Live data from Hacker News

Running Istio In Production

engineering.hellofresh.com

41–47 of 47 posts

Re: Running Istio In Production

#41
post #33

Earlier quoted context omitted.

If you turn every function into a microservice, then you can have hundreds of microservices. I still don't see the benefits though.

Given where this is going, couldn't we just skip a couple iterations of the hype cycle, and simply port BEAM runtime to work directly on machine clusters instead of machine code? This way we'll jump straight to one actor = one microservice = one VM.

Isn't that serverless, ie. AWS Lambda?

Re: Running Istio In Production

#42

I recently started investigating Istio, and though it will probably be an unpopular opinion here on HN, I honestly don't understand why it's not a core part of Kubernetes. It's amazingly simple to configure, the docs are pretty OK, and the benefits seems huge. Mutual TLS within minutes? BAM, done. Don't worry about cert rotation, Citatel does that for you. Block all egress, and whitelist what you need? Like, that's a…

its only recently become 'stable' but google offers it now in GKE baked into their clusters, if you want.

Re: Running Istio In Production

#43
post #21

Earlier quoted context omitted.

This is actually the advice I’m giving every new systems engineer that joins our organization. Learning how Kubernetes works is much easier if you first get a firm grasp of the basics and then start bolting stuff on like istio knative and all the other cool stickers “modern architects” wet dream about.

Here's a worrying trend: software architects seem to talk in brand names instead of concept these days.

Yes, absolutely. It is like an infection or something. Once you catch it you only can communicate in logos of hip tech brands.

Edit: punctuation

Re: Running Istio In Production

#44
post #41

Earlier quoted context omitted.

Given where this is going, couldn't we just skip a couple iterations of the hype cycle, and simply port BEAM runtime to work directly on machine clusters instead of machine code? This way we'll jump straight to one actor = one microservice = one VM.

Isn't that serverless, ie. AWS Lambda?

You would also need an orchestrating layer on top of it.

Re: Running Istio In Production

#45

I recently started investigating Istio, and though it will probably be an unpopular opinion here on HN, I honestly don't understand why it's not a core part of Kubernetes. It's amazingly simple to configure, the docs are pretty OK, and the benefits seems huge. Mutual TLS within minutes? BAM, done. Don't worry about cert rotation, Citatel does that for you. Block all egress, and whitelist what you need? Like, that's a…

Have you given Linkerd a try for comparison? Mutual TLS in 0 seconds (it's on by default) and a significantly lighter footprint. Canary traffic via SMI. Etc

Re: Running Istio In Production

#46
post #6

This is one of those posts that brings out comments about things being over architected for the business. My mind definitely went there. But, at some point, companies that want to keep talented tech people need to let them go build what they want to build. Maybe those things are over-architected for what the company needs right now, but it's tough to say if that's a bigger risk than losing talented tech people.

I think this points at a fundamental question that creeps up in lots of different ways around our discussions of Silicon Valley. A founder needs to ask themselves: Is your business really a software company. I'd suggest that actually, the technical complexity of HelloFresh's core business is about as complex as the mail order business Pryce Pryce-Jones set up in 1861 to sell mail order Welsh flannel. Which begs the question why you're paying rockstar software engineers at all.

Obviously part of the answer is "Because I need a tech unicorn valuation". But maybe your marketing to investors shouldn't be what you're actually basing your hiring decisions on.

Re: Running Istio In Production

#47

Earlier quoted context omitted.

No, it’s a blog post about running a cutting edge technology in production. Whether or not fundamental decisions were made correctly is vey much in play.

The blog post is about "Running Istio in production". Not "Why we chose to run istio in production" so I don't think "they shouldn't be running istio in production" it is in scope. _However_ if you want to have a constructive discussion about if isio is even the right choice here then have at it if you think there is enough info to go into that. (Personally I don't think there is enough info in the blog post to have…

Of course it’s in scope, it’s an unproven technology that’s still quite immature. It’s the same as the “Hadoop tips” posts back in the day where people would rightfully point out that Hadoop was a bad choice for the sample problem.
Post reply on HN