| <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Apache Dubbo – Mesh Deployment Solution</title><link>https://dubbo.apache.org/en/overview/tasks/mesh/</link><description>Recent content in Mesh Deployment Solution on Apache Dubbo</description><generator>Hugo -- gohugo.io</generator><language>en</language><atom:link href="https://dubbo.apache.org/en/overview/tasks/mesh/index.xml" rel="self" type="application/rss+xml"/><item><title>Overview: Dubbo proxy mesh using Envoy & Istio</title><link>https://dubbo.apache.org/en/overview/tasks/mesh/dubbo-mesh/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://dubbo.apache.org/en/overview/tasks/mesh/dubbo-mesh/</guid><description> |
| <p>By following the steps below, you can easily learn how to develop a Dubbo service that conforms to the Service Mesh architecture, deploy it to Kubernetes, and access Istio&rsquo;s traffic management system. Check here <a href="https://github.com/apache/dubbo-samples/tree/master/3-extensions/registry/dubbo-samples-mesh-k8s">Complete sample source code</a></p> |
| <h2 id="1-overall-objective">1 Overall Objective</h2> |
| <ul> |
| <li>Deploy Dubbo application to Kubernetes</li> |
| <li>Istio automatically injects Envoy and implements traffic interception</li> |
| <li>Traffic governance based on Istio rules</li> |
| </ul> |
| <h2 id="2-basic-process-and-working-principle">2 Basic process and working principle</h2> |
| <p>This example demonstrates how to deploy an application developed by Dubbo under the Istio system to realize Envoy&rsquo;s automatic proxying of Dubbo services. The overall architecture of the example is shown in the figure below.</p> |
| <p><img src="https://dubbo.apache.org/imgs/v3/mesh/thinsdk-envoy.png" alt="thinsdk"></p> |
| <p>The steps you will need to complete the example are as follows:</p> |
| <ol> |
| <li>Create a Dubbo application ( <a href="https://github.com/apache/dubbo-samples/tree/master/3-extensions/registry/dubbo-samples-mesh-k8s">dubbo-samples-mesh-k8s</a> )</li> |
| <li>Build the container image and push it to the mirror warehouse (<a href="https://hub.docker.com/r/apache/dubbo-demo">the official image of this example</a> )</li> |
| <li>Deploy Dubbo Provider and Dubbo Consumer to Kubernetes respectively and verify that Envoy proxy injection is successful</li> |
| <li>Verify Envoy discovers the service address, normally intercepts RPC traffic and implements load balancing</li> |
| <li>Proportional traffic forwarding based on Istio VirtualService</li> |
| </ol> |
| <h2 id="3-detailed-steps">3 detailed steps</h2> |
| <h3 id="31-environmental-requirements">3.1 Environmental requirements</h3> |
| <p>Please ensure that the following environment is installed locally to provide container runtime, Kubernetes cluster and access tools</p> |
| <ul> |
| <li><a href="https://www.docker.com/get-started/">Docker</a></li> |
| <li><a href="https://minikube.sigs.k8s.io/docs/start/">Minikube</a></li> |
| <li><a href="https://kubernetes.io/docs/tasks/tools/">Kubectl</a></li> |
| <li><a href="https://istio.io/latest/docs/setup/getting-started/">Istio</a></li> |
| <li><a href="https://github.com/ahmetb/kubectx">Kubens(optional)</a></li> |
| </ul> |
| <p>Start the local Kubernetes cluster with the following command</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>minikube start |
| </span></span></code></pre></div><p>Check that the cluster is up and running with kubectl, and that kubectl is bound to the default local cluster</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl cluster-info |
| </span></span></code></pre></div><h3 id="32-create-an-independent-namespace-and-enable-automatic-injection">3.2 Create an independent namespace and enable automatic injection</h3> |
| <p>Use the following command to create an independent Namespace <code>dubbo-demo</code> for the sample project, and enable sidecar automatic injection at the same time.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># Initialize the namespace</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/Namespace.yml |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># switch namespace</span> |
| </span></span><span style="display:flex;"><span>kubens dubbo-demo |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># dubbo-demo enable automatic injection</span> |
| </span></span><span style="display:flex;"><span>kubectl label namespace dubbo-demo istio-injection<span style="color:#719e07">=</span>enabled |
| </span></span></code></pre></div><h3 id="33-deploy-to-kubernetes">3.3 Deploy to Kubernetes</h3> |
| <h4 id="331-deploy-provider">3.3.1 Deploy Provider</h4> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># Deploy the Service</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/provider/Service.yml |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># Deploy Deployment</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/provider/Deployment.yml |
| </span></span></code></pre></div><p>The above command creates a Service named <code>dubbo-samples-mesh-provider</code>, note that the service name here is the same as the dubbo application name in the project.</p> |
| <p>Then the Deployment deploys a 2-copy pod instance, and the Provider is started.</p> |
| <p>You can check the startup log with the following command.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># View pod list</span> |
| </span></span><span style="display:flex;"><span>kubectl get pods -l <span style="color:#268bd2">app</span><span style="color:#719e07">=</span>dubbo-samples-mesh-provider |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># View pod deployment logs</span> |
| </span></span><span style="display:flex;"><span>kubectl logs your-pod-id |
| </span></span></code></pre></div><p>At this time, there should be a dubbo provider container instance and an Envoy Sidecar container instance in the pod.</p> |
