Kong Kong Builders Livestream Recordings, 1 Dec 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Exploring Istio Gateway | #KongBuilders - December 1

Description

Viktor Gamov takes a closer look at traffic #ingress in #Istio and explores the native Istio Gateway feature.

#KongBuilders is a bi-weekly livestream series that takes our #developer-focused toolsets and puts them on display in the best venue possible – building applications and connecting workloads.

See more at https://konghq.com/kong-builders/

- [https://istio.io/latest/docs/reference/config/networking/gateway/]
- [https://github.com/Kong/demo-scene/tree/main/kong-builders/11-10-2021]
- [https://kubernetes.io/docs/concepts/services-networking/ingress/]

Timecodes

0:00 - stream starts
1:30 - intro
1:46 - we're live!
7:52 - a quick recap of previous episode: Kubernetes and Knative
11:15 - deploying native image app
19:29 - commercial break: kongcast
27:22 - Switching gears: Istio Gateway
34:16 - Installing Istio
37:15 - enabling Istio sidecar injection
38:18 - deploying quote-service to Istio-enabled namespace
40:44 - Quick Tip: testing service connectivity inside the cluster using httpie
43:01 - Installing Gateway object and VirtualService
51:08 - Testing service connectivity using Insomnia
52:23 - It's a wrap!

A

And we're live okay, okay. Okay, welcome. Welcome! Welcome, welcome everybody! Welcome to clonk builders. Kong builders is a weekly bi-weekly um two three times a month show live, show that happens on a clonk youtube channel. Usually that's the place. My name is victor gom and I will be your host today um and let's do a quick, uh sound check and see if everything works and a see if this stream is going on and uh everyone is enjoying your show so far.

A

um Let me know, let me know: if uh were you watching us, go, find a comment section in wherever, whenever you watch this, uh find the comment section and uh write something there. uh If you watch us on youtube, write something in the youtube comments. If you're watching us in we're testing we're testing this in the linkedin, hopefully linkedin works finally works um as well. Here uh let me bring my comments uh window and I will be I'll be waiting for your comments. um Kong builders.

A

This is the show where we're building stuff live, um sometimes we're breaking stuff life, which is also exciting thing, um and uh this is where I learning something you learning something and we teaching each other. Some of some new things, so it's not necessarily me doing all the things, because I cannot possibly know everything. So in this case um it's good to have someone who might even maybe even help me.

A

Okay, okay and I see linkedin is working. Let's see if I will be able to bring this to live, show these comments uh should go in uh in a second nice. I see it, that's it like. We see some comments um and it's great great, great, great great great.

A

So since we're testing these comments, uh let me know uh where are you coming from so I'm I'm doing the show live from my third new jersey studio. It's the third like it ask me why, next time uh why it is the third new jersey, studio um and uh yeah, I will be um with you for next one hour.

A

Okay, so let's see some some questions, a little closer.

A

Okay, so the question from stefan uh he's watching this live for the first time and works fine for now. Hopefully this will work for us and uh rudwig from youtube. Awesome greetings.

A

uh Taryn uh taryn is my um teammate and she's helping to uh to run this stream as well.

A

And uh yeah looks like uh we have a huge success: uh linkedin works uh this time and works. Fine people are, I seen us in enjoying so far, so the problem in the in the past was with the um the size of the stream. So I like personally stream on 4k, because why not? Why not stream in 4k right and uh the linkedin were not able to um receive this? This massive stream of video information? So uh that's why 1080p for now I will figure out the workflow. I love 4k.

A

I love watching the uh the bigger picture, bigger crispy images. um Okay, so linkedin works, youtube works. uh Twitter. uh Do you have anyone in twitter to just like a tweet? um You know replying tweet or whatnot, so um I mentioned this is a live show. I will be doing some stuff. Some stuff will not be working and it's fine, the.

A

uh If, if you take me back couple years ago, I can say a couple years ago, because I started doing this in 2020, uh where I found myself that I cannot find the time to working on some presentations, because there was too much work and I think okay, so I will do live and I will be failing live, but I will use this material for my future uh future content. So this is how this idea of live streams came came about, and I also translated this idea to coin builders.

