Research And Application Of Service Mesh Technology Based On Istio

In recent years,with the booming development of Internet technology,enterprise applications have become more and more complex,and the traditional monolithic architecture is too complex.It is difficult for developers to modify the code and add new functions in the future.Problems with a module may cause problems.Cause the entire system to crash.In order to solve this problem,more and more Internet companies are gradually switching to microservice architecture to replace the early monolithic architecture.However,as the number of microservices continues to grow,microservice governance has become more and more complex.In order to better manage microservices,service mesh have emerged.Service mesh is dedicated to decoupling service governance from the service itself.The service mesh will deploy a proxy for each microservice,and the proxy will intercept and forward all traffic in and out of the microservice.In this way,various service governance functions can be implemented through agents,without the need to add governance function codes to the service code.Istio is the most popular service mesh in the industry,but in practical applications,Istio still faces problems such as monitoring,imperfect authentication and authorization functions,and difficulty in operation.In view of the above background,this article improves Istio and designs and implements an Istio management platform through which operation and maintenance personnel can directly manage the microservices deployed in Istio on the Web.The specific work of this paper is as follows:(1)Study the Istio service mesh technology,summarize the problems existing in Istio’s service governance based on the characteristics of the microservice architecture,and research related technologies and design solutions for the problems.(2)Modular expansion of the Istio service mesh is carried out in response to the problems existing in the actual application of the original Istio system.This part designs and implements three modules for Istio:monitoring module,elastic scaling module and identity authentication module.The monitoring module uses the industry’s popular open source monitoring technology to monitor the microservices in Istio.The elastic scaling module optimizes the native elastic scaling function of Kubernetes,which can realize timing scaling and use the monitored indicators to elastically scale the microservice instances(Pods)deployed in Istio to cope with the changing load in the actual production environment.The identity authentication module uses the OpenID Connect protocol to perform identity authentication on the two user roles separately to ensure the security of the Istio service mesh.(3)Based on the needs of enterprise microservice governance,the Istio management platform is designed and implemented in the form of separation of front and back ends.The back-end uses the Gin framework and the Gorm framework to operate the MySQL database.The front-end mainly combines the React and Redux frameworks to develop front-end pages.Through this platform,users can directly view and monitor the detailed information of services in Istio on the Web side,and manage the services through simple template filling,without the need for complicated instruction operations and configuration file writing.