| <h4 id="332-deploy-consumer">3.3.2 Deploy Consumer</h4> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># Deploy the Service</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/consumer/Service.yml |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># Deploy Deployment</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/consumer/Deployment.yml |
| </span></span></code></pre></div><p>Deploying consumer and provider is the same, here also keep K8S Service and Dubbo consumer application name (in [dubbo.properties](<a href="https://github.com/apache/dubbo-samples/blob/master/3-extensions/registry">https://github.com/apache/dubbo-samples/blob/master/3-extensions/registry</a> //dubbo-samples-mesh-k8s/dubbo-samples-mesh-consumer/src/main/resources/spring/dubbo-consumer.properties) consistent: <code>dubbo.application.name=dubbo-samples-mesh- consumer</code>.</p> |
| <blockquote> |
| <p>The provider service (application) name of consumption is also specified in the Dubbo Consumer service statement <code>@DubboReference(version = &quot;1.0.0&quot;, providedBy = &quot;dubbo-samples-mesh-provider&quot;, lazy = true)</code></p> |
| </blockquote> |
| <h3 id="34-check-the-normal-communication-between-provider-and-consumer">3.4 Check the normal communication between Provider and Consumer</h3> |
| <p>After performing step 3.3, check the startup log to see that the consumer has completed consumption of the provider service.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># View pod list</span> |
| </span></span><span style="display:flex;"><span>kubectl get pods -l <span style="color:#268bd2">app</span><span style="color:#719e07">=</span>dubbo-samples-mesh-consumer |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># View pod deployment logs</span> |
| </span></span><span style="display:flex;"><span>kubectl logs your-pod-id |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># View pod isitio-proxy logs</span> |
| </span></span><span style="display:flex;"><span>kubectl logs your-pod-id -c istio-proxy |
| </span></span></code></pre></div><p>You can see that the consumer pod log output is as follows (the Triple protocol is load balanced by the Envoy proxy):</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke <span style="color:#2aa198">0</span> <span style="color:#268bd2">end</span> <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10/08/22 07:07:36:036 UTC<span style="color:#719e07">]</span> main INFO action.GreetingServiceConsumer: consumer Unary reply &lt;-message: <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.22:50052, client: 172.18. 96.22, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke <span style="color:#2aa198">1</span> <span style="color:#268bd2">end</span> <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10/08/22 07:07:42:042 UTC<span style="color:#719e07">]</span> main INFO action.GreetingServiceConsumer: consumer Unary reply &lt;-message: <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.18:50052, client: 172.18. 96.18, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span></code></pre></div><p>The consumer istio-proxy log output is as follows:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#719e07">[</span>2022-07-15T05:35:14.418Z<span style="color:#719e07">]</span> <span style="color:#2aa198">&#34;POST /org.apache.dubbo.samples.Greeter/greet HTTP/2&#34;</span> <span style="color:#2aa198">200</span> |
| </span></span><span style="display:flex;"><span>- via_upstream - <span style="color:#2aa198">&#34;-&#34;</span> <span style="color:#2aa198">19</span> <span style="color:#2aa198">160</span> <span style="color:#2aa198">2</span> <span style="color:#2aa198">1</span> <span style="color:#2aa198">&#34;-&#34;</span> <span style="color:#2aa198">&#34;-&#34;</span> <span style="color:#2aa198">&#34;6b8a5a03-5783-98bf-9bee-f93ea6e3d68e&#34;</span> |
| </span></span><span style="display:flex;"><span><span style="color:#2aa198">&#34;dubbo-samples-mesh-provider:50052&#34;</span> <span style="color:#2aa198">&#34;172.17.0.4:50052&#34;</span> |
| </span></span><span style="display:flex;"><span>outbound|50052<span style="color:#719e07">||</span>dubbo-samples-mesh-provider.dubbo-demo.svc.cluster.local 172.17.0.7:52768 10.101.172.129:50052 172.17.0.7:38488 - default |
| </span></span></code></pre></div><p>You can see the provider pod log output as follows:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#719e07">[</span>10/08/22 07:08:47:047 UTC<span style="color:#719e07">]</span> tri-protocol-50052-thread-8 INFO impl.GreeterImpl: Server <span style="color:#b58900">test</span> dubbo tri mesh received greet request name: <span style="color:#2aa198">&#34;service mesh&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10/08/22 07:08:57:057 UTC<span style="color:#719e07">]</span> tri-protocol-50052-thread-9 INFO impl.GreeterImpl: Server <span style="color:#b58900">test</span> dubbo tri mesh received greet request name: <span style="color:#2aa198">&#34;service mesh&#34;</span> |
| </span></span></code></pre></div><p>The log output of provider istio-proxy is as follows:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#719e07">[</span>2022-07-15T05:25:34.061Z<span style="color:#719e07">]</span> <span style="color:#2aa198">&#34;POST /org.apache.dubbo.samples.Greeter/greet HTTP/2&#34;</span> <span style="color:#2aa198">200</span> |
| </span></span><span style="display:flex;"><span>- via_upstream - <span style="color:#2aa198">&#34;-&#34;</span> <span style="color:#2aa198">19</span> <span style="color:#2aa198">162</span> <span style="color:#2aa198">1</span> <span style="color:#2aa198">1</span> <span style="color:#2aa198">&#34;-&#34;</span> <span style="color:#2aa198">&#34;-&#34;</span> <span style="color:#2aa198">&#34;201e6976-da10-96e1-8da7-ad032e58db47&#34;</span> |
| </span></span><span style="display:flex;"><span><span style="color:#2aa198">&#34;dubbo-samples-mesh-provider:50052&#34;</span> <span style="color:#2aa198">&#34;172.17.0.10:50052&#34;</span> |