A

I working on some stuff people asking some questions where I usually don't have a time to work on, but uh with live streams and the kong builder streams. I already promised people that I will be live so why not use this time to prepare and showing something during the stream um and that's kind of like a win-win situation for me now uh great. So the last time. uh Last time we talked about the um we talked about by the way it's the coin: builders, uh the webpage on uh calling website.

A

You can always a go there and find the latest and greatest episodes. uh One of the episodes that I talked last time- and we will bring this uh this back in a few seconds.

A

uh Okay, so you probably don't see it because, uh given yep okay, here we go so now you should be able to see my screen. This is the calling builder's website uh clonehu.com slash conga builders. This is where uh you can find all the rest episodes and the last time we talk about. uh We talk about k. Native key native is a platform for running your serverless workloads. It's built on top of kubernetes uh integrates well with clonk.

A

As a matter of fact, I showed some of the integration and one of the things that we talked about last time- and I didn't have a time to um to finish in you know the showing this to you is the thing around a cold start so uh because the key native is a serverless platform and what it uh what it does. It starts your application whenever it needs to be started, meaning uh when the request comes in it would be some of the initial latency.

A

uh That will be that we will know that our application is uh will be starting up because, maybe previously it was not used, and it's always good to save money on the cloud bill right.

A

So this is a noble, that's a noble um work that key native does, but I use the the perfect storm example like situation, where you're running something like very um uh there's, there's a um there's, a perception that the java is not very uh cloud native uh and uh the you know people can say like development will take a long time, the compilation and the images and blah blah blah blah blah.

A

But all this kind of stuff was true- maybe I don't know 10 years ago- and I used java for my day to day not to brag, but a couple weeks ago just became java champion, which is cool thing, meaning that it's recognition in the community that I um uh kind of like doing something to help java community. So with this um I built this service. uh Many of you seen this service in in my previous.

A

In my previous streams and my previous videos, uh it's a quote service. Essentially it's a spring boot application that speeds up quotes from the popular movies. I use the back to future and I use um some of the chuck norris references and whatnot, so um I use this application so and we learn. Let me bring this back what we were doing the last time so less time we're trying to deploy this um and before I fix this.

A

Let me show you how it worked and previously so as a reminder, my um key native, my cluster, already have a key native up and running there. So um for those of you who want to try to do this at home, uh you can always go to our github, calling slash demo scene, slash, quank builders, all materials from the uh from the episodes will be here, I'm trying to bring the old materials from the old episodes as well here. So you can find this here.

A

There is a step-by-step instruction that you can replicate and run this at your at your cluster. Actually, it also works with um with mini cube, but I'm using a real cluster. Maybe you also want to hit this cluster, so essentially I installed this and we saw this on the last time. You can go and watch it and what I will do right now. I will just go ahead and deploy one of my services.

A

First of all, I deploy this code service and, what's the which cuff so it's my alias to control, apply f, so I'll just do cuff, and I will just do quote service.

A

So what we will see here in default, namespace.

A

There would be a new port created and keynative handles some of the some of the work around managing of this application. So I created a surveying key native service. It's not a kubernetes service now. So what do we see here?

A

User container? That's my application. This is my application and what I can see here- um that's the startup of application. That's my application! That's it takes five seconds to start, and this is this is not bad, but it's not okay either. So if I'll just do key get serving.

A

Serving where is it.

A

Service service service yeah, this guy there would be one service that is is there, and this is url that I can hit. So I go ahead and take this go to my insomnia and click. Send.

A

Maybe take some time to um to the service to get up and running, which is weird because so at this point it we hit the clunk. So right now we hit the quank and um did I configure everything?

A

Service is up and running. Let's see if I will be able to no routes. That's interesting! So, let's, uh let's investigate uh what is going on here. So uh it's ready! So it's up and running. um Did I create a config from from my.

A

A

I need to tell key native to use clunk, so in this case it should use uh my quank if I go config map config network. Let's take a look.

A

Namespace we go into key native, serving we'll do config.

A

A

And are we talking about a config network.

A

uh It's example.

A

A

So it should use uh quonk as an ingress, so we're good we're good here.

A

So, let's try that one more time maybe there's some some caching is going on so still not going into the right place. Quote service.

