- True – The TLS between service-to-service communication is fully automatic in Linkerd.
- False – The TLS between the Ingress gateway and the edge service of the application is the application user's responsibility.
- True – The linkerd-identity component of Linkerd's control plane is the Certificate Authority (CA) for the data plane proxies.
- True – The linkerd-identity component automatically rotates the certificates for linkerd-proxy in the data plane.
- False – The linkerd-identity component doesn't automatically rotate certificate for its own CA.
- True – You can use trusted certificates from your own CA for linkerd-identity, but only at the time of install.
- True – You can change the trusted certificate of the control plane at any time, but it requires reinstalling...
Mastering Service Mesh
By :
Mastering Service Mesh
By:
Overview of this book
Although microservices-based applications support DevOps and continuous delivery, they can also add to the complexity of testing and observability. The implementation of a service mesh architecture, however, allows you to secure, manage, and scale your microservices more efficiently. With the help of practical examples, this book demonstrates how to install, configure, and deploy an efficient service mesh for microservices in a Kubernetes environment.
You'll get started with a hands-on introduction to the concepts of cloud-native application management and service mesh architecture, before learning how to build your own Kubernetes environment. While exploring later chapters, you'll get to grips with the three major service mesh providers: Istio, Linkerd, and Consul. You'll be able to identify their specific functionalities, from traffic management, security, and certificate authority through to sidecar injections and observability.
By the end of this book, you will have developed the skills you need to effectively manage modern microservices-based applications.
Related Content you might be interested in
Current Title:
Mastering Service Mesh
Table of Contents (31 chapters)
Preface
Section 1: Cloud-Native Application Management
Free Chapter
Monolithic Versus Microservices
Cloud-Native Applications
Section 2: Architecture
Service Mesh Architecture
Service Mesh Providers
Service Mesh Interface and SPIFFE
Section 3: Building a Kubernetes Environment
Building Your Own Kubernetes Environment
Section 4: Learning about Istio through Examples
Understanding the Istio Service Mesh
Installing a Demo Application
Installing Istio
Exploring Istio Traffic Management Capabilities
Exploring Istio Security Features
Enabling Istio Policy Controls
Exploring Istio Telemetry Features
Section 5: Learning about Linkerd through Examples
Understanding the Linkerd Service Mesh
Installing Linkerd
Exploring the Reliability Features of Linkerd
Exploring the Security Features of Linkerd
Exploring the Observability Features of Linkerd
Section 6: Learning about Consul through Examples
Understanding the Consul Service Mesh
Installing Consul
Exploring the Service Discovery Features of Consul
Exploring Traffic Management in Consul
Assessment
Other Books You May Enjoy
Customer Reviews