Another Choice for Istio Multi-Cluster & Multi-Network Deployment Model- Haiwen Zhang & Yongxi Zhang

Опубликовано: 27 Декабрь 2024
на канале: CNCF [Cloud Native Computing Foundation]

196

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon North America in Salt Lake City from November 12 - 15, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

Another Choice for Istio Multi-Cluster & Multi-Network Deployment Model - Haiwen Zhang & Yongxi Zhang, China Mobile

China Mobile is the largest telco in China. We have the necessity to govern the traffic of services across multiple clusters in multiple networks using Istio. Istio community provides deployment models for the scenario. But we found the complexity: onboarding a cluster requires 8+ steps, taking 10+ minutes and prone to errors. The complexity arises from two factors: the need to deploy multiple gateways due to network isolation, and the authentication secret deployment for communication between Istiod and K8s API server. Additionally, limitations within Istiod restrict the scale of multiple clusters. We have implemented inter-cluster communication in container networks and introduced multi-cluster configuration discovery and service discovery features in Istiod, thereby addressing the mentioned issues. New clusters can be seamlessly onboarded with a single click, and the onboarding time is in the millisecond range. A service mesh can manage over 200 clusters, totaling millions of nodes.