EC2，S3，Route53 • OpenStack • CloudStack • 混合云 以应用为中心： • Heroku • GAE • CloudFoundry 容器时代： • Docker • Kubernetes • CaaS • Container Instance in cloud provider • DockerHub What’s Next? servicecomb.apache apache.org github.com/apache?q=servicecomb ServiceStage overall ServiceStage 微服务解决方案 容器云平台（CCE） Serverless云平台（CCI） 微服务咨询 现状分析 适用性评估 试点实施 效果评估 经验固化 目标设定 培 训 （ 理 论 、 案 例 、 实 战 演 练 ） 应用管理平台（CAS）

Development • Kubernetes Deployment • Test and Verification Huawei Confidential 3 Case of Quick Microservice Development Consumer Mesher Provider Java- chassis Service Center Kubernetes Mesher Sidecar-injector Deployment: Sidecar-injector Principles 8 Pod A Mesher A Sidecar- injector Kubernetes AdmissionWebhook Prerequisites: • Kubernetes 1.9 or later is used. • MutatingAdmissionWebhook and ValidatingAdmissionWebhook go-archaius Config sources CSE Apollo File system Command line ... Huawei Confidential Kubernetes Deployment 10 Provider • Deployment • Service Consumer • Deployment • Service Apollo •

ServiceComb - Istio - Promethues - Zipkin - HUAWEI CLOUD Heterogeneous Infrastructure - CCE - Kubernetes - Docker - VM - Bare metal Huawei Confidential 8 Registration and Discovery - Unified cache center Service center Governance Web Console Monitoring Zipkin Huawei APM Prometheus Grafana Kubernetes Java chassis Service Go chassis Service VM Bare metal CCE ServiceStage API gateway Governance the Mixer service but directly connect to different ecosystems. 13 Kubernetes Master 14 Deployment — Community Solution Kubernetes Node Pod Service Mesher kubectl Sidecar Injector Create Kube

Registry - Protocol - 监控 - 安全 拥抱生态 - ServiceComb - Istio - Promethues - Zipkin - 华为云 异构基础设施 - CCE - Kubernetes - Docker - VM - Bare metal Huawei Confidential 8 注册发现 - 统一缓存模型 - 可灵活选择客户端注册发现，与平台注册 Registrator center Service center Governance Web Console Monitoring Zipkin Huawei APM Prometheus Grafana Kubernetes Java chassis Service Go chassis Service VM Bare metal CCE ServiceStage API gateway Governance o提供侵入式框架 - 不使用Iptables转发 - 不接入Mixer服务，而是直接接入不同生态系统 13 Huawei Confidential Kubernetes Master 14 部署-社区方案 Kubernetes Node Pod Service Mesher kubectl Side car Injector create KubeAPI server

FusionSphere ServiceStage Governance UX Monitoring Zipkin Huawei APM Prometheus Grafana Physical Kubernetes Design Goal • 尽可能提供定制化 • 减少对业务影响 • ⾼高性能 • 使服务可视化 • 使服务更具弹性 Data Plane 即Mesher组件本⾝身，对所有请求进⾏行处 实现⼀一个Service Mesh • 使⽤用Service Mesh快速构建微服务 • ⽣生态与扩展 • Service Mesh在华为内部的技术演进 部署 • 本地或虚机部署: 样例 • kubernetes部署 • ServiceStage部署 最⼩小化配置项 • HTTP_PROXY • SERVICE_NAME • PROVIDER_ADDR • CSE_REGISTRY_ADDR 与ServiceComb侵⼊入式框架对⽐比 Mesher与普通应⽤用性能对⽐比 为何性能下降依然要使⽤用 ServiceMesh？ 为什么要开发Mesher • Istio的性能问题 • Istio强绑定Kubernetes平台（1.7.4+） • 从成本⾓角度讲Linkerd并不适合做SideCar部署，JVM资源占⽤用较多 • 在ServiceComb和CSE中的积累 • 最⼤大优势，侵⼊入式与⾮非侵

������������������ QPS� • ���������������������������OSP����� � ����� ���� ����� API �� ������ �������� ��� Kubernetes+Docker ������������������ �� �� ���������OSP���� proxy ����������������� ��������������� Service Kubernets���� 云平台 存储 主机层 宿主机管理 网络 容器层 Docker Docker Noah������Docker���� ���� kubernetes���� ������ 0oah容器云镜x存储h及分发 ��IDC� CI���� Harbor A� IDC1� Harbor B1� VOS� IDC2� Harbor 0oah容器云自动扩缩容QH2A算法） TargetNumOfPods = ceil(sum(CurrentPodsCPUUtilization) / Target) � ��Kubernetes�HPA�Horizontal Pod Autoscaling���� ����������� CurrentPodsCPUUtilization�����pod�CPU���� Target������CPU�����

�����1�� Huawei Confidential 3 ��������� Consumer Mesher Provider Java-chassis Service Center Kubernetes Mesher Sidecar-injector Frontend Huawei Confidential 4 ����.����� • be����������.�������.��MD����� mesher go-archaius ������ ������� CSE Apollo File system Command line …… Huawei Confidential Kubernetes�� 10 Provider • deployment • service Consumer • deployment • service Apollo • deployment

node.js,golang � dockerfile mysql,pgsql,mongodb,redis,memcache � docker 服务语言 数据存储 ������ � kubernetes 服务编排 �� �� ��� �� �� �� 服务管理 ������� > < WWW.GOODRAIN.COM ���� 24 ���� ��� �� ���� ����

Service center Governance Web Console Monitoring Zipkin Huawei APM Prometheus Grafana Kubernetes Go SDK Service Go SDK Service VM Bare metal CCE ServiceStage API gateway Data Plane 即侵入式框架与非侵入式

Registry - Protocol - 监控 - 安全 拥抱生态 - ServiceComb - Istio - Promethues - Zipkin - 华为云 异构基础设施 - CCE - Kubernetes - Docker - VM - Bare metal 4 github.com/apache?q=servicecomb servicecomb.apache.org 用户输入 第三方