A

um Let's take a look.

A

Let me see if I, if we have a better luck with another image, so if I will redeploy another one, maybe there's some some caching going on and that did not pick up whatever. I wanted to pick up.

A

Okay, ready and uh let's see we're going into default, namespace, okay, so it's dead. um When I hit this, maybe it's uh something with insomnia. Maybe it's a caching something.

A

Okay, so what is happening you see here when I hit this for the first time it was dead. I got the response, so everything working great, but it took me seven seconds to start again because the it takes some time to key native to start this now. The next thing that I want to do is to use another version, the same version of this application, but using different tooling. So essentially, what this tooling would do it go through this execution path of the.

A

Of this application, and after that uh we'll create a binary, so uh this binary will be native image. It will not require uh jvm uh to start it's gonna be native for native application. So, um and I use this spring native plugin. That will be doing same thing with my code. So that's my that's my application. So what it does.

A

Again, it's a simple application. I need to put some of the hints in order to uh the build tool, will pick up some of the resources, so I'm using java, faker library, which is a library that generates some fake data based on this and information about this like back to future, and all this kind of stuff is actually stored inside these yaml files. So I need to tell the the build tool to include those. Apart from that, we should be.

A

uh Okay, so probably we'll we'll skip that, because I already have a build so the difference between building native image and building just a docker image is that building native, which will take longer time because it requires the uh the build tool to go through the execution path and check everything. Now what I will do here so application is down, so I will just do.

A

Okay and after that, if I will google this one, what it will tell me, so it will actually start another new version. So since I'm using the same name of the service, it will include new version, and now, let's take a look in the log and go to user container, the startup time now takes us less than second. So, let's see how long it takes us to do cold calls.

A

So, first of all, if I will just do this, it get me result and latency is just off upstream service, so it goes through the column and after that goes to the upstream service, and it takes uh nine milliseconds, which is good. So now I wait until uh the timeout will expire and the uh timeout will go away um and this spot will be destroyed and we'll see how long it takes us to start this.

A

A

Look in some of the comments all right, so I see I see nine people watching not many, not many, but uh I I'm I'm glad that you're here. um Let's do some noise in the comments. um So today I'm uh oh yeah. I forgot about talk about this a little bit uh while it's starting uh we do have.

A

We do have another show that we're doing here at kong. uh It is called a comcast, so at the comcast uh we I'm meeting the me and my co-host um caitlyn bernard. We meeting some of the incredible people in the community and uh who develop and design some different um cool things, and we chat with about certain things and they also after that, the showing demo.

A

So if you're interested in this type of jazz port dot link comcast, you can listen it or you can subscribe to our youtube channel and watch this with demos and stuff the cool thing about this, like this particular thing, so it's a cooler cup um that can holds a you know: hot beverages and cold beverages.

A

Now, if you will sign up on uh on the mail list, we before like every episode we do in ruffle and uh we just like- send the secret swag to one of the fire listeners. If you want to get this secret swag, um don't forget to sign up through email. Now, let's get back now, so this service is down.

A

So, as you can see here, nothing is going on there, like my pot, is dead. So when I call this again how long it will take us to get response, it takes us just one second uh to to to respond. So it's a nine time faster, so the the system now uh it took this like key native to server, request, spin up pod, start the application and get the response. Now it is much better so size matters, size matter, speed matters. So let me show you quickly.

A

If I will take a look, uh I do have this the the first version of my application. um It's roughly! uh No! It should be not a reactive code service. It should be something some previous version. Maybe I already messed up with the.

A

Okay, so I messed up, so let me show you uh another, um so I will go and build this one more time. The uh the version that is not using native native image.

A

um What service? Okay,.

A

Yeah, so let's build this image one more time. uh The compilation would be very fast um here.

A

A

And I just want to show you the uh just the size of those images and um how long it will take to to build this and run this.

A

A

Now uh let me see if there are any any comments. Okay, so not so many uh don't forget, uh I can answer your questions live um or, if you're watching this, if you're watching this is a recording, uh don't forget to um hit that subscribe button and do not miss the future episodes, because, with the uh with this stuff, it's always much much more fun to um to have everyone uh on the show, rather than in that yay.

