Google, IBM and Lyft launch Istio, an open-source platform for managing and securing microservices


Microservices, that is, breaking larger applications into small parts that communicate over APIs, is increasingly becoming the architectural style of choice for many developers (especially when coupled with containers). Managing this fleet of services introduces its own set of challenges, though. To help developers and DevOps professionals manage and secure their microservice-based applications, Google, IBM and Lyft today announced Istio, a new open platform that allows you to create a network of deployed services, and which includes tools for load balancing, service-to-service authentication and monitoring, among others.
It can do all of this without requiring any changes to the actual applications. That’s because Istio sits at the network level and uses a proxy to intercept all network communication between your microservices. At its core, Istio uses the Envoy proxy (which was developed by Lyft) and its built-in service discovery and load balancing tools, among other things.
“As monolithic applications are decomposed into microservices, software teams have to worry about the challenges inherent in integrating services in distributed systems: they must account for service discovery, load balancing, fault tolerance, end-to-end monitoring, dynamic routing for feature experimentation, and perhaps most important of all, compliance and security,” the Istio team explains. “Inconsistent attempts at solving these challenges, cobbled together from libraries, scripts and Stack Overflow snippets leads to solutions that vary wildly across languages and runtimes, have poor observability characteristics and can often end up compromising security.”
A company could standardize on a single library for managing the communication between services, but the team argues that that’s unlikely to happen, would leave out existing services and reduce flexibility.
Istio essentially provides developers with a single service mesh that provides the monitoring services to then implement the necessary load balancing, flow-control and security policies they need to keep their applications running even if the network isn’t reliable. Istio also allows developers to authenticate and secure the communications between different applications using a TLS connection (which means the developer doesn’t have to manage certificates, for example).
Given the fact that Google is involved, it probably doesn’t come as a surprise that Istio currently only supports the Kubernetes container orchestration service, though the plan is to support other environments in the future. The overall idea is to allow Istio to span various environments, no matter whether that’s a public cloud Kubernetes or Mesos, for example. Google also plans to bring Istio support to Cloud Endpoints and its Apigee API management platform (which it acquired for $625 million last year).
It’s worth noting that this isn’t all that different from linkerd, a similar project that is now part of the Cloud Native Computing Foundation, the home of the Kubernetes project. Linkerd already offers support for Docker and Mesosphere’s DC/OS, among others, though.

Comments

Post a Comment

Popular posts from this blog

Image
Apple stores may get iPhone-connecting transmitters in Share Apple is likely to equip its retail stores with transmitters that connect to visitors' iPhones and provide messages based on the products of their interest.     The iBeacon transmitter system has been designed to enhance the shopping experience of people who visit the store. According to Cnet, the transmitters would connect to a user's iPhone and send messages as the user takes a look around products in the store, offering more product information or invitation to workshops. The report said that stores such as Nordstrom experimented with such a system before bringing in the wrath of customers who discovered they were being tracked as they wandered through the store.
Read more

12 outdates features of web

Image
1. Irrelevant Elements By far, the biggest issue I come across with new site launches is this: They use too many elements that bring no real value to the audience. In fact, these often just downgrade user experience considerably. There are too many crowded designs and too much text on one page. There are too many icons and photos. Does your site really need a search bar? Do you really need to show the tag cloud in your blog sidebar? Think hard. What are the 20% of elements that bring 80% of the results you're after? Start there. Always have a sound reason for adding new features, bells and whistles. Never add more stuff just because it seems "cool and hip." - Juha Liikala , Stripped Bare Media 2. Flash Intros Flash intros are annoying for the customer, take too long to load, don't work on Apple mobile devices and are not recognized by Google. It is best to avoid them entirely. - Josh Weiss , Bluegala 3. Photo Carousel A lot of sites stil
Read more
Image
How noise-cancelling technology works for headphones    Bose pioneered the concept of noise-cancelling headphones way back in 1989 after more than 10 years of research. ET explains how this fascinating technology works. Noise cancellation in the car You may have experienced that some cars are quieter than others - this is because of the special attention paid to insulating materials (special laminated glass for example). However, there's only so much that passive noise isolation can accomplish inside the complicated acoustics of the car. That's why luxury carmakers have been implementing active noise cancellation for a quieter cabin. The same active noise cancelling technologies used in headphones can be easily implemented in a car. See image for details. How it works Simply put, active noise cancellation works by 'listening' to unwanted ambient sounds, and then producing a s
Read more