| </span></span><span style="display:flex;"><span> inbound|50052<span style="color:#719e07">||</span> 127.0.0.6:47013 172.17.0.10:50052 172.17.0.7:60244 |
| </span></span><span style="display:flex;"><span> outbound_.50052_._.dubbo-samples-mesh-provider.dubbo-demo.svc.cluster.local default |
| </span></span></code></pre></div><h3 id="35-traffic-governance---virtualservice-implements-proportional-traffic-forwarding">3.5 Traffic Governance - VirtualService implements proportional traffic forwarding</h3> |
| <p>Deploy the v2 version of the demo provider</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/provider/Deployment-v2.yml |
| </span></span></code></pre></div><p>Set VirtualService and DestinationRule, and observe that traffic is directed to provider v1 and provider v2 respectively in a ratio of 4:1.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/3-extensions/registry/dubbo-samples-mesh-k8s/deploy/traffic/virtual-service.yml |
| </span></span></code></pre></div><p>From the log output of the consumer side, observe the traffic distribution effect as shown in the figure below:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-java" data-lang="java"><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 100 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>15<span style="color:#719e07">:</span>58<span style="color:#719e07">:</span>058 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.18:50052, client: 172.18. 96.18, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 101 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>03<span style="color:#719e07">:</span>003 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.22:50052, client: 172.18. 96.22, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 102 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>08<span style="color:#719e07">:</span>008 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.18:50052, client: 172.18. 96.18, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 103 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>13<span style="color:#719e07">:</span>013 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v2: 172.18.96.6:50052, client: 172.18. 96.6, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 104 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>18<span style="color:#719e07">:</span>018 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.22:50052, client: 172.18. 96.22, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 105 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>24<span style="color:#719e07">:</span>024 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.18:50052, client: 172.18. 96.18, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 106 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>29<span style="color:#719e07">:</span>029 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.22:50052, client: 172.18. 96.22, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 107 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>34<span style="color:#719e07">:</span>034 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.18:50052, client: 172.18. 96.18, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 108 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>39<span style="color:#719e07">:</span>039 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.22:50052, client: 172.18. 96.22, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">=====================</span> dubbo invoke 109 end <span style="color:#719e07">======================</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">[</span>10<span style="color:#719e07">/</span>08<span style="color:#719e07">/</span>22 07<span style="color:#719e07">:</span>16<span style="color:#719e07">:</span>44<span style="color:#719e07">:</span>044 UTC<span style="color:#719e07">]</span> main INFO action<span style="color:#719e07">.</span>GreetingServiceConsumer<span style="color:#719e07">:</span> consumer Unary reply <span style="color:#719e07">&lt;-</span>message<span style="color:#719e07">:</span> <span style="color:#2aa198">&#34;hello, service mesh, response from provider-v1: 172.18.96.18:50052, client: 172.18. 96.18, local: dubbo-samples-mesh-provider, remote: null, isProviderSide: true&#34;</span> |
| </span></span></code></pre></div><h3 id="36-view-dashboard">3.6 View dashboard</h3> |
| <p>See <a href="https://istio.io/latest/docs/setup/getting-started/#dashboard">How to start the dashboard</a> on the Istio official website.</p> |
| <h2 id="4-modified-example">4 Modified Example</h2> |
| <blockquote> |
| <ol> |
| <li>Modifying the example is not a necessary step, this section is for readers who want to adjust the code and see the deployment effect.</li> |
| <li>Note that the project source code storage path must be in English, otherwise protobuf compilation will fail.</li> |
| </ol> |
| </blockquote> |
| <p>Modify Dubbo Provider configuration <code>dubbo-provider.properties</code></p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span><span style="color:#586e75"># provider</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.name<span style="color:#719e07">=</span><span style="color:#2aa198">dubbo-samples-mesh-provider</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.metadataServicePort<span style="color:#719e07">=</span><span style="color:#2aa198">20885</span> |
| </span></span><span style="display:flex;"><span>dubbo.registry.address<span style="color:#719e07">=</span><span style="color:#2aa198">N/A</span> |
| </span></span><span style="display:flex;"><span>dubbo.protocol.name<span style="color:#719e07">=</span><span style="color:#2aa198">tri</span> |
