Traffic mirroring

Mirror traffic to a shadow service for testing

# In VirtualService spec.http[].mirror

More istio commands

Uninstall Istio

istioctl uninstall --purge -y

Completely remove Istio from the cluster
Traffic routing — VirtualService

kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: myapp spec: hosts: - myapp http: - route: - destination: host: myapp subset: v1 weight: 80 - destination: host: myapp subset: v2 weight: 20 EOF

Route 80% traffic to v1, 20% to v2 (canary split)
Traffic routing — DestinationRule

kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: myapp spec: host: myapp trafficPolicy: outlierDetection: consecutive5xxErrors: 5 interval: 10s baseEjectionTime: 30s subsets: - name: v1 labels: version: v1 - name: v2 labels: version: v2 EOF

Define subsets and circuit breaker (outlier detection)
Fault injection — delay

kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: myapp spec: hosts: - myapp http: - fault: delay: percentage: value: 100 fixedDelay: 5s route: - destination: host: myapp EOF

Inject 5s delay for 100% of requests to test resilience
Traffic mirroring

kubectl apply -f - <<EOF apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: myapp spec: hosts: - myapp http: - route: - destination: host: myapp subset: v1 weight: 100 mirror: host: myapp subset: v2 mirrorPercentage: value: 100 EOF

Mirror 100% of traffic to v2 shadow service