A

While we wait, we have uh ruthvik who subscribed to our next episode of comcast. That's exciting, very exciting.

A

Another interesting thing about the building this stuff and doing this live like everything is happening right now on my laptop, so uh my stream goes from the laptop my um my applications are building on my laptop I'm really looking forward to this new in your new beefy machines that coming from apple um ordered one, and uh it's uh I'm really excited to to put this. For. For my uh for my live streams, you see not the stuff is not happening like super fast, not happening super fast.

A

So uh you can, you can tell you, can tell me, but victor you know like why to use java like we should use some cloud native uh cloud native languages like go or something else java is cool. Java has a cool.

A

It has like a much more mature infrastructure like the the ecosystem, so lots of different plugins lots of different uh frameworks. You can do a lot of things with java and having the tooling that also keep up with this and allow you to um to use javascript like over 25 years now, um but it's still evolving and there's still like syntax involving the tooling involving.

A

So it's just it's just great like some, some some people might say yeah, but it's not cloud native but like whatever uh java can be cloud native uh by uh running some, um some tooling there's java, there's other languages that available in jvm. That also can do the thing for you uh languages like kotlin. um That's also like very modern. uh You can use like it's for writing very modern applications or um some people call it like isomorphic. You can use like for the server side and client side.

A

You can write this for for android or whatnot, so still building. So another thing, that's cool with the spring boot. um I didn't put any docker docker file there. So what I did, let's see.

A

Let's see so yeah so now I rebuild this and uh without using native image, without all this optimization. First of all, it would be slow start because it will start operating system. It will start jvm and jvm will start the jars. When I use this with my, um where is it with native language application?

A

It's not only almost three times smaller but also starts nine times faster, nine times faster. So again, just to remind you so right now we don't have any applications up and running so we're going in and we do http quote service boom response will go here in a second, so, like startup of operating system start off of application like deploying this. It's it's! It's your it's your serverless platform that installed in your in your cluster, all right. So uh we are. uh Where is it.

A

So, let's switch gears, let's switch gears for today, and that was my uh uh like technical depth from the last time. So I promise to show you stuff uh and uh I throw some uh connecting points uh from the from the previous episodes in this episode. I'm doing this for you so uh today what I promise you to show.

A

I promise you to show something that is slightly different for the quan summit. um We announced that quank gateway can work with istio istio. It is a very popular service. Mesh and many users of quank want to use istio. They want to use kuma as well, so we here provide you tools that make you successful, regardless, if you're using kuma, if you're using istio, we want you to be successful with your connectivity needs um and it's not just like the marketing victor is just telling us like what he's talking about.

A

We want our tooling work everywhere. You know, that's that's simple, simple as that. So that's why we uh we announced that the quan uh uh gateway uh integration and you can watch this uh in our youtube. uh I I will the demo that shows how you can enable a quank as a gateway, but there was one a particular question um that came in. So let me switch this this, uh this video on our youtube channel, uh it's about integrating conc with visto and there's one one question that I have here this particular question.

A

Let me make it bigger.

A

um What about native gateway? So what about the integration this with the native gateway? So this is very good question and I'd like to to answer this question today. So, first of all, um the overall question is not maybe entirely make sense because like why you need to put another gateway in front of another gateway, um and I actually working on the video, where I will explain the concept of the gateway that works in in istio, but like to give you some preview of about this. Essentially.

A

There's a in kubernetes the way how you expose your service is going through from the ingress object. So if you go in grass.

A

You'll get the ingress object and the english object exists there. Oh, they updated the website. Nice.

A

Allows you to expose your service through this object, called ingress and um historically uh ingress object. It exists to serve only http https um traffic. It's one thing.

A

Another thing that routing model is quite simple: uh you need to define the service uh and the service will be connected to ingress ingress will route traffic from from from outside um in the world of service mesh, your routing logic might be slightly different and you might have some different ways how you want to route your your your traffic from your application, especially the things might get complicated when you need to involve different versions of application, like you do a b, um a b testing or you're doing like canary deployments, and things like that.

