye ne-monoliths (okanye iiseti ze-monoliths) ezichazwe kakuhle kwaye azifane zitshintshe iipateni zokusebenzisana, ke i-mesh yenkonzo inokuncinci enokukunika yona. Ke ungayihoya kwaye unethemba lokuba iya kunyamalala njengephupha elibi ...
isiphelo
Mhlawumbi, i-mesh yenkonzo akufuneki ibizwe ngokuba "yeyona teknoloji iphakamileyo emhlabeni" - eli wonga lithandabuzekayo mhlawumbi lele-bitcoin okanye i-AI. Mhlawumbi ukwizihlanu eziphezulu. Kodwa ukuba uqhekeza iileyile zengxolo kunye ne-din, kuyacaca ukuba i-mesh yenkonzo izisa inzuzo yokwenene kwabo benza izicelo kwi-Kubernetes.
Ndingathanda ukuba uzame i-Linkerd-ukuyifaka kwiqela le-Kubernetes (okanye nakwiMinikube kwilaptop) kwaye nawe uyazibonela ukuba ndithetha ngantoni.
FAQ
- Ukuba andiyihoyi i-mesh yenkonzo, ngaba iya kunyamalala?
-Ndimele ndikuphoxe: umnatha wenkonzo unathi ixesha elide.
— Kodwa AKUFUNI ukusebenzisa umnatha wenkonzo!
- Ewe, akuyomfuneko! Funda nje iphepha lemibuzo yam apha ngasentla ukuze ubone ukuba kufuneka ubuncinci uziqhelanise neziseko zayo.
— Ngaba ayisiyiyo ESB / i-middleware endala enesosi entsha?
-Umnatha wenkonzo ujongana nengqiqo yokusebenza, hayi intsingiselo. Ibhasi yenkonzo yeshishini (). Ukugcina oku kwahlula kunceda umnatha wenkonzo uphephe ikamva elifanayo.
-Yahluke njani i-mesh yenkonzo kumasango e-API?
Kukho amanqaku asisigidi ngalo mbandela. google nje.
Ngaba uMthunywa ngumnatha wenkonzo?
- Hayi, uMthunywa ayingomnatha wenkonzo, ngumncedisi weproxy. Ingasetyenziselwa ukulungelelanisa i-mesh yenkonzo (kunye nokunye okuninzi - yinjongo eqhelekileyo ye-proxy). Kodwa ngokwayo, ayisiyiyo i-mesh yenkonzo.
-Inethiwekhi yeNkonzo yeMesh - ingaba yinkonzo yomnatha?
- Hayi. Ngaphandle kwegama, oku akusiyo i-mesh yenkonzo (uthanda njani imimangaliso yokuthengisa?).
- Ngaba i-mesh yenkonzo iya kunceda kwinkqubo yam esebenzayo ye-asynchronous esekwe kumgca womyalezo?
- Hayi, i-mesh yenkonzo ayiyi kukunceda.
-Ngowuphi umnatha wenkonzo ekufuneka ndiwusebenzise?
- , akukho ngqondo.
- Inqaku liyanya! / Umbhali - kwisepha!
— Nceda wabelane ngekhonkco kuyo kunye nabo bonke abahlobo bakho ukuze baqiniseke koku!
Imibulelo
Njengoko unokuthekelela kwisihloko, eli nqaku liphefumlelwe nguJay Kreps 'incwadi emnandi "". Ndadibana noJay kwiminyaka elishumi eyadlulayo ngelixa ndisenza udliwano-ndlebe kwi-Linked In kwaye uye waba yinkuthazo kum ukusukela ngoko.
Ngelixa ndithanda ukuzibiza ngokuba ngu "Linkerd developer", inyaniso kukuba ndingaphezulu komlondolozi wefayile ye README.md kwiprojekthi. Ukusebenza kwiLinkerd namhlanje , , abantu, kwaye le projekthi ngekhe yenzeke ngaphandle koluntu olumangalisayo lwabaxhasi kunye nabasebenzisi.
Kwaye ekugqibeleni, umbulelo okhethekileyo kumdali we-Linkerd, (primus inter pares), owathi, kunye nam kwiminyaka emininzi eyadlulayo, sangena nzulu kulo lonke eli ngxwabangxwaba ngomnatha wenkonzo.
PS evela kumguquleli
Funda nakwibhlog yethu:
- «";
- «";
- «";
- «";
- «».
umthombo: www.habr.com