| </span></span><span style="display:flex;"><span>dubbo.protocol.port<span style="color:#719e07">=</span><span style="color:#2aa198">50052</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.qosEnable<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># In order for the Kubernetes cluster to access the probe normally, it is necessary to enable QOS to allow remote access, which may bring security Risk, please carefully evaluate before opening</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.qosAcceptForeignIp<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span></code></pre></div><p>Modify Dubbo Consumer configuration <code>dubbo-consumer.properties</code></p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span><span style="color:#586e75"># consumer</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.name<span style="color:#719e07">=</span><span style="color:#2aa198">dubbo-samples-mesh-consumer</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.metadataServicePort<span style="color:#719e07">=</span><span style="color:#2aa198">20885</span> |
| </span></span><span style="display:flex;"><span>dubbo.registry.address<span style="color:#719e07">=</span><span style="color:#2aa198">N/A</span> |
| </span></span><span style="display:flex;"><span>dubbo.protocol.name<span style="color:#719e07">=</span><span style="color:#2aa198">tri</span> |
| </span></span><span style="display:flex;"><span>dubbo.protocol.port<span style="color:#719e07">=</span><span style="color:#2aa198">20880</span> |
| </span></span><span style="display:flex;"><span>dubbo.consumer.timeout<span style="color:#719e07">=</span><span style="color:#2aa198">30000</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.qosEnable<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># In order for the Kubernetes cluster to access the probe normally, it is necessary to enable QOS to allow remote access. This operation may bring security risks. Please evaluate it carefully before opening it</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.qosAcceptForeignIp<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># Flag to enable mesh sidecar proxy mode</span> |
| </span></span><span style="display:flex;"><span>dubbo.consumer.meshEnable<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span></code></pre></div><p>After completing the code modification, package the image through the Dockerfile provided by the project</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># Package and push the image</span> |
| </span></span><span style="display:flex;"><span>mvn compile jib:build |
| </span></span></code></pre></div><blockquote> |
| <p>The Jib plugin will automatically package and publish the image. Note that for local development, you need to change the docker registry organization apache/dubbo-demo in the jib plug-in configuration to an organization with your own authority (including dubboteam in other kubernetes manifests to ensure that kubernetes deploys your own customized image) , if you encounter jib plug-in authentication problems, please refer to [corresponding link](<a href="https://github.com/GoogleContainerTools/jib/blob/master/docs/faq.md#what-should-i-do-when-the-">https://github.com/GoogleContainerTools/jib/blob/master/docs/faq.md#what-should-i-do-when-the-</a> registry-responds-with-unauthorized) to configure docker registry authentication information. |
| You can specify <code>mvn compile jib:build -Djib.to.auth.username=x -Djib.to.auth.password=x -Djib.from.auth.username=x -Djib.from.auth directly on the command line .username=x</code>, or use docker-credential-helper.</p> |
| </blockquote> |
| <h2 id="5-common-commands">5 Common commands</h2> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span><span style="color:#586e75"># dump current Envoy configs</span> |
| </span></span><span style="display:flex;"><span>kubectl <span style="color:#b58900">exec</span> -it <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> pod id<span style="color:#2aa198">}</span> -c istio-proxy curl http://127.0.0.1:15000/config_dump &gt; config_dump |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># Enter the istio-proxy container</span> |
| </span></span><span style="display:flex;"><span>kubectl <span style="color:#b58900">exec</span> -it <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> pod id<span style="color:#2aa198">}</span> -c istio-proxy -- /bin/bash |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># View container logs</span> |
| </span></span><span style="display:flex;"><span>kubectl logs <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> pod id<span style="color:#2aa198">}</span> -n <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> namespace<span style="color:#2aa198">}</span> |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span>kubectl logs <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> pod id<span style="color:#2aa198">}</span> -n <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> namespace<span style="color:#2aa198">}</span> -c istio-proxy |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># Enable automatic sidecar injection</span> |
| </span></span><span style="display:flex;"><span>kubectl label namespace <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> namespace<span style="color:#2aa198">}</span> istio-injection<span style="color:#719e07">=</span>enabled --overwrite |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># Turn off automatic sidecar injection</span> |
| </span></span><span style="display:flex;"><span>kubectl label namespace <span style="color:#2aa198">${</span><span style="color:#268bd2">your</span> namespace<span style="color:#2aa198">}</span> istio-injection<span style="color:#719e07">=</span>disabled --overwrite |
| </span></span></code></pre></div><h2 id="6-notes">6 Notes</h2> |
| <ol> |
| <li>In the example, both the producer and the consumer belong to the same namespace; if you need to call a provider of a different namespace, you need to configure it as follows (<strong>dubbo version&gt;=3.1.2</strong>):</li> |
| </ol> |
