0 views collected around this technical thread.
This article introduces six indispensable tools—kubectl, Helm, Prometheus + Grafana, Istio, Velero, and K9s—that simplify Kubernetes cluster management by covering resource handling, monitoring, networking, security, backup, and interactive UI, helping readers efficiently operate production‑grade clusters.
This article traces the evolution of internet architecture from monolithic and MVC designs through multi‑application and distributed systems, explains service‑oriented architecture and its benefits, introduces Dubbo‑based service governance, and outlines the core concepts, features, and implementation approaches of microservices.
The article examines Meta’s warning that current microservice architectures will struggle with the upcoming AI explosion, outlines the performance, scalability, and cost challenges, and proposes serverless, service mesh, and hybrid redesigns as potential solutions.
This article explains how to use Alibaba Cloud Service Mesh (ASM) traffic‑scheduling suite to implement rich traffic‑control scenarios such as per‑user rate limiting, request queuing and priority scheduling in a Kubernetes environment, providing step‑by‑step deployment, configuration and verification instructions.
The article explains what a service mesh is, its core components, key capabilities such as traffic management, security, observability, and resilience, reviews major tools like Istio, Linkerd and Consul Connect, and discusses the operational challenges and future directions within cloud‑native environments.
The article examines how microservice architecture, as a subset of distributed systems, expands the attack surface and introduces data fragmentation and communication complexities, and outlines comprehensive security strategies—including API protection, service‑to‑service encryption, infrastructure hardening, authentication, vulnerability management, and emerging technologies like service mesh and serverless computing—to safeguard modern applications.
This article explains how Alibaba Cloud Service Mesh (ASM) can be extended using EnvoyFilter, Lua scripts, WebAssembly plugins, External Processing filters, and custom authorization services, detailing their capabilities, limitations, and recommended use cases for cloud‑native microservice environments.
This guide explains how to handle service‑level failures in Kubernetes by using Alibaba Cloud Service Mesh (ASM) to automatically detect faults, shift traffic based on geographic priority, and implement various multi‑cluster, multi‑region, and multi‑cloud topologies for high availability.
This guide explains how to achieve zone‑level disaster recovery on Alibaba Cloud by deploying multi‑AZ ACK clusters, configuring Service Mesh ASM for observability and traffic shifting, and using Prometheus‑based metrics and alerts to detect and isolate failures, including step‑by‑step instructions and sample YAML manifests.
This guide explains how to design and implement a multi‑region disaster‑recovery solution on Alibaba Cloud by deploying identical Kubernetes clusters, configuring ASM ingress gateways with global traffic manager (GTM) for automatic failover, enabling intra‑cluster traffic retention, and validating the setup with load‑testing tools.
This article explains how to handle intermittent 5xx errors and request timeouts in complex internet services using Istio service mesh, covering system availability levels, retry mechanisms, timeout settings, and concrete VirtualService configurations to improve reliability and user experience.
This article explains how to design a highly available business system on Alibaba Cloud by leveraging multi‑availability‑zone deployments, ASM circuit‑breaking and rate‑limiting, and multi‑region multi‑cluster service‑mesh strategies to ensure resilience against both AZ‑level and region‑level failures.
This guide explains how to implement full‑link gray release using Alibaba Service Mesh (ASM) swimlane isolation together with the open‑source Kruise Rollout framework, providing step‑by‑step configurations, Kubernetes manifests, and command‑line examples for traffic routing, canary deployments, and rollback in a cloud‑native environment.
Tencent's PolarisMesh showcases cloud-native microservice governance by detailing the shift from monoliths to containerized services, outlining service splitting principles, Kubernetes deployment, dynamic routing, fault isolation, and real-world case studies that demonstrate cost savings, reliability improvements, and open-source availability.
This article shares practical guidance on rolling out Istio service mesh to over ten business lines, covering selection of pilot projects, benefit analysis using access logs, sidecar injection, performance and resource impact, multi‑region active‑active architecture benefits, and rapid fault‑recovery tactics.
This guide explains how to use Kmesh, an eBPF‑based high‑performance service‑mesh data plane, with Alibaba Cloud ASM by configuring the control plane, deploying the Kmesh DaemonSet, setting required environment variables, and verifying traffic routing and service status.
This article explains how Service Mesh can use traffic coloring to route requests based on headers, cookies, or query parameters, enabling safe canary releases, diversified version testing, and isolated QA environments in complex production systems.
This tutorial walks you through connecting a test machine, downloading and installing Istio 1.8.6, configuring environment variables, deploying the BookInfo sample application, verifying pods and services, setting up inbound traffic, exposing dashboards, and introduces Istio’s core traffic‑management capabilities.
This article shares Soul's two‑year practice of using the cloud‑native Envoy proxy for high‑performance, high‑throughput, and highly available traffic management across north‑south and east‑west flows, covering architecture, dynamic service discovery, load balancing, health checks, WASM extensions, service‑mesh integration, Redis proxying, and future directions.
This article explains the fundamentals of Service Mesh and Istio, covering their architecture, control‑plane and data‑plane components, deployment modes, key capabilities such as traffic control and security, and the interaction workflow that enables modern cloud‑native microservice environments.