Istio made easy: Sidecar

Easily and naturally configure Istio to reduce the load and impact on both the control and the data plane using the Sidecar resource.

mesh , . , Config — , DestinationRule VirtualService, Endpoints , , , Deployment, Pod unready, - , — .

, mesh , , mesh , :

• Control plane (pilot istiod) , , , ;
• mesh, ;
• Pilot , .

?

, . , , Auto Trader. 400 , N+1 5. , 395 .

, GET :15000/config_dump istio-proxy sidecar, 5. (1000) 5 , . control plane, , enpoints .

istio-proxy, . , , 2 3 , 25 , 400 250. 1000 , 240 .

Sidecar

Istio Sidecar. , control plane. , : «, mesh 400 , ».

, , service-a service-b service-c, 397 mesh, Sidecar, :

apiVersion: networking.istio.io/v1beta1
kind: Sidecar
metadata:
  name: default
  namespace: service-a
spec:
  egress:
  - hosts:
    - "./*"              # current namespace
    - "istio-system/*"   # istio-system services
    - "service-b/*"      # dependency 1
    - "service-c/*"      # dependency 2

, .

1: , sidecar service-a

2: , , , istio-proxy — .

Pilot

, , Pilot :

• pilot_xds_push_time_bucket — , Pilot lds, rds, cds eds.
• pilot_proxy_convergence_time_bucket —
• pilot_proxy_queue_time_bucket — , .

400 , 1 :

Istio outboundTrafficPolicy.mode: REGISTRY_ONLY. - , : Sidecar — . :

• , , Sidecar , 502.
• response_code 502, destination_service_name BlackHoleCluster. , . , - :

( 1500 , 1000 istio-proxy) Sidecars :

• control plane: 1 , ;
• data plane: 35 , 7 25 , .

Sidecar , Istio . , , .

: , , «Kubernetes ». Kubernetes .