<div id="readability-page-1" class="page"><div>
	 

December 20, 2022
교육
v1.0Istio의 핵심 컴포넌트, Envoy proxy를 실습을 통해 이해하는 시간을 가져봅니다.



<h2 id="개요">개요</h2>

<ul>
 <li>실습 git: <a href="https://github.com/istioinaction/book-source-code">https://github.com/istioinaction/book-source-code</a></li>
 <li>출처 : Istio in Action 챕터3</li>
</ul>

<h2 id="실습">실습</h2>

<h3 id="실습1-envoy-proxy-실행">실습1. Envoy proxy 실행</h3>

envoy 및 앱(이하, httpbin), curl 다운로드

<div><pre><code>docker pull envoyproxy/envoy:v1.19.0
docker pull curlimages/curl
docker pull citizenstig/httpbin
</code></pre></div>

httpbin 기동

<div><pre><code>docker run -d --name httpbin citizenstig/httpbin
</code></pre></div>

curl 로 httpbin 확인

<div><pre><code>docker run -it --rm --link httpbin curlimages/curl \
curl -X GET http://httpbin:8000/headers
</code></pre></div>

Envoy 설정

<div><pre><code># vi ch3/simple.yaml

admin:
 address:
 socket_address: { address: 0.0.0.0, port_value: 15000 }

static_resources:
 listeners:
 - name: httpbin-demo
 address:
 socket_address: { address: 0.0.0.0, port_value: 15001 }
 filter_chains:
 - filters:
 - name: envoy.filters.network.http_connection_manager
 typed_config:
 "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
 stat_prefix: ingress_http
 http_filters:
 - name: envoy.filters.http.router
 route_config:
 name: httpbin_local_route
 virtual_hosts:
 - name: httpbin_local_service
 domains: ["*"]
 routes:
 - match: { prefix: "/" }
 route:
 auto_host_rewrite: true
 cluster: httpbin_service
 clusters:
 - name: httpbin_service
 connect_timeout: 5s
 type: LOGICAL_DNS
 dns_lookup_family: V4_ONLY
 lb_policy: ROUND_ROBIN
 load_assignment:
 cluster_name: httpbin
 endpoints:
 - lb_endpoints:
 - endpoint:
 address:
 socket_address:
 address: httpbin
 port_value: 8000
</code></pre></div>

Envoy 기동

<div><pre><code>docker run --name proxy --link httpbin envoyproxy/envoy:v1.19.0 \
--config-yaml "$(cat ch3/simple.yaml)"
</code></pre></div>

curl 로 Envoy 호출 확인

<div><pre><code>docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:8000/headers
</code></pre></div>

Envoy 중지



<h3 id="실습2-envoy-proxy-타임아웃-설정">실습2. Envoy proxy 타임아웃 설정</h3>

simple.yaml 에서 타임아웃만 1초로 변경해 봅니다.

<div><pre><code># vi ch3/simple_change_timeout.yaml

admin:
 address:
 socket_address: { address: 0.0.0.0, port_value: 15000 }

static_resources:
 listeners:
 - name: httpbin-demo
 address:
 socket_address: { address: 0.0.0.0, port_value: 15001 }
 filter_chains:
 - filters:
 - name: envoy.filters.network.http_connection_manager
 typed_config:
 "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
 stat_prefix: ingress_http
 http_filters:
 - name: envoy.filters.http.router
 route_config:
 name: httpbin_local_route
 virtual_hosts:
 - name: httpbin_local_service
 domains: ["*"]
 routes:
 - match: { prefix: "/" }
 route:
 auto_host_rewrite: true
 cluster: httpbin_service
 timeout: 1s
 clusters:
 - name: httpbin_service
 connect_timeout: 5s
 type: LOGICAL_DNS
 dns_lookup_family: V4_ONLY
 lb_policy: ROUND_ROBIN
 load_assignment:
 cluster_name: httpbin
 endpoints:
 - lb_endpoints:
 - endpoint:
 address:
 socket_address:
 address: httpbin
 port_value: 8000
</code></pre></div>

Envoy 기동

<div><pre><code>docker run --name proxy --link httpbin envoyproxy/envoy:v1.19.0 \
--config-yaml "$(cat ch3/simple_change_timeout.yaml)"
</code></pre></div>

curl로 Envoy 호출 (타임아웃 설정 변경 확인)

<div><pre><code>docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:15001/headers
</code></pre></div>

<h3 id="실습3-envoy-admin-api">실습3 Envoy Admin API</h3>

admin API로 Envoy stat 확인

<div><pre><code>docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:15000/stats | grep retry
</code></pre></div>

retry 설정 수정

<div><pre><code># vi ch3/simple_retry.yaml

admin:
 address:
 socket_address: { address: 0.0.0.0, port_value: 15000 }

static_resources:
 listeners:
 - name: httpbin-demo
 address:
 socket_address: { address: 0.0.0.0, port_value: 15001 }
 filter_chains:
 - filters:
 - name: envoy.filters.network.http_connection_manager
 typed_config:
 "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
 stat_prefix: ingress_http
 http_filters:
 - name: envoy.filters.http.router
 route_config:
 name: httpbin_local_route
 virtual_hosts:
 - name: httpbin_local_service
 domains: ["*"]
 routes:
 - match: { prefix: "/" }
 route:
 auto_host_rewrite: true
 cluster: httpbin_service
 retry_policy:
 retry_on: 5xx
 num_retries: 3
 clusters:
 - name: httpbin_service
 connect_timeout: 5s
 type: LOGICAL_DNS
 dns_lookup_family: V4_ONLY
 lb_policy: ROUND_ROBIN
 load_assignment:
 cluster_name: httpbin
 endpoints:
 - lb_endpoints:
 - endpoint:
 address:
 socket_address:
 address: httpbin
 port_value: 8000
</code></pre></div>