| <p>Annotation method:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-java" data-lang="java"><span style="display:flex;"><span> <span style="color:#268bd2">@DubboReference</span><span style="color:#719e07">(</span>providedBy <span style="color:#719e07">=</span> <span style="color:#2aa198">&#34;istio-demo-dubbo-producer&#34;</span><span style="color:#719e07">,</span> providerPort <span style="color:#719e07">=</span> 20885<span style="color:#719e07">,</span> providerNamespace <span style="color:#719e07">=</span> <span style="color:#2aa198">&#34;istio-demo&#34;</span><span style="color:#719e07">)</span> |
| </span></span></code></pre></div><p>xml way</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-xml" data-lang="xml"><span style="display:flex;"><span><span style="color:#268bd2">&lt;dubbo:reference</span> id=<span style="color:#2aa198">&#34;demoService&#34;</span> check=<span style="color:#2aa198">&#34;true&#34;</span> |
| </span></span><span style="display:flex;"><span> interface=<span style="color:#2aa198">&#34;org.apache.dubbo.samples.basic.api.DemoService&#34;</span> |
| </span></span><span style="display:flex;"><span> provider-port=<span style="color:#2aa198">&#34;20885&#34;</span> |
| </span></span><span style="display:flex;"><span> provided-by=<span style="color:#2aa198">&#34;istio-dubbo-producer&#34;</span> |
| </span></span><span style="display:flex;"><span> provider-namespace=<span style="color:#2aa198">&#34;istio-demo&#34;</span><span style="color:#268bd2">/&gt;</span> |
| </span></span></code></pre></div></description></item><item><title>Overview: Istio + Proxyless</title><link>https://dubbo.apache.org/en/overview/tasks/mesh/proxyless/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://dubbo.apache.org/en/overview/tasks/mesh/proxyless/</guid><description> |
| <p>Proxyless mode means that Dubbo communicates directly with Istiod, and implements service discovery and service governance capabilities through the xDS protocol. |
| In this example, a simple example will be used to demonstrate how to use the Proxyless mode.</p> |
| <p><a href="https://github.com/apache/dubbo-samples/tree/master/3-extensions/registry/dubbo-samples-xds">Sample Address</a></p> |
| <h2 id="code-structure">code structure</h2> |
| <p>This section mainly introduces the code structure of the example used in this article. By imitating the relevant configuration in this example and modifying the existing project code, the existing project can quickly run in Proxyless Mesh mode.</p> |
| <h3 id="1-interface-definition">1. Interface definition</h3> |
| <p>In order to make the example simple enough, a simple interface definition is used here, and only the parameters are spliced to be returned.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-java" data-lang="java"><span style="display:flex;"><span><span style="color:#268bd2">public</span> <span style="color:#268bd2">interface</span> <span style="color:#268bd2">GreetingService</span> <span style="color:#719e07">{</span> |
| </span></span><span style="display:flex;"><span> String <span style="color:#268bd2">sayHello</span><span style="color:#719e07">(</span>String name<span style="color:#719e07">);</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">}</span> |
| </span></span></code></pre></div><h3 id="2-interface-implementation">2. Interface implementation</h3> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-java" data-lang="java"><span style="display:flex;"><span><span style="color:#268bd2">@DubboService</span><span style="color:#719e07">(</span>version <span style="color:#719e07">=</span> <span style="color:#2aa198">&#34;1.0.0&#34;</span><span style="color:#719e07">)</span> |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">public</span> <span style="color:#268bd2">class</span> <span style="color:#268bd2">AnnotatedGreetingService</span> <span style="color:#268bd2">implements</span> GreetingService <span style="color:#719e07">{</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">@Override</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">public</span> String <span style="color:#268bd2">sayHello</span><span style="color:#719e07">(</span>String name<span style="color:#719e07">)</span> <span style="color:#719e07">{</span> |
| </span></span><span style="display:flex;"><span> System<span style="color:#719e07">.</span>out<span style="color:#719e07">.</span>println<span style="color:#719e07">(</span><span style="color:#2aa198">&#34;greeting service received: &#34;</span> <span style="color:#719e07">+</span> name<span style="color:#719e07">);</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#719e07">return</span> <span style="color:#2aa198">&#34;hello, &#34;</span> <span style="color:#719e07">+</span> name <span style="color:#719e07">+</span> <span style="color:#2aa198">&#34;! from host: &#34;</span> <span style="color:#719e07">+</span> NetUtils<span style="color:#719e07">.</span> <span style="color:#268bd2">getLocalHost</span><span style="color:#719e07">();</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#719e07">}</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">}</span> |
| </span></span></code></pre></div><h3 id="3-client-subscription-method">3. Client subscription method</h3> |
| <p>**Because the native xDS protocol cannot support the mapping from interface to application name, it is necessary to configure the <code>providedBy</code> parameter to mark which application this service comes from. **</p> |
