mirror of https://github.com/istio/istio.io.git
7 lines
21 KiB
HTML
7 lines
21 KiB
HTML
<!DOCTYPE html><html lang="en" itemscope itemtype="https://schema.org/WebPage" style="overflow-y: scroll;"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="title" content="Glossary"><meta name="og:title" content="Glossary"><meta name="og:image" content="/v0.4/img/logo.png"/><meta name="theme-color" content="#466BB0"/><meta name="description" content="A glossary of common Istio terms."><meta name="og:description" content="A glossary of common Istio terms."><title>Istioldie 0.4 / Glossary</title><script> window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)};ga.l=+new Date; ga('create', 'UA-98480406-2', 'auto'); ga('send', 'pageview'); </script> <script async src='https://www.google-analytics.com/analytics.js'></script><link rel="alternate" type="application/rss+xml" title="Istio Blog RSS" href="/v0.4/feed.xml"><link rel="shortcut icon" href="/v0.4/favicons/favicon.ico" ><link rel="apple-touch-icon" href="/v0.4/favicons/apple-touch-icon-180x180.png" sizes="180x180"><link rel="icon" type="image/png" href="/v0.4/favicons/favicon-16x16.png" sizes="16x16"><link rel="icon" type="image/png" href="/v0.4/favicons/favicon-32x32.png" sizes="32x32"><link rel="icon" type="image/png" href="/v0.4/favicons/android-36x36.png" sizes="36x36"><link rel="icon" type="image/png" href="/v0.4/favicons/android-48x48.png" sizes="48x48"><link rel="icon" type="image/png" href="/v0.4/favicons/android-72x72.png" sizes="72x72"><link rel="icon" type="image/png" href="/v0.4/favicons/android-96x196.png" sizes="96x196"><link rel="icon" type="image/png" href="/v0.4/favicons/android-144x144.png" sizes="144x144"><link rel="icon" type="image/png" href="/v0.4/favicons/android-192x192.png" sizes="192x192"><link rel="manifest" href="/v0.4/manifest.json"><meta name="apple-mobile-web-app-title" content="Istio"><meta name="application-name" content="Istio"><link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic"><link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"><link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"><link rel="stylesheet" href="/v0.4/css/all.css"><link rel="stylesheet" href="/v0.4/css/prism.css"></head><body class="language-unknown"> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script><div class="nav-hero-container" style="z-index: 200000;"><nav id="header-nav" class="navbar navbar-inverse" role="navigation" style="z-index: 200000;"><div class="container"><div class="row"><div class="col-md-11 nofloat center-block "><div class="navbar-header"> <button type="button" class="hamburger navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar-collapse-1" aria-expanded="false"> <span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </button> <a class="navbar-brand" href="/v0.4/"><div> <img src="/v0.4/img/istio-logo.svg" alt="Istio Logo" height="54px"/> <span class="brand-name">Istioldie 0.4</span></div></a></div><div class="collapse navbar-collapse" id="navbar-collapse-1"><ul class="nav navbar-nav navbar-right"><li><a href="/v0.4/about" >About</a></li><li><a href="/v0.4/blog/posts/2017/mixer-spof-myth.html" >Blog</a></li><li><a href="/v0.4/docs/welcome" class='current'>Docs</a></li><li><a href="/v0.4/help" >Help</a></li><li><a href="/v0.4/community" >Community</a></li><li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href=""> <i class='fa fa-lg fa-cog'></i> <span class="caret"></span> </a><ul class="dropdown-menu"><h6 class="dropdown-header">Other versions of this site</h6><li> <a href="https://istio.io">Current Release</a></li><li> <a href="https://preliminary.istio.io">Next Release</a></li><li> <a href="https://archive.istio.io">Older Releases</a></li></ul></li><li><form name="cse" id="searchbox_demo" class="navbar-form navbar-right" role="search"> <input type="hidden" name="cx" value="013699703217164175118:iwwf17ikgf4" /> <input type="hidden" name="ie" value="utf-8" /> <input type="hidden" name="hl" value="en" /><div class="form-group"><div class="input-group"> <input name="q" class="form-control search-box" type="text" size="30" /><div class="input-group-addon"> <span class="btn-search glyphicon glyphicon-search"></span></div></div></div></form> <script