Live data from Hacker News

Google and IBM announce Istio – easily secure and manage microservices

developer.ibm.com

71–80 of 123 posts

Re: Google and IBM announce Istio – easily secure and manage microservices

#71
Good Istio links; IBM post: https://developer.ibm.com/dwblog/2017/istio/?cm_mmc=dw-_-soc...

Project Calico Network Policy Engine: https://www.projectcalico.org/welcoming-istio-to-the-kuberne...

WeaveWorks: https://www.weave.works/docs/tutorials/istio/istio/

RedHat: https://blog.openshift.com/red-hat-istio-launch/

Re: Google and IBM announce Istio – easily secure and manage microservices

#72

I'm curious what the benefit of side-loading proxies and load balancing versus centralization provides?

Check out [1] for an overview of the trade-offs.

Disclaimer: I work on Istio

1. https://groups.google.com/forum/m/#!msg/kubernetes-sig-netwo...

Re: Google and IBM announce Istio – easily secure and manage microservices

#73
post #57

Why aren't more people using MQ for inter-service messaging (something like RabbitMQ) instead of HTTP?

MQ shines in async calls/event delivery. gRPC / http2 / websockets / thrift is better for synchronous calls ?

With the ISO/oasis standard AMQP you can actually do synchronous calls without an intermediary. You also have 'direct' message routing capability with components like apache qpid dispatch router.

I can't see a reason why one would use gRPC/thrift and then having to build flow control, delivery guarantees and other messaging features yourself.

Re: Google and IBM announce Istio – easily secure and manage microservices

#74
post #57

Why aren't more people using MQ for inter-service messaging (something like RabbitMQ) instead of HTTP?

Just for your benefit, we've moved from AMQP related products to nats.io. We've been satisfied with RabbitMQ and are extremely happy with nats.

Re: Google and IBM announce Istio – easily secure and manage microservices

#75

This may be the most important project in distributed computing in a long time. It solves some fundamental problems that layer 3 networking has been unable to tackle. Its initial integration with Kubernetes is great but long term it could be the basis of all application level communication whether it is deployed in a container orchestration system, VMs, bare metal or as an enabler for Lambda (function) frameworks.

What fundamental problems does it solve that layer 3 networking has been unable to tackle? Not pushing back - just ignorant and want to learn!

Re: Google and IBM announce Istio – easily secure and manage microservices

#77
post #45

Earlier quoted context omitted.

The REST architecture always included the possibility of gateways and proxies in the end-to-end communication path to delegate shared responsibilities out of the user agent or origin server. This balances the need for centralized admin of some things and decentralized deployment of other things. Most microservices systems, even if they're not using HTTP in favor of something like gRPC, Kafka, or Rabbit, are taking a…

Well said. Besides Netflix, I'd put Twitter as an early pioneer, with their work on Finagle. Both of these companies, for better or worse, took a library-centric approach (Eureka/Hystrix/etc or the Finagle lib). This limited their applicability to the JVM. The sidecar model that AirBnb pioneered with SmartStack, later adopted by Yelp and others was the cheapest way to get non-Java langs to have similar resilience/obs…

Maybe a local proxy, deployed with the service, is a good answer to my objections, rather than having a centralised approach. This can help in polyglot environments, but remove any limitations a centralised solution would impose. Something like Istio would be an agent a service connects to locally, used for service discovery, complex routing or rate limiting. The configuration is service specific. Load balancing is done by "dumb" proxies, like in the old days.

Re: Google and IBM announce Istio – easily secure and manage microservices

#78
post #57

Why aren't more people using MQ for inter-service messaging (something like RabbitMQ) instead of HTTP?

I architected and built a system based on MQ a number of years ago. The very same design / implementation went from supporting 0 messages to a billion messages a day quietly and silently with full message tracing, retries, multi language support, etc.

Maybe I should have blogged about it :)

Anyway, although all the design principles are the same: 1) Transparent and seamless to application code, 2) Control communication end points, the MQ constructs and languages are not as accessible and readily available and visible as HTTP and RESTful.

A MQ can be temperamental and hard to operate. On the other hand, even middle-schoolers can master nginx, haproxy, write their own, etc with a bit of guidance :)

Popularity and rate of adoption depends on availability to the masses and the ease with which the masses can learn to use. If it takes to long (say, 15 minutes) to bring a framework up, hordes of engineers will find a massive number of reasons to roll their own ...

Re: Google and IBM announce Istio – easily secure and manage microservices

#79
> Lyft developed the Envoy proxy to aid their microservices journey, which brought them from a monolithic app to a production system spanning 10,000+ VMs handling 100+ microservices.

Are those numbers right? Wouldn't it be the other way around realistically?

Re: Google and IBM announce Istio – easily secure and manage microservices

#80
post #79

> Lyft developed the Envoy proxy to aid their microservices journey, which brought them from a monolithic app to a production system spanning 10,000+ VMs handling 100+ microservices. Are those numbers right? Wouldn't it be the other way around realistically?

The microservices would likely be operated in clusters. So say, 100 VMs running a single service.
Post reply on HN