| <p>In the future, we will realize automatic <a href="https://dubbo.apache.org/en/docs3-v2/java-sdk/concepts-and-architecture/service-discovery/">service mapping</a> relationship acquisition based on the control plane of Dubbo Mesh, and there will be no need for independent configuration parameters at that time. Dubbo can be run under the Mesh system, so stay tuned.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-java" data-lang="java"><span style="display:flex;"><span><span style="color:#268bd2">@Component</span><span style="color:#719e07">(</span><span style="color:#2aa198">&#34;annotated Consumer&#34;</span><span style="color:#719e07">)</span> |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">public</span> <span style="color:#268bd2">class</span> <span style="color:#268bd2">GreetingServiceConsumer</span> <span style="color:#719e07">{</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">@DubboReference</span><span style="color:#719e07">(</span>version <span style="color:#719e07">=</span> <span style="color:#2aa198">&#34;1.0.0&#34;</span><span style="color:#719e07">,</span> providedBy <span style="color:#719e07">=</span> <span style="color:#2aa198">&#34;dubbo-samples-xds-provider&#34;</span><span style="color:#719e07">)</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">private</span> GreetingService greetingService<span style="color:#719e07">;</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">public</span> String <span style="color:#268bd2">doSayHello</span><span style="color:#719e07">(</span>String name<span style="color:#719e07">)</span> <span style="color:#719e07">{</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#719e07">return</span> greetingService<span style="color:#719e07">.</span>sayHello<span style="color:#719e07">(</span>name<span style="color:#719e07">);</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#719e07">}</span> |
| </span></span><span style="display:flex;"><span><span style="color:#719e07">}</span> |
| </span></span></code></pre></div><h3 id="4-server-configuration">4. Server configuration</h3> |
| <p>The server configuration registration center is the address of istio, and the protocol is xds.</p> |
| <p>We recommend configuring <code>protocol</code> to be the tri protocol (fully compatible with the grpc protocol) for a better experience in the istio system.</p> |
| <p>In order to make Kubernetes aware of the state of the application, it is necessary to configure <code>qosAcceptForeignIp</code> parameter so that Kubernetes can obtain the correct application state, [alignment lifecycle](/en/docs3-v2/java-sdk/advanced-features-and-usage/ others/dubbo-kubernetes-probe/).</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span>dubbo.application.name<span style="color:#719e07">=</span><span style="color:#2aa198">dubbo-samples-xds-provider</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.metadataServicePort<span style="color:#719e07">=</span><span style="color:#2aa198">20885</span> |
| </span></span><span style="display:flex;"><span>dubbo.registry.address<span style="color:#719e07">=</span><span style="color:#2aa198">xds://istiod.istio-system.svc:15012</span> |
| </span></span><span style="display:flex;"><span>dubbo.protocol.name<span style="color:#719e07">=</span><span style="color:#2aa198">tri</span> |
| </span></span><span style="display:flex;"><span>dubbo.protocol.port<span style="color:#719e07">=</span><span style="color:#2aa198">50052</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.qosAcceptForeignIp<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span></code></pre></div><h3 id="5-client-configuration">5. Client Configuration</h3> |
| <p>The client configuration registration center is the address of istio, and the protocol is xds.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span>dubbo.application.name<span style="color:#719e07">=</span><span style="color:#2aa198">dubbo-samples-xds-consumer</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.metadataServicePort<span style="color:#719e07">=</span><span style="color:#2aa198">20885</span> |
| </span></span><span style="display:flex;"><span>dubbo.registry.address<span style="color:#719e07">=</span><span style="color:#2aa198">xds://istiod.istio-system.svc:15012</span> |
| </span></span><span style="display:flex;"><span>dubbo.application.qosAcceptForeignIp<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span></code></pre></div><h2 id="quick-start">Quick start</h2> |
| <h3 id="step-1-build-the-kubernetes-environment">Step 1: Build the Kubernetes environment</h3> |
| <p>Currently Dubbo only supports Mesh deployment in the Kubernetes environment, so you need to build the Kubernetes environment before running and starting this example.</p> |
| <p>Build reference documents:</p> |
| <blockquote> |
| <p><a href="https://kubernetes.io/zh-cn/docs/tutorials/hello-minikube/">minikube(https://kubernetes.io/zh-cn/docs/tutorials/hello-minikube/)</a></p> |
| <p>[kubeadm(https://kubernetes.io/zh-cn/docs/setup/production-environment/tools/)](<a href="https://kubernetes.io/zh-cn/docs/setup/production-environment/tools">https://kubernetes.io/zh-cn/docs/setup/production-environment/tools</a> /)</p> |
| <p><a href="https://k3s.io/">k3s(https://k3s.io/)</a></p> |
| </blockquote> |
| <h3 id="step-2-build-the-istio-environment">Step 2: Build the Istio environment</h3> |
| <p>Build the Istio environment reference document:</p> |
| <p><a href="https://istio.io/latest/docs/setup/getting-started/">Istio Installation Documentation (https://istio.io/latest/docs/setup/getting-started/)</a></p> |
| <p>Note: When installing Istio, you need to enable [first-party-jwt support](<a href="https://istio.io/latest/docs/ops/best-practices/security/#configure-third-party-service-account-">https://istio.io/latest/docs/ops/best-practices/security/#configure-third-party-service-account-</a> tokens) (add the parameter <code>--set values.global.jwtPolicy=first-party-jwt</code> when using the <code>istioctl</code> tool to install)**, otherwise it will cause the problem of client authentication failure.</p> |
| <p>Attached installation command reference:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>curl -L https://istio.io/downloadIstio | sh - |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">cd</span> istio-1.xx.x |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">export</span> <span style="color:#268bd2">PATH</span><span style="color:#719e07">=</span><span style="color:#268bd2">$PWD</span>/bin:<span style="color:#268bd2">$PATH</span> |