type="text/javascript" src="https://www.google.com/cse/brand?form=searchbox_demo"></script></li></ul></div></div></div></div></nav></div><div class="container"><div class="row"><div class="col-md-11 nofloat center-block" style="margin-top: 3px;"><ul class="col-sm-10 nav nav-tabs"><li role="presentation" class='active'><a href="/v0.4/docs/welcome/">Welcome</a></li><li role="presentation" ><a href="/v0.4/docs/concepts/">Concepts</a></li><li role="presentation" ><a href="/v0.4/docs/setup/">Setup</a></li><li role="presentation" ><a href="/v0.4/docs/tasks/">Tasks</a></li><li role="presentation" ><a href="/v0.4/docs/guides/">Guides</a></li><li role="presentation" ><a href="/v0.4/docs/reference/">Reference</a></li></ul></div></div></div><script src="/v0.4/js/navtree.min.js"></script><div class="container docs"><div class="row"><div class="col-md-11 nofloat center-block"><div class="row"><div id="sidebar-container" class="col-sm-3"><ul class="sidebar"><li><h5 class='sidebar-title'>Welcome</h5></li><script type="text/javascript"> var docs = []; docs.push({path: [ "contribute", "creating-a-pull-request.md", ], url: "/docs/welcome/contribute/creating-a-pull-request.html", title: "Creating a Pull Request", order: 20, overview: "Shows you how to create a GitHub pull request in order to submit your docs for approval."}); docs.push({path: [ "contribute", "editing.md", ], url: "/docs/welcome/contribute/editing.html", title: "Editing Docs", order: 10, overview: "Lets you start editing this site's documentation."}); docs.push({path: [ "contribute", "index.md", ], url: "/docs/welcome/contribute/", title: "Contributing to the Docs", order: 100, overview: "Learn how to contribute to improve and expand the Istio documentation."}); docs.push({path: [ "contribute", "reviewing-doc-issues.md", ], url: "/docs/welcome/contribute/reviewing-doc-issues.html", title: "Doc Issues", order: 60, overview: "Explains the process involved in accepting documentation updates."}); docs.push({path: [ "contribute", "staging-your-changes.md", ], url: "/docs/welcome/contribute/staging-your-changes.html", title: "Staging Your Changes", order: 40, overview: "Explains how to test your changes locally before submitting them."}); docs.push({path: [ "contribute", "style-guide.md", ], url: "/docs/welcome/contribute/style-guide.html", title: "Style Guide", order: 70, overview: "Explains the dos and donts of writing Istio docs."}); docs.push({path: [ "contribute", "writing-a-new-topic.md", ], url: "/docs/welcome/contribute/writing-a-new-topic.html", title: "Writing a New Topic", order: 30, overview: "Explains the mechanics of creating new documentation pages."}); docs.push({path: [ "faq.md", ], url: "/docs/welcome/faq.html", title: "Frequently Asked Questions", order: 20, overview: "Frequently Asked Questions about Istio."}); docs.push({path: [ "glossary.md", ], url: "/docs/welcome/glossary.html", title: "Glossary", order: 30, overview: "A glossary of common Istio terms."}); docs.push({path: [ "index.md", ], url: "/docs/welcome/", title: "Welcome", order: 0, overview: "Istio documentation home page."}); docs.push({path: [ "notes", "0.1.md", ], url: "/docs/welcome/notes/0.1.html", title: "Istio 0.1", order: 100, overview: ""}); docs.push({path: [ "notes", "0.2.md", ], url: "/docs/welcome/notes/0.2.html", title: "Istio 0.2", order: 99, overview: ""}); docs.push({path: [ "notes", "0.3.md", ], url: "/docs/welcome/notes/0.3.html", title: "Istio 0.3", order: 98, overview: ""}); docs.push({path: [ "notes", "0.4.md", ], url: "/docs/welcome/notes/0.4.html", title: "Istio 0.4", order: 97, overview: ""}); docs.push({path: [ "notes", "index.md", ], url: "/docs/welcome/notes/", title: "Release Notes", order: 5, overview: "What's been happening with Istio."}); genSideBarTree(docs) </script></ul></div><div id="tab-container" class="col-xs-1 tab-neg-margin pull-left"> <a id="sidebar-tab" class="glyphicon glyphicon-chevron-left" href="javascript:void 0;"> </a></div><div id="content-container" class="thin-left-border col-sm-9 markdown"><div id="doc-content"><h1>Glossary</h1><div class="glossary"><p>Common Istio words and phrases. Please <a href="https://github.com/istio/istio.github.io/issues/new?title=Missing%20Glossary%20Entry">let us know</a> if you came here looking for a definition and didn’t find it.