K8s服务网格选型：Istio、Linkerd与Cilium

K8s服务网格选型

服务网格提供统一的通信、安全和可观测性。

Istio

基本配置

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  name: istio-install
  namespace: istio-system
spec:
  profile: default
  values:
    global:
      proxy:
        resources:
          requests:
            cpu: "100m"
          memory: 128Mi
​

流量管理

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: reviews
spec:
  http:
  - match:
      headers:
        x-user:
          exact: jason
    route:
    - destination: reviews
​

Linkerd

核心特性

• 轻量级
• 简洁性
• 性能优秀

chmod 644 /tmp/k8s_service_mesh.md
​