| </span></span><span style="display:flex;"><span>istioctl install --set <span style="color:#268bd2">profile</span><span style="color:#719e07">=</span>demo --set values.global.jwtPolicy<span style="color:#719e07">=</span>first-party-jwt -y |
| </span></span></code></pre></div><h3 id="step-3-pull-the-code-and-build">Step 3: Pull the code and build</h3> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>git clone https://github.com/apache/dubbo-samples.git |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">cd</span> dubbo-samples/dubbo-samples-xds |
| </span></span><span style="display:flex;"><span>mvn clean package -DskipTests |
| </span></span></code></pre></div><h3 id="step-4-build-the-image">Step 4: Build the image</h3> |
| <p>Since Kubernetes adopts containerized deployment, the code needs to be packaged in a mirror before deployment.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#b58900">cd</span> ./dubbo-samples-xds-provider/ |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># dubbo-samples-xds/dubbo-samples-xds-provider/Dockerfile</span> |
| </span></span><span style="display:flex;"><span>docker build -t apache/dubbo-demo:dubbo-samples-xds-provider_0.0.1 . |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">cd</span> ../dubbo-samples-xds-consumer/ |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># dubbo-samples-xds/dubbo-samples-xds-consumer/Dockerfile</span> |
| </span></span><span style="display:flex;"><span>docker build -t apache/dubbo-demo:dubbo-samples-xds-consumer_0.0.1 . |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">cd</span> ../ |
| </span></span></code></pre></div><h3 id="step-5-create-namespace">Step 5: Create namespace</h3> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#586e75"># Initialize the namespace</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f https://raw.githubusercontent.com/apache/dubbo-samples/master/dubbo-samples-xds/deploy/Namespace.yml |
| </span></span><span style="display:flex;"><span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># switch namespace</span> |
| </span></span><span style="display:flex;"><span>kubens dubbo-demo |
| </span></span></code></pre></div><h3 id="step-6-deploy-the-container">Step 6: Deploy the container</h3> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span><span style="color:#b58900">cd</span> ./dubbo-samples-xds-provider/src/main/resources/k8s |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># dubbo-samples-xds/dubbo-samples-xds-provider/src/main/resources/k8s/Deployment.yml</span> |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># dubbo-samples-xds/dubbo-samples-xds-provider/src/main/resources/k8s/Service.yml</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f Deployment.yml |
| </span></span><span style="display:flex;"><span>kubectl apply -f Service.yml |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">cd</span> ../../../../../dubbo-samples-xds-consumer/src/main/resources/k8s |
| </span></span><span style="display:flex;"><span><span style="color:#586e75"># dubbo-samples-xds/dubbo-samples-xds-consumer/src/main/resources/k8s/Deployment.yml</span> |
| </span></span><span style="display:flex;"><span>kubectl apply -f Deployment.yml |
| </span></span><span style="display:flex;"><span><span style="color:#b58900">cd</span> ../../../../../ |
| </span></span></code></pre></div><p>Looking at the log of the consumer, you can observe the following log:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-fallback" data-lang="fallback"><span style="display:flex;"><span>result: hello, xDS Consumer! from host: 172.17.0.5 |
| </span></span><span style="display:flex;"><span>result: hello, xDS Consumer! from host: 172.17.0.5 |
| </span></span><span style="display:flex;"><span>result: hello, xDS Consumer! from host: 172.17.0.6 |
| </span></span><span style="display:flex;"><span>result: hello, xDS Consumer! from host: 172.17.0.6 |
| </span></span></code></pre></div><h2 id="common-problem">common problem</h2> |
| <ol> |
| <li>Configure a separate Istio cluster <code>clusterId</code></li> |
| </ol> |
| <p>Usually the <code>clusterId</code> of Istio under the Kubernetes system is <code>Kubernetes</code>, if you are using a self-built istio production cluster or a cluster provided by a cloud vendor, you may need to configure <code>clusterId</code>.</p> |
| <p>Configuration method: Specify the <code>ISTIO_META_CLUSTER_ID</code> environment variable as the desired <code>clusterId</code>.</p> |
| <p>Reference configuration:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#268bd2">apiVersion</span>: apps/v1 |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">kind</span>: Deployment |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">metadata</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">name</span>: dubbo-samples-xds-consumer |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">spec</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">selector</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">matchLabels</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">demo</span>: consumer |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">replicas</span>: <span style="color:#2aa198">2</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">template</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">metadata</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">labels</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">demo</span>: consumer |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">spec</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">containers</span>: |
| </span></span><span style="display:flex;"><span> - <span style="color:#268bd2">env</span>: |
| </span></span><span style="display:flex;"><span> - <span style="color:#268bd2">name</span>: ISTIO_META_CLUSTER_ID |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">value</span>: Kubernetes |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">name</span>: dubbo-samples-xds-provider |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">image</span>: xxx |
