Home

Course Plan

We're going to have a series of scenarios, angled to where a specific feature of Istio can help. Here's the list, I'll mark off progress as I go along...

Traffic Management

Destination Rule

• Canary on the web front end.
• Canary on a backend microservice
• Header for a specific user (front end only)

Envoy Filter

• might do this as part of envoy session. Use AOP as way in, so could do some trivial tracing as demo

Fault Injection

• break a lower level microservice and check that the front end isn't affect (need a "static" html for this - staff management?)

Circuit Breaking and Timeouts

• show a heavily loaded component (eg tracker) failing (possibly with injected fault) and show (somehow) that this can cascade upwards, causing failures elsewhere. Introduce a circuit breaker

Traffic Mirroring

• Not sure how we could pull this off? Staging/Production minikube?

Egress:

• show a call to a remote system somewhere. (need an idea on what?) Want to switch off external calls generally.

Policies:

Rate Limiting

• Have the simulator run too fast for the tracker (maybe frig a delay into here). Show we can slow traffic down - what happens?

Control Headers and Routing:

• Mmmm - interesting! Investigate, urgently, could be a solution for header propagation.

Black/Whitelisting

• how this is different to authorization in security.

Telemetry

Metrics

Logs

Distributed Tracing

Visualizing the Mesh

Security:

Authorisation

• show we can have ONLY allowed microservices calling others. (think of example)

Mutual TLS

• show how to enable SSL within the cluster. How to demo this? Might need tracing, so this section might come last!