TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Containers, microservices, and service meshes

273 点作者 aberoham大约 6 年前

8 条评论

stevenacreman大约 6 年前
I keep a Google sheet updated with feature differences between LinkerD, LinkerD2, Consul Connect and Istio.<p><a href="https:&#x2F;&#x2F;docs.google.com&#x2F;spreadsheets&#x2F;d&#x2F;1OBaKrwR030G39i0n_47i-hzcFJ966bJjGArXVKX39_k&#x2F;edit#gid=0" rel="nofollow">https:&#x2F;&#x2F;docs.google.com&#x2F;spreadsheets&#x2F;d&#x2F;1OBaKrwR030G39i0n_47i...</a><p>From my own experience I&#x27;ve had some great success with LinkerD in the past on Mesos DC&#x2F;OS.<p>Since moving companies, and switching to Kubernetes, we&#x27;ve yet to deploy any service mesh into production.<p>The blog from Jerome highlights many of the benefits already.<p>From my perspective the bigs ones in the past were:<p><pre><code> - Tracing (with Zipkin) - Retries which removed or fixed dodgy app reconnect logic - Time series metrics in LinkerDViz showing realtime rates and latency and errors between services </code></pre> The reason we haven&#x27;t used any service mesh at my current company is mostly based on stability concerns.<p>Istio gets all of the cool press attention and blogs written about it. Yet, you also read a lot of warnings about it always being 6 months away from being really robust. Even at version 1 we read some horror stories about obscure bugs showing up in fairly standard use cases.<p>Connectivity between services is too scary to gamble on. It&#x27;s a similar deal with CNI (we&#x27;re still on Calico despite arguably cooler stuff being out there) and Ingresses (still on ingress-nginx).<p>AWS have a service mesh that is probably going to be the one we trial next at work.<p>Improved observability and retries would definitely be of benefit on our current platform. Another driving factor is also our security team wanting mutual TLS between services.
评论 #19969672 未加载
评论 #19972722 未加载
discreteevent大约 6 年前
Has anyone got an opinion on what makes a service mesh better than using a message broker for most distributed systems? Is it performance? Is it that http has become the lowest common denominator and people just don&#x27;t want to use any other communication protocol?
评论 #19968772 未加载
评论 #19968667 未加载
评论 #19968621 未加载
评论 #19968383 未加载
nickstinemates大约 6 年前
Jerome, I am always amazed at the quality and depth of your knowledge. Thanks for the lesson.
评论 #19967866 未加载
kissgyorgy大约 6 年前
Honestly I&#x27;m learning every single day for 6 years, but there are a bunch of words I simply don&#x27;t know and a bunch of abstractions I don&#x27;t understand the need described in this article. The future (maybe even the present) looks unnecessary complex to me.
评论 #19972240 未加载
peterwwillis大约 6 年前
I think where service mesh goes wrong is when the design is monolithic or proprietary, where your whole cluster usually needs to use one particular set of compatible products.<p>At its core, a service mesh is just a complicated, multi-tier, higher-level router and VPN. For TCP&#x2F;IP routing there&#x27;s lots of protocols, from the local level to LAN to WAN and beyond. Many of them are designed for specific use cases. But even so, traditional routers aren&#x27;t centralized, they don&#x27;t care what other routers they connect to, and they all speak common languages, transfer information, make independent decisions, and act in isolation. This is a really good design that I think service mesh should utilize.<p>I think what we really want from a service mesh is a router for applications with a standard protocol that doesn&#x27;t share state (or at least, state is asynchronous and non-consistent, and only verified at the end of an operation, similar to IP routing). Additional features are needed, and those can be codified into the protocol. That would make the system more resilient to change and compatible with different products, rather than now where each service mesh software is basically a unique incompatible router and protocol.
thewarrior大约 6 年前
For someone who has no idea what most of this means is there some place to get started understanding this stuff ?
评论 #19970884 未加载
jacques_chester大约 6 年前
&gt; <i>Istio was designed to work with Kubernetes; and if you want to use it outside of Kubernetes, you will need to run an instance of the Kubernetes API server (and a supporting etcd service).</i><p>Istio is used in Cloud Foundry without needing a Kubernetes master.
mrbonner大约 6 年前
I tried to read a few articles on service mesh but then still don’t understand what it tries to solve. Is it just another niche technology (I.e nodejs ecosystem)?
评论 #19974832 未加载
评论 #19975209 未加载