A

So um at this point ingress is it's a good thing that it exists? It's I'm sorry for bringing this up like all the time, but I feel it's it's like a uh in-store or like in-store brand right, so the something that you you know that will do the job like you go in there. You buying some detergent that from your shop right or from your, uh I don't know like a safe way or what have you um and there's some things that are missing and there's some of the limitations like different.

A

You cannot route different protocols uh except http https. So that's why the gateways come into play. It's essentially gateway api gateway. It's implementation of the pattern just like putting something in between, and the different gateways have different capabilities. uh Quant has a lot of capabilities. There are other gateways, have a different capabilities, but essentially uh the gateway exists to route traffic and manage this traffic uh in the demo that I have here. You can watch this afterwards and uh you know don't forget to hit that like button here.

A

I explain how you can enable call gateway integration with istio in order to istio enabled applications will be exposed outside world. Today, we're going to look at the native feature that exists in istio. It's called istio gateway that does similar things. It allows you to expose the service that deployed in a mesh enabled namespace to outside world.

A

So um we're going to do a couple things here. So, let's see we don't need this.

A

We'll switch this back. Okay,.

A

I'm going into my by the way, if you want to find the source code from the demo that I did with the eco and con gateway you can find here.

A

Account builders and the demo- I also will push later today.

A

um I do have a couple things here, so we're going to be using the same application same application that you see in uh in my demos, it's a quote: application will receive some of the the funny quotes from funny.

A

Hope, like considerably funny um places uh and um we're gonna use this application. We're gonna have a two version of the application. One version of application we'll use back to future, in other words using check noise, and we will be uh configuring, istio gateway to get access to this application. So let's do specifically that so first thing: that's, um uh I built a small like make file, so that will easy us to drive this uh this application. So I have a my cluster is up and running.

A

I just need to um click to make uh install istio, so what it will do it will download istio. I already have happened to have this downloaded after that, the uh my istio command istioctl will run a pre-check. It means that if the cluster is ready for for istio and now what we see here we just created is to a system where we have a two things uh we have a uh we have a pilot um is toward. I think it used to call it pilot right.

A

uh Yeah, it is pilot, is your pilot and ingers gateway, so we will have istio gateway and, let's take a look. We have a services. Okay, get services from namespace istio system, so um istio gateway service will have a type of load balancer, meaning that google cloud will provide a external ip address for this one. So this is what we're going to be hitting in order to we'll just do. Http.

A

And we get the connection error, meaning that the external ip address was created, but no one is actually listening to it. So, in order to use to create the object that will be listening, this external object- this is just a service, a service. You know it's a kind of like object that is created. It's it's connected to the provision. The load balancer object in in the google cloud ip address is assigned, but no one is listening from the other side. When I'm hitting here see the connection fail.

A

So first thing that we need to do here is to create. So let me close this one and we will go into this and we will create a gateway object. As you can see here, network is still io gateway.

A

This is something that we will be using. So we're going to be routing our traffic through this gateway object. So if I will go, let's see no, it's a wrong context, so I will just do.

A

Gateway, oh sorry, enough.

A

uh I will do.

A

Before that, before that so before I will do this, I'm I'm running uh too fast, so um I will create a nam space where I will be deploying my application and my objects that will be dealing with this gateway. They will be created so I'll just do um demo up deploy okay, so demo up deploy. Let's take a look: what's the demo up, deploy target look like so. First of all, I need to create a namespace.

A

uh Let's not do this first and let's not do this first yet so we can create a namespace and this namespace will be uh enabled for uh istio to inject. So in this case, this name space easter will be listening for all the pods and will be attaching we'll be attaching some of the.

A

Sidecars with with envoy envoy.

A

Deploy app demo.

A

So I created those cone builders and if I will just do yaml.

A

um As you can see here, there is a label istio injection, so this namespace is ready to roll off our application.

A

Now next thing is that my back to future quote service. Look like just a regular thing, there's couple things here: there's deployment that says, use this uh native quote service to deploy, um create a uh expose, the port that this application will be using um and there's a parameter that allows me to select which quoting service I will use.

