Consul: Up and Running

Cover
Copyright
Table of Contents
Foreword
Preface
	Who Should Read This Book
	Navigating This Book
	What Is Not in This Book
	Conventions Used in This Book
	Using Code Examples
	O’Reilly Online Learning
	How to Contact Us
	Acknowledgments
Chapter 1. Service Mesh 101
	How a Service Mesh Works
		Sidecar Proxies
		Control Plane
		Concrete Example
	Why Use a Service Mesh
		Security
		Observability
		Reliability
		Traffic Control
		Features in Combination
	When to Use a Service Mesh
	Summary
Chapter 2. Introduction to Consul
	Architecture
		Consul Servers
		Consul Clients
		Sidecar Proxies
		Example Use Case
	Consul Versus Other Meshes
	Consul’s Other Features
	Summary
Chapter 3. Deploying Consul
	Deploying Consul on Kubernetes
		Provisioning a Kubernetes Cluster
		Installing Consul with the consul-k8s CLI
	Deploying Consul on VMs
		Provisioning a Local VM
		Installing and Configuring Consul
		systemd
	Interacting with Consul
		Consul’s UI
		Consul’s CLI
		Consul’s API
	Summary
Chapter 4. Adding Services to the Mesh
	Birdwatcher Example Service
	Deploying Services on Kubernetes
	Adding Kubernetes Services to the Mesh
	Deploying Services on VMs
	Registering VM Services with Consul
	Deploying Sidecar Proxies on VMs
	Configuring Routing on VMs
	Summary
Chapter 5. Ingress Gateways
	Why You Need an Ingress Gateway
	Deploying an Ingress Gateway on Kubernetes
	Deploying an Ingress Gateway on VMs
	Config Entries
		Config Entries on Kubernetes
		Config Entries on VMs
	Configuring Ingress Gateways
		Configuring Ingress Gateways on Kubernetes
		Configuring Ingress Gateways on VMs
	Testing Out Your Ingress Gateway
	Ingress Gateways in Production
	Summary
Chapter 6. Security
	Zero Trust Networking
	Encryption
		TLS Encryption
		Consul Encryption
	Authentication
	Authorization and Intentions
		Configuring Intentions with Consul’s UI
		Configuring Intentions with Config Entries
		Application Aware Intentions
	Summary
Chapter 7. Observability
	Metrics
		Deploying and Configuring Prometheus
		Emitting Metrics
		Viewing Consul UI Metrics
		Grafana
	Distributed Tracing
		How Tracing Works
		Instrumenting Your Services
		Tracing Collectors
		Viewing Service Traces
		Enabling Tracing for the Service Mesh
		Analyzing Service Mesh Traces
	Summary
Chapter 8. Reliability
	Health Checking
		Active Versus Passive Health Checking
		Configuring Active Health Checks
		Passive Health Checks
	Retries
	Timeouts
	Summary
Chapter 9. Traffic Control
	Deployment Strategies
		Rolling Deployments
		Blue/Green Deployments
		Canary Deployments
	Load Balancers Versus the Service Mesh
	Traffic Control Config Entries
		Service Resolvers
		Service Splitters
		Service Routers
	Canary Deployments with Consul
		Deploying backend v2 on Kubernetes
		Deploying backend v2 on VMs
		Canary Deployment Continued
	Other Traffic Control Use Cases
	Summary
Chapter 10. Advanced Use Cases
	Multi-cluster Federation
	Consul API Gateway
	Terminating Gateways
	HashiCorp Vault Integration
	Connect Native
	Network Infrastructure Automation
	Securing Consul
		ACLs
		Gossip Encryption
		Control Plane TLS
	Consul Enterprise
	HashiCorp Cloud Platform
	Amazon Elastic Container Service (ECS)
	Nomad
	Conclusion
Appendix A. Common Errors
Index
About the Author
Colophon