</p><div class="trampolines"> <a href="#A">A</a> | <a href="#D">D</a> | <a href="#E">E</a> | <a href="#M">M</a> | <a href="#P">P</a> | <a href="#S">S</a> | <a href="#W">W</a></div><div class="entries"><h4 id="A">A</h4><ul><li class="word" id="adapters">Adapters</li><li class="definition"><p>Adapters are plug-ins to Mixer to enable Mixer to interface with an open-ended set of infrastructure backends that deliver core functionality, such as logging, monitoring, quotas, ACL checking, and more. The exact set of adapters used at runtime is determined through configuration and can easily be extended to target new or custom infrastructure backends.</p><p><a href="/v0.4/docs/concepts/policy-and-control/mixer.html#adapters">Learn more about adapters</a>.</p></li><li class="word" id="attribute">Attribute</li><li class="definition"><p>Attributes control the runtime behavior of services running in the mesh. Attributes are named and typed pieces of metadata describing ingress and egress traffic and the environment this traffic occurs in. An Istio attribute carries a specific piece of information such as the error code of an API request, the latency of an API request, or the original IP address of a TCP connection. For example:</p><pre><code>request.path: xyz/abc
|
||
request.size: 234
|
||
request.time: 12:34:56.789 04/17/2017
|
||
source.ip: 192.168.0.1
|
||
destination.service: example
|
||
</code></pre></li></ul><h4 id="D">D</h4><ul><li class="word" id="destination">Destination</li><li class="definition"><p>The remote upstream service <a href="#envoy">Envoy</a> is talking to on behalf of a <a href="#source">source</a> <a href="#workload">workload</a>. There can be one or more <a href="#service-version">service versions</a> for a given <a href="#service">service</a> and Envoy chooses the version based on routing rules.</p></li></ul><h4 id="E">E</h4><ul><li class="word" id="envoy">Envoy</li><li class="definition"><p>The high-performance proxy that Istio uses to mediate inbound and outbound traffic for all <a href="#service">services</a> in the <a href="#service-mesh">service mesh</a>. <a href="https://envoyproxy.github.io/envoy/">Learn more about Envoy</a>.</p></li></ul><h4 id="M">M</h4><ul><li class="word" id="mixer">Mixer</li><li class="definition"><p>The Istio component responsible for enforcing access control and usage policies across the <a href="#service-mesh">service mesh</a> and collecting telemetry data from <a href="#envoy">Envoy</a> and other services. <a href="/v0.4/docs/concepts/policy-and-control/mixer.html">Learn more about Mixer</a>.</p></li><li class="word" id="mixer-handler">Mixer Handler</li><li class="definition"><p>Handlers represent fully configured Mixer adapters. A single binary adapter can be used with different configurations, each such configuration is known as a handler. At runtime, Mixer routes <a href="#mixer-instance">instances</a> to one or more handlers.</p></li><li class="word" id="mixer-instance">Mixer Instance</li><li class="definition"><p>An instance represents a chunk of Mixer data that is produced by inspecting a a set of request <a href="#attribute">attributes</a> and applying the operator-supplied configuration. Instances are delivered to individual <a href="#mixer-handler">handlers</a>, on their way to infrastructure backends.</p></li><li class="word" id="mutual-tls">Mutual TLS Authentication</li><li class="definition"><p>Mutual TLS provides strong service-to-service authentication with built-in identity and credential management. <a href="/v0.4/docs/concepts/security/mutual-tls.html">Learn more about mutual TLS authentication</a>.</p></li></ul><h4 id="P">P</h4><ul><li class="word" id="pilot">Pilot</li><li class="definition"><p>The Istio component that programs the <a href="#envoy">Envoy</a> proxies, responsible for service discovery, load balancing, and routing.</p></li></ul><h4 id="S">S</h4><ul><li class="word" id="secure-naming">Secure Naming</li><li class="definition"><p>Provides a mapping between a <a href="#service-name">service name</a> and the <a href="#workload-principal">workload principals</a> that are authorized to run the <a href="#workload">workloads</a> implementing a <a href="#service">service</a>.