PRESENTED BY:

Service Mesh on Multi-Cloud Environments

F5 Networks

@ Red Hat Users Group, Twin Cities

oc whoami

Dylen TurnbullPrincipal Business Development Engineer, F5 Networks

@Dylen_Turnbull

Multi - Cloud

•Deliver a Multi-Cloud web application architecture, using F5 BIG-IP, DNS, F5 BIG-IP Controller for OpenShift, and F5 Aspen Mesh – Istio.

•Deploy OpenShift Clusters and F5 Infrastructure with Ansible Tower running on premises, in Azure, and in AWS.

The Goal

BIG-IP Controller for OpenShift

BIG-IP DNS

OpenShift Container Platform

BIG-IP

Ansible Tower

Aspen Mesh - F5 Incubation of an Istio Service Mesh

Multi-Cloud

RHEL Atomic Host

Microsoft Azure

AWS

On Premises Private Cloud

Enterprise eCommerce appiAppsiRulesLX

TMSH2iApp

Head Start(Ansible Demo)

Applications

AnsibleTower

OpenShiftRHEL Atomic

BIG-IPVE

Ansible Playbook

BIG-IP Controller for OpenShift

Dynamic Application Services

Build

Click

Deployed

LX

8

Video 1

Architecture

Applications & Infrastructure

On Premises dc-onp

Azuredc-azr

AWSdc-aws

CI

Ingress

Azuredc-azr

AWSdc-aws

On Premdc-onp

Routing Virtual IPs

BIG-IP LTMBIG-IP LTMBIG-IP LTM

Routing Virtual IPs

Gateway PoolMembers

OpenShiftCluster

OpenShiftCluster

OpenShiftCluster

BIG-IP DNS

Gateway Service Web UI Service

Inventory Service Cart Service Catalog Service Pricing Service

BIG-IP Controller

Gateway PoolMembers

BIG-IP Controller

Aspen MeshAspen Mesh

BIG-IP Controller

Aspen Mesh

HTTP

Data PlaneAzuredc-azr

AWSdc-aws

On Premdc-onp

Routing Virtual IPs

BIG-IP LTMBIG-IP LTM

BIG-IP LTM

Routing Virtual IPs

Gateway PoolMembers

OpenShiftCluster

OpenShiftCluster

OpenShiftCluster

BIG-IP DNS

Gateway Service Web UI Service

Inventory Service Cart Service Catalog Service Pricing Service

Gateway PoolMembers

BIG-IP Controller BIG-IP Controller

Aspen MeshAspen Mesh

BIG-IP Controller

Aspen Mesh

Failover(BIG-IP Ingress Demo)

14

Video 2

Istio, Service Mesh,&

Aspen Mesh

Service Mesh

Java

Spring

OpenSSL 110f

disco-java

OpenTracing Spring

Ribbon

Node.js

http.createServer

OpenSSL 102l

Zoologist

Jaeger

Python

Flask

OpenSSL 110d

kingpin

OpenTracing Flask

Lemur Express RL

ReviewsFavorites Titles

Before Service Mesh

Java

Spring

Node.js

http.createServer

Python

Flask

TitlesReviewsFavorites

Service Mesh

Service Mesh

After Service Mesh

Service Mesh

Service MeshNative Advanced L7 Policy

Envoy

A

Envoy

BEnvoy

C

Mixer Agent

User’s OpenShift Cluster

Hosted SaaS Platform

Service and Support

Security and Authentication

Customizable alerts and events

Logging and Tracing

!

Visual Insights Dashboard

Istio(Aspen Mesh Demo)

20

Video 3

Wrap Up

● Automation is table stakes

○ Always keep you automation lock step with your architecture and design○ Write your roles to be versatile making good use of variables

● Multi-Cloud is here○ Cost, failover, running services where best suited○ Apps must be multi-cloud able.

● Istio based Aspen Mesh delivers consistency ○ Across cloud environments○ Across multiple frameworks and languages

● https://github.com/aspenmesh● https://github.com/f5networks/k8s-bigip-ctlr● https://github.com/f5devcentral/f5-tmsh2iapp● http://clouddocs.f5.com/containers/v2/openshift/

F5 and Red Hat landing page: https://f5.com/redhat

Q&A