A

In this case it's going to be environment, variable says back to future and the rest of this stuff is just a falloff in this, and also there would be service that allows me to to talk uh to talk to this. um To talk to this service uh through. um Let me disturb for one hour to talk to this service. The same thing I will be doing for my chuck, norris, there's different differences here. Is that I'm going to be using chuck here as well.

A

So let's put this into my makefile, I don't need this for now. I just I'll skip that, so we will wait uh huh and we will do the same thing for um for chuck norris.

A

So we're going to do.

A

And for chuck norris deployment would be obviously a chuck code service.

A

Okay, okay, all right so I'll just do.

A

So, let's take a look: what do what we will see here in in this stuff? So we have a port initializing and, as you can see here, there's two containers in this pod um and actually there's a need container and there would be proxy. So in this particular case my application is up and running and we can see here started super fast, it's native process and, let's take a look, the same thing with chuck norris and in order to test this out, we can do simple things. So let me show you.

A

So I like to use this approach where I can create a like one-off uh type of um container uh pod. That will have a tooling that I need, so I don't want to bloat my images with this tool. So, for example, this image is pretty tiny, it doesn't have any curl doesn't have hdpi. So that's why I'm this I'm using this control run in order to run this image clue http. That allows me um deploy a container with http um http client in so I can, you know, hit this.

A

Okay, so and the water how I can navigate to this, I will just stick this. I will just grab this one uh hit jdp.

A

So what do we have here? So this is the name of the service. That's my namespace and the service cluster local. It's the name uh convention that exists in uh in the world of kubernetes. So if I will hit this, I will get the answer from the service and it looks like uh like a back to future quote right. Let's see if, um if I will do.

A

This guy, so in oh okay, so maybe I need to use different image that supports the character. So I can send um my back back backspaces again uh the service that we deployed using uh standard kubernetes service.

A

And now we have a chuck notice response, so all good, so we have our two services up and running two two pods. We have a deployment, we have a service now we need to get access to those services from outside world and this is where the gateway comes into play. Now, uh where's my make file. So let's do we have this installed.

A

In the simple in simple way like we have, if we will have a one service, we will deploy this gateway object and, after that, um this gateway service, a gateway object, needs to know how to connect to service that runs inside this service mesh. So in this case,.

A

Istio has another concept called virtual service that allows to create a kind of sort of like a domain names inside uh this in inside um a service mesh that allows to um this virtual service create a connection between uh our gateway object. So I'm sorry, so the traffic will go through um gateway service and the this service will um based on information about what kind of host we want to get. It will route the traffic to particular service that, in this particular case, will have a back to future quad service that runs inside my coin.

A

Builders, namespace.

A

Question from audience.

A

How we can win cool swag through comcast, so if you sign up for um for the next episodes of the comcast in the through the email, we will automatically add you to ruffle and randomly select so fingers crossed thanks. So much for asking this.

A

All right um and the same thing that we need to do: we create a virtual service for our chuck norris service. So, let's, uh let's do this one, oh okay, so I did mention this: how this will work with gateway so the way how it will work with gateway? uh We need to tell that gateway which.

A

Which uh host this like virtual host that we created will be responsible for which request, and I will show you how we can do that. So, if I will go, I don't need this anymore. Let's, let's do this small thing! First, uh let's, let's just enable this and see if it actually works so I'll just do um a gateway. So I'll just do.

A

And I'll just deploy this in the conic builders and in if I'll, just do.

A

So, first time when I hit this ip address, I get connection refused, but now I'm getting 404, and now I see that response came in from the server called istio envoy, so this gateway is essentially another pod that runs on voip proxy, and this sound voice proxy now will be serving our requests.

A

If let me see if I can do.

A

How I can do headers here with these.

A

A

uh Will do host chuck.

A

And ip address.

A

Oh okay, wrong place.

A

How I can do headers, uh like this.

A

That's where I failed, so we just do h2pi.

A

Errors, that's what how we can do this, uh the chit and just do header?

A

Okay, so we just simply tuned in okay. I don't need to do anything uh like just do something like this and it will translate this into host.

A

Okay, so see it's not found just simply because there is no uh there's no virtual surface that will connect this gateway guy into this um into this services. So, first of all, I need to deploy a new gateway updated with the.

A

Now, let's see if I will be able to do this.