Envoy 재기동 (retry 설정적용)

<div><pre><code>docker rm -f proxy

docker run --name proxy --link httpbin envoyproxy/envoy:v1.19.0 \
--config-yaml "$(cat ch3/simple_retry.yaml)"
</code></pre></div>

설정 적용 확인

<div><pre><code>docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:15000/stats | grep retry
</code></pre></div>











	
 

 
 </div></div>

netpple

Istio의 핵심 컴포넌트, Envoy proxy를 실습을 통해 이해하는 시간을 가져봅니다.
개요
실습 git: https://github.com/istioinaction/book-source-code
출처 : Istio in Action 챕터3
실습
실습1. Envoy proxy 실행
envoy 및 앱(이하, httpbin), curl 다운로드
docker pull envoyproxy/envoy:v1.19.0
docker pull curlimages/curl
docker pull citizenstig/httpbin
httpbin 기동
docker run -d --name httpbin citizenstig/httpbin
curl 로 httpbin 확인
docker run -it --rm --link httpbin curlimages/curl \
curl -X GET http://httpbin:8000/headers
Envoy 설정
# vi ch3/simple.yaml
admin:
  address:
    socket_address: { address: 0.0.0.0, port_value: 15000 }
static_resources:
  listeners:
  - name: httpbin-demo
    address:
      socket_address: { address: 0.0.0.0, port_value: 15001 }
    filter_chains:
    - filters:
      - name:  envoy.filters.network.http_connection_manager
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
          stat_prefix: ingress_http
          http_filters:
          - name: envoy.filters.http.router
          route_config:
            name: httpbin_local_route
            virtual_hosts:
            - name: httpbin_local_service
              domains: ["*"]
              routes:
              - match: { prefix: "/" }
                route:
                  auto_host_rewrite: true
                  cluster: httpbin_service
  clusters:
    - name: httpbin_service
      connect_timeout: 5s
      type: LOGICAL_DNS
      dns_lookup_family: V4_ONLY
      lb_policy: ROUND_ROBIN
      load_assignment:
        cluster_name: httpbin
        endpoints:
        - lb_endpoints:
          - endpoint:
              address:
                socket_address:
                  address: httpbin
                  port_value: 8000
Envoy 기동
docker run --name proxy --link httpbin envoyproxy/envoy:v1.19.0 \
--config-yaml "$(cat ch3/simple.yaml)"
curl 로 Envoy 호출 확인
docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:8000/headers
Envoy 중지
docker rm -f proxy
실습2. Envoy proxy 타임아웃 설정
simple.yaml 에서 타임아웃만 1초로 변경해 봅니다.
# vi ch3/simple_change_timeout.yaml
admin:
  address:
    socket_address: { address: 0.0.0.0, port_value: 15000 }
static_resources:
  listeners:
  - name: httpbin-demo
    address:
      socket_address: { address: 0.0.0.0, port_value: 15001 }
    filter_chains:
    - filters:
      - name:  envoy.filters.network.http_connection_manager
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
          stat_prefix: ingress_http
          http_filters:
          - name: envoy.filters.http.router
          route_config:
            name: httpbin_local_route
            virtual_hosts:
            - name: httpbin_local_service
              domains: ["*"]
              routes:
              - match: { prefix: "/" }
                route:
                  auto_host_rewrite: true
                  cluster: httpbin_service
                  timeout: 1s
  clusters:
    - name: httpbin_service
      connect_timeout: 5s
      type: LOGICAL_DNS
      dns_lookup_family: V4_ONLY
      lb_policy: ROUND_ROBIN
      load_assignment:
        cluster_name: httpbin
        endpoints:
        - lb_endpoints:
          - endpoint:
              address:
                socket_address:
                  address: httpbin
                  port_value: 8000
Envoy 기동
docker run --name proxy --link httpbin envoyproxy/envoy:v1.19.0 \
--config-yaml "$(cat ch3/simple_change_timeout.yaml)"
curl로 Envoy 호출 (타임아웃 설정 변경 확인)
docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:15001/headers
실습3 Envoy Admin API
admin API로 Envoy stat 확인
docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:15000/stats | grep retry
retry 설정 수정
# vi ch3/simple_retry.yaml
admin:
  address:
    socket_address: { address: 0.0.0.0, port_value: 15000 }
static_resources:
  listeners:
  - name: httpbin-demo
    address:
      socket_address: { address: 0.0.0.0, port_value: 15001 }
    filter_chains:
    - filters:
      - name:  envoy.filters.network.http_connection_manager
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
          stat_prefix: ingress_http
          http_filters:
          - name: envoy.filters.http.router
          route_config:
            name: httpbin_local_route
            virtual_hosts:
            - name: httpbin_local_service
              domains: ["*"]
              routes:
              - match: { prefix: "/" }
                route:
                  auto_host_rewrite: true
                  cluster: httpbin_service
                  retry_policy:
                      retry_on: 5xx
                      num_retries: 3
  clusters:
    - name: httpbin_service
      connect_timeout: 5s
      type: LOGICAL_DNS
      dns_lookup_family: V4_ONLY
      lb_policy: ROUND_ROBIN
      load_assignment:
        cluster_name: httpbin
        endpoints:
        - lb_endpoints:
          - endpoint:
              address:
                socket_address:
                  address: httpbin
                  port_value: 8000
Envoy 재기동 (retry 설정적용)
docker rm -f proxy
docker run --name proxy --link httpbin envoyproxy/envoy:v1.19.0 \
--config-yaml "$(cat ch3/simple_retry.yaml)"
설정 적용 확인
docker run -it --rm --link proxy curlimages/curl \
curl -X GET http://proxy:15000/stats | grep retry

Envoy 실습

댓글