You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+39Lines changed: 39 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7715,6 +7715,45 @@ It is a core component of the Anthos stack which provides platform, service and
7715
7715
It follows common modern software development practices which makes cluster configuration, management and policy changes auditable, revertable, and versionable easily enforcing IT governance and unifying resource management in an organisation.
7716
7716
</b></details>
7717
7717
7718
+
<details>
7719
+
<summary>What is Anthos Service Mesh?</summary><br><b>
7720
+
7721
+
* It is a suite of tools that assist in monitoring and managing deployed services on Anthos of all shapes and sizes whether running in cloud, hybrid or multi-cloud environments. It leverages the APIs and core components from Istio, a highly comfigurable and open-source service mesh platform.
7722
+
</b></details>
7723
+
7724
+
<details>
7725
+
<summary>Describe the two main components of Anthos Service Mesh</summary><br><b>
7726
+
7727
+
1. Data plane - it consists of a set of distributed proxies that mediate all inbound and outbound network traffic between individual services which are configured using a centralised control plane and an open API
7728
+
2. Control plane - is a fully managed offering outside of Anthos GKE clusters to simplify management overhead and ensure highest possible availability.
7729
+
</b></details>
7730
+
7731
+
<details>
7732
+
<summary>What are the components of the managed control plane of Anthos Service Mesh?</summary><br><b>
7733
+
7734
+
1. Traffic Director - it is GCP's fully managed service mesh traffic control plane, responsible for translating Istio API objects into configuration information for the distributed proxies, as well as directing service mesh ingress and egress traffic
7735
+
2. Managed CA - is a centralised certificate authority responsible for providing SSL certificates to each of the distributed proxies, authentication information and distributing secrets
7736
+
3. Operations tooling - formerly stackdriver, provides a managed ingestion point for observability and telemetry, specifically monitoring, tracing and logging data generated by each of the proxies. This powers the observability dashboard for operators to visually inspect their services and service dependencies assisting in the implementation of SRE best practices for monitoring SLIs and establishing SLOs.
7737
+
</b></details>
7738
+
7739
+
<details>
7740
+
<summary>How does Anthos Service Mesh help?</summary><br><b>
7741
+
Tool and technology integration that makes up Anthos service mesh delivers signficant operational benefits to Anthos environments, with minimal additional overhead such as follows:
7742
+
7743
+
* Uniform observability - the data plane reports service to service communication back to the control plane generating a service dependency graph. Traffic inspection by the proxy inserts headers to facilitate distributed tracing, capturing and reporting service logs together with service-level metrics (i.e latency, errors, availability).
7744
+
* Operational agility - fine-grained controls for managing the flow of inter-mesh (north-south) and intra-mesh (east-west) traffic are provided.
7745
+
* Policy-driven security - policies can be enforced consistently across diverse protocols and runtimes as service communications are secured by default.
7746
+
</b></details>
7747
+
7748
+
<details>
7749
+
<summary>List possible use cases of traffic controls that can be implemented within Anthos Service Mesh</summary><br><b>
7750
+
7751
+
* Traffic splitting across differing service versions for canary or A/B testing
7752
+
* Circuit breaking to prevent cascading failures
7753
+
* Fault injection to help build resilient and fault-tolerant deployments
7754
+
* HTTP header-based traffic steering between individual services or versions
0 commit comments