Mastering Service Mesh: Enhance, secure, and observe cloud-native applications with Istio, Linkerd, and Consul

Understand how to use service mesh architecture to efficiently manage and safeguard microservices-based applications with the help of examples

Key Features

• Manage your cloud-native applications easily using service mesh architecture
• Learn about Istio, Linkerd, and Consul - the three primary open source service mesh providers
• Explore tips, techniques, and best practices for building secure, high-performance microservices

Book Description

Although microservices-based applications support DevOps and continuous delivery, they can also add to the complexity of testing and observability. The implementation of a service mesh architecture, however, allows you to secure, manage, and scale your microservices more efficiently. With the help of practical examples, this book demonstrates how to install, configure, and deploy an efficient service mesh for microservices in a Kubernetes environment.

You'll get started with a hands-on introduction to the concepts of cloud-native application management and service mesh architecture, before learning how to build your own Kubernetes environment. While exploring later chapters, you'll get to grips with the three major service mesh providers: Istio, Linkerd, and Consul. You'll be able to identify their specific functionalities, from traffic management, security, and certificate authority through to sidecar injections and observability.

By the end of this book, you will have developed the skills you need to effectively manage modern microservices-based applications.

What you will learn

• Compare the functionalities of Istio, Linkerd, and Consul
• Become well-versed with service mesh control and data plane concepts
• Understand service mesh architecture with the help of hands-on examples
• Work through hands-on exercises in traffic management, security, policy, and observability
• Set up secure communication for microservices using a service mesh
• Explore service mesh features such as traffic management, service discovery, and resiliency

Who this book is for

This book is for solution architects and network administrators, as well as DevOps and site reliability engineers who are new to the cloud-native framework. You will also find this book useful if you're looking to build a career in DevOps, particularly in operations. Working knowledge of Kubernetes and building microservices that are cloud-native is necessary to get the most out of this book.

Table of Contents

1. Monolithic Versus Microservices
2. Cloud-Native Applications
3. Service Mesh Architecture
4. Service Mesh Providers
5. Service Mesh Interface and SPIFFE
6. Building Your Own Kubernetes Environment
7. Understanding the Istio Service Mesh
8. Installing a Demo Application
9. Installing Istio
10. Exploring Istio Traffic Management Capabilities
11. Exploring Istio Security Features
12. Enabling Istio Policy Controls
13. Exploring Istio Telemetry Features
14. Understanding the Linkerd Service Mesh
15. Installing Linkerd
16. Exploring the Reliability Features of Linkerd
17. Exploring the Security Features of Linkerd
18. Exploring the Observability Features of Linkerd
19. Understanding the Consul Service Mesh
20. Installing Consul
21. Exploring the Service Discovery Features of Consul
22. Exploring Traffic Management in Consul

Anjali Khatri is an enterprise cloud architect at DivvyCloud, advancing the cloud-native growth for the company by helping customers maintain security and compliance for resources running on AWS, Google, Azure, and other cloud providers. She is a technical leader in the adoption, scaling, and maturity of DivvyCloud's capabilities. In collaboration with product and engineering, she works with customer success around feature request architecture, case studies, account planning, and continuous solution delivery.

Prior to Divvycloud, Anjali worked at IBM and Merlin. She has 9+ years of professional experience in program management for software development, open source analytics sales, and application performance consulting.

Vikram Khatri is the chief architect of Cloud Pak for Data System at IBM. Vikram has 20 years of experience leading and mentoring high-performing, cross-functional teams to deliver high-impact, best-in-class technology solutions. Vikram is a visionary thought leader when it comes to architecting large-scale transformational solutions from monolithic to cloud-native applications that include data and AI. He is an industry-leading technical expert with a track record of leveraging deep technical expertise to develop solutions, resulting in revenues exceeding $1 billion over 14 years, and is also a technology subject matter expert in cloud-native technologies who frequently speaks at industry conferences and trade shows.