| </span></span></code></pre></div><p>How to get <code>clusterId</code>:</p> |
| <blockquote> |
| <p>kubectl describe pod -n istio-system istiod-58b4f65df9-fq2ks |
| Read the value of <code>CLUSTER_ID</code> in the environment variable</p> |
| </blockquote> |
| <ol start="2"> |
| <li>Istio authentication failed</li> |
| </ol> |
| <p>Since the current Dubbo version does not support istio&rsquo;s <code>third-party-jwt</code> authentication, it is necessary to configure <code>jwtPolicy</code> to <code>first-party-jwt</code>.</p> |
| <ol start="3"> |
| <li>providedBy</li> |
| </ol> |
| <p>Since the current Dubbo version is limited by the communication model of istio and cannot obtain the application name corresponding to the interface, it is necessary to configure the <code>providedBy</code> parameter to mark which application the service comes from. |
| In the future, we will realize automatic <a href="https://dubbo.apache.org/en/docs3-v2/java-sdk/concepts-and-architecture/service-discovery/">service mapping</a> relationship acquisition based on the control plane of Dubbo Mesh, and there will be no need for independent configuration parameters at that time. Dubbo can be run under the Mesh system, so stay tuned.</p> |
| <ol start="4"> |
| <li>protocol name</li> |
| </ol> |
| <p>In Proxyless mode, application-level service discovery uses <code>Kubernetes Native Service</code> for application service discovery, but due to the limitation of istio, it currently only supports traffic interception and forwarding of <code>http</code> protocol and <code>grpc</code> protocol, so <code>Kubernetes Service</code> is configured in When you need to specify the <code>spec.ports.name</code> property to start with <code>http</code> or <code>grpc</code>. |
| Therefore we recommend using the triple protocol (fully compatible with the grpc protocol). Here, even if <code>name</code> is configured to start with <code>grpc</code>, it is actually a <code>dubbo</code> protocol that can also perform normal service discovery, but it affects the function of traffic routing.</p> |
| <p>Reference configuration:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#268bd2">apiVersion</span>: v1 |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">kind</span>: Service |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">metadata</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">name</span>: dubbo-samples-xds-provider |
| </span></span><span style="display:flex;"><span><span style="color:#268bd2">spec</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">clusterIP</span>: None |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">selector</span>: |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">demo</span>: provider |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">ports</span>: |
| </span></span><span style="display:flex;"><span> - <span style="color:#268bd2">name</span>: grpc-tri |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">protocol</span>: TCP |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">port</span>: <span style="color:#2aa198">50052</span> |
| </span></span><span style="display:flex;"><span> <span style="color:#268bd2">targetPort</span>: <span style="color:#2aa198">50052</span> |
| </span></span></code></pre></div><ol start="5"> |
| <li>metadataServicePort</li> |
| </ol> |
| <p>Since the metadata discovered by Dubbo 3 application-level services cannot be obtained from istio, it is necessary to use the service introspection mode. This requires that the port of <code>Dubbo MetadataService</code> is unified in the whole cluster.</p> |
| <p>Reference configuration:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span>dubbo.application.metadataServicePort<span style="color:#719e07">=</span><span style="color:#2aa198">20885</span> |
| </span></span></code></pre></div><p>In the future, we will realize automatic acquisition of <a href="https://dubbo.apache.org/en/docs3-v2/java-sdk/concepts-and-architecture/service-discovery/">service metadata</a> based on the control plane of Dubbo Mesh, and no independent configuration parameters will be required at that time. Dubbo can be run under the Mesh system, so stay tuned.</p> |
| <ol start="6"> |
| <li>qosAcceptForeignIp</li> |
| </ol> |
| <p>Due to the limitations of the working principle of the Kubernetes probe detection mechanism, the originator of the detection request is not <code>localhost</code>, so you need to configure the <code>qosAcceptForeignIp</code> parameter to enable global access.</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span>dubbo.application.qosAcceptForeignIp<span style="color:#719e07">=</span><span style="color:#2aa198">true</span> |
| </span></span></code></pre></div><p>Note: There are dangerous commands on the qos port, please evaluate the security of the network first. Even if the qos is not open, it only affects the inability of Kubernetes to obtain the life cycle status of Dubbo.</p> |
| <ol start="7"> |
| <li>Do not need to enable injection</li> |
| </ol> |
| <p>In Proxyless mode, the pod does not need to enable envoy injection. Please make sure that there is no <code>istio-injection=enabled</code> label in the namespace.</p> |
| <ol start="8"> |
| <li>Plain text connection istiod</li> |
| </ol> |
| <p>In Proxyless mode, connect to istiod through ssl by default, and also support connecting to istiod through clear text.</p> |
| <p>Plain text connection reference configuration:</p> |
| <div class="highlight"><pre tabindex="0" style="color:#93a1a1;background-color:#002b36;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-properties" data-lang="properties"><span style="display:flex;"><span>dubbo.registry.secure<span style="color:#719e07">=</span><span style="color:#2aa198">plaintext</span> |
| </span></span></code></pre></div></description></item></channel></rss> |