A

Still not found because virtual service was not deployed. Okay, let's do this one.

A

Number three.

A

uh Chuck and we'll do this on cone builders.

A

And now we connect these all the dots, so we hit this. um We hit this service, we provided the header in order to this gateway figure out how to do routing.

A

We know that this host- this is where we need to go here so the host. This is the header that we need to provide and after that it will go to the virtual service because they are connected. Let me, uh let me show you uh first of all, let get ways in namespace calling builders.

A

And we'll just do.

A

Okay, uh can we do describe then? Oh, let's use the uh the nice tool? Okay, so we do a namespace uh clone builders. Let's just do uh gateways.

A

And there's gateway, we can see yaml from this gateway. That's what we did.

A

I'm wondering if describe does the same thing. No, there's no events, uh the host check.dev back to future, so it will connect things here together. Also, what we can do, we can see the virtual service.

A

Now we see the virtual service chuck that is connected to gateway and uses called chuck.dev. If I will go ahead and do the same thing for.

A

Back to future, and let's see if insomnia, actually we're working here,.

A

uh huh So I will and let's see, uh remove everything, uh send 404, okay, I'll, add header, say host and the value is going to be back to future dev and I'll click send better question. Why it's bad request.

A

Back to future, if I'm using correct host for years, let's see if chuck is working.

A

A

Maybe some extras yeah, so there was a and response from chuck norris service. If I will just do back to future.dev- and I click send now we're getting the response from back to future. Again again again again and now we see that some of the headers that comes from envoy.

A

um That's, um and this is how it works again, what we did right now, um we deployed a istio, we use. Oh, let me show you, that's that's actually a pretty cool thing, um so when I installing this e-store first of all, you always want to run the pre-check in order to understand if the version of istio is compatible with the version of your of your servers.

A

Next, if I do install, I can actually use a different profiles in my previous demo when I just need to have this the control plane that will be injecting stuff. I use.

A

It's your uh control profile list. It shows like different profiles that that that can um can deploy, there's even like demo profile, where it will deploy like a demo of things minimal, will just deploy istio pilot. I used a default that will deploy istio pilot and enable injection to two different name spaces. Also, um it will also deploy ingress gateway and, uh as you can see here like, we have a two virtual services now that will connect one gateway to this virtual virtual host.

A

Now that's the still command the the next thing here is.

A

We need to deploy our applications. Obviously, so we create a namespace where we're going to be deploying our applications, and in this particular case the namespace will be clone builders, and this is important, like easter injection enable so in this case the side. Cars will be added once again, just to remind you that this is important.

A

uh Quon, um what are we doing? uh Namespace we're going into uh kong builders and uh because.

A

East, to enabled is to able to inject side cars here. Okay, next thing is that we enabled a gateway. We configure this gateway to to host different routes and, after that, we're creating a virtual service that will be correspond to particular host, and this is this is where this is important. That's what we connect to uh to this gateway, so inside the inside the mesh. The this service would be um would be routed as a backtofuture.dev.

A

So that's how you can access to the service from other other services as well, not only from the gateway gateway, use, this information just to route the traffic through, and this is the destination which essentially just a simple kubernetes service now and the same thing for uh for our virtual servers for our chuck, and when you will be hitting this service, you need to provide a um the host header that will tell the gateway how to route this traffic. To do this thing.

A

All right, okay, so that would be. uh That would be it for today.

A

If you find this, uh if you find this show uh useful, or at least entertaining hit that like button, um I remind you that uh you can always uh join us uh in call youtube channel. I'm trying to do this as regular as possible. uh We we didn't plan to do this this week, uh because I have. I was supposed to be traveling in the be the conference, but hey it's good that uh sometimes some things are not worked out.

A

So that's why we um we decided to do this um this event uh you can always. Where is it? You can always send your questions, your suggestions, your? um What have you like? You have some some things to share questions or maybe ideas for future episodes. Send me this in in my twitter.

A

You can always reach out at the cone in in twitter as well for your questions around clonk.

A

Just a reminder, my name is victor gamov. I am a developer advocate here with quank with this.

A

I would like to say thank you for you who to join us today with this. My name is victor gamer and, as always, have a nice day. Bye.

A