mirror of
https://github.com/status-im/consul.git
synced 2025-01-15 16:26:06 +00:00
Apply suggestions from code review
Co-authored-by: Blake Covarrubias <blake@covarrubi.as>
This commit is contained in:
parent
3a74ca5374
commit
7baba1d05a
@ -1,8 +1,8 @@
|
|||||||
---
|
---
|
||||||
layout: docs
|
layout: docs
|
||||||
page_title: What is service mesh??
|
page_title: What is service mesh?
|
||||||
description: >-
|
description: >-
|
||||||
Learn what a serive mesh is, it's benefits, and how it works.
|
Learn what a service mesh is, it's benefits, and how it works.
|
||||||
---
|
---
|
||||||
|
|
||||||
# What is a Service Mesh?
|
# What is a Service Mesh?
|
||||||
@ -12,7 +12,7 @@ Service meshes are often used with a microservice architectural pattern, but can
|
|||||||
|
|
||||||
## Benefits of a Service Mesh
|
## Benefits of a Service Mesh
|
||||||
|
|
||||||
A _service mesh_ provides benefits for all organziations, ranging from security to improved application resiliency.
|
A service mesh provides benefits for all organizations, ranging from security to improved application resiliency.
|
||||||
Some of the benefits of a _service mesh_ include;
|
Some of the benefits of a _service mesh_ include;
|
||||||
|
|
||||||
- service discovery
|
- service discovery
|
||||||
@ -21,7 +21,7 @@ Some of the benefits of a _service mesh_ include;
|
|||||||
- automatic failover
|
- automatic failover
|
||||||
- traffic management
|
- traffic management
|
||||||
- encryption
|
- encryption
|
||||||
- observability and tracability,
|
- observability and traceability,
|
||||||
- authentication and authorization,
|
- authentication and authorization,
|
||||||
- network automation
|
- network automation
|
||||||
|
|
||||||
@ -30,7 +30,7 @@ In a _zero trust_ model, applications require identity-based access to ensure al
|
|||||||
|
|
||||||
## How does a Service Mesh work?
|
## How does a Service Mesh work?
|
||||||
|
|
||||||
A _service meshe_ typically consist of a control plane, and a data plane. The control plane maintains a central registry that keeps track of all services and their respective IP addresses, this is called _service discovery_.
|
A _service mesh_ typically consist of a control plane, and a data plane. The control plane maintains a central registry that keeps track of all services and their respective IP addresses, this is called _service discovery_.
|
||||||
As long as the application is registered with the control plane, the control plane will be able to share with other members of the mesh how to communicate with the application and enforce rules for who can communicate with each other.
|
As long as the application is registered with the control plane, the control plane will be able to share with other members of the mesh how to communicate with the application and enforce rules for who can communicate with each other.
|
||||||
|
|
||||||
The control plane is responsible for securing the mesh, facilitating service discovery, health checking, policy enforcement, and other similar operational concerns.
|
The control plane is responsible for securing the mesh, facilitating service discovery, health checking, policy enforcement, and other similar operational concerns.
|
||||||
@ -52,10 +52,10 @@ Unlike API Gateways, a _service mesh_ will track all registered services' lifecy
|
|||||||
API Gateways are frequently deployed alongside a load balancer to ensure traffic is directed to healthy and available instances of the service.
|
API Gateways are frequently deployed alongside a load balancer to ensure traffic is directed to healthy and available instances of the service.
|
||||||
The mesh reduces the load balancer footprint as routing responsibilities are handled in a decentralized manner.
|
The mesh reduces the load balancer footprint as routing responsibilities are handled in a decentralized manner.
|
||||||
|
|
||||||
API Gateways can be used togehter with a _service mesh_ to bridge external networks (non-mesh) with a _service mesh_.
|
API Gateways can be used together with a _service mesh_ to bridge external networks (non-mesh) with a _service mesh_.
|
||||||
|
|
||||||
-> **Note**: API Gateways are frequently used to accept north-south based traffic. North-south traffic is networking traffic that either enters or exits a datacenter or a virutal private network (VPC).
|
-> **Note**: API Gateways are frequently used to accept north-south based traffic. North-south traffic is networking traffic that either enters or exits a data center or a virtual private network (VPC).
|
||||||
A _service mesh_ is primarly used for handling east-west based traffic. East-west traffic traditionaly remains inside a datacenter or a VPC.
|
A _service mesh_ is primarily used for handling east-west based traffic. East-west traffic traditionally remains inside a data center or a VPC.
|
||||||
A _service mesh_ can be connected to another _service mesh_ in another data center or VPC to form a federated mesh.
|
A _service mesh_ can be connected to another _service mesh_ in another data center or VPC to form a federated mesh.
|
||||||
|
|
||||||
## What Problems Does a Service Mesh Solve?
|
## What Problems Does a Service Mesh Solve?
|
||||||
@ -84,7 +84,7 @@ This shift from an IP address-based security model to a service-focused model re
|
|||||||
## How Do You Implement a Service Mesh?
|
## How Do You Implement a Service Mesh?
|
||||||
|
|
||||||
Service meshes are commonly installed in Kubernetes clusters. There are also platform-agnostic service meshes available for non-Kubernetes-based workloads.
|
Service meshes are commonly installed in Kubernetes clusters. There are also platform-agnostic service meshes available for non-Kubernetes-based workloads.
|
||||||
For Kubernetes, most service mesh can be installed by operators through a [Helm chart](https://artifacthub.io/). Additionally, the service mesh may offer a CLI tool that supports the installation and maintenance of the service mesh.
|
For Kubernetes, most service mesh can be installed by operators through a [Helm chart](https://helm.sh/). Additionally, the service mesh may offer a CLI tool that supports the installation and maintenance of the service mesh.
|
||||||
Non-Kubernetes based service meshes can be installed through infrastructure as code (IaC) products such as [Terraform](https://www.terraform.io/), CloudFormation, ARM Templates, Puppet, Chef, etc.
|
Non-Kubernetes based service meshes can be installed through infrastructure as code (IaC) products such as [Terraform](https://www.terraform.io/), CloudFormation, ARM Templates, Puppet, Chef, etc.
|
||||||
|
|
||||||
## What is a Multi Platform Service Mesh?
|
## What is a Multi Platform Service Mesh?
|
||||||
|
Loading…
x
Reference in New Issue
Block a user