</p></li><li class="word" id="service">Service</li><li class="definition"><p>A delineated group of related behaviors within a <a href="#service-mesh">service mesh</a>. Services are identified using a <a href="#service-name">service name</a>, and Istio policies such as load balancing and routing are applied using these names. A service is typically materialized by one or more <a href="#service-endpoint">service endpoints</a>, and may consist of multiple <a href="#service-version">service versions</a>.</p></li><li class="word" id="service-consumer">Service Consumer</li><li class="definition"><p>The agent that is using a <a href="#service">service</a>.</p></li><li class="word" id="service-endpoint">Service Endpoint</li><li class="definition"><p>The network-reachable manifestation of a <a href="#service">service</a>. Service endpoints are exposed by <a href="#workload">workloads</a>. Not all services have service endpoints.</p></li><li class="word" id="service-mesh">Service Mesh</li><li class="definition"><p>A shared set of names and identities that allows for common policy enforcement and telemetry collection. <a href="#service-name">Service names</a> and <a href="#workload-principal">workload principals</a> are unique within a service mesh.</p></li><li class="word" id="service-name">Service Name</li><li class="definition"><p>A unique name for a <a href="#service">service</a>, identifying it within the <a href="#service-mesh">service mesh</a>. A service may not be renamed and maintain its identity, each service name is unique. A service may have multiple <a href="#service-version">versions</a>, but a service name is version-independent.</p><ul><li>Service names are accessible in Istio configuration as the <code>source.service</code> and <code>destination.service</code> <a href="#attribute">attributes</a>.</li></ul></li><li class="word" id="service-operator">Service Operator</li><li class="definition"><p>The agent that manages a <a href="#service">service</a> within a <a href="#service-mesh">service mesh</a> by manipulating configuration state and monitoring the service’s health via a variety of dashboards.</p></li><li class="word" id="service-producer">Service Producer</li><li class="definition"><p>The agent that creates a <a href="#service">service</a>.</p></li><li class="word" id="service-version">Service Version</li><li class="definition"><p>Distinct variants of a <a href="#service">service</a>, typically backed by a different versions of a <a href="#workload">workload</a> binary. Common scenarios where multiple <a href="#service-version">service versions</a> may be used include A/B testing, canary rollouts, etc. Each service has a default version.</p></li><li class="word" id="source">Source</li><li class="definition"><p>The downstream client of the <a href="#envoy">Envoy</a> proxy. Within the <a href="#service-mesh">service mesh</a> a source is typically a <a href="#workload">workload</a>, but the source for ingress traffic may include other clients such as a browser or mobile app.</p></li></ul><h4 id="W">W</h4><ul><li class="word" id="workload">Workload</li><li class="definition"><p>A process/binary deployed by operators in Istio, typically represented by entities such as containers, pods, or VMs.</p><ul><li>A workload can expose zero or more <a href="#service-endpoint">service endpoints</a>.</li><li>A workload can consume zero or more <a href="#service">services</a>.</li><li>Each workload has a single canonical <a href="#service-name">service name</a> associated with it, but may also represent additional service names.</li></ul></li><li class="word" id="workload-id">Workload ID</li><li class="definition"><p>A unique identifier for an individual instance of a <a href="#workload">workload</a>. Like <a href="#workload-name">workload name</a>, the workload ID is not a strongly verified property and should not be used when enforcing ACLs. The workload IDs are accessible in Istio configuration as the <code>source.uid</code> and <code>destination.uid</code> <a href="#attribute">attributes</a>.</p></li><li class="word" id="workload-name">Workload Name</li><li class="definition"><p>A unique name for a <a href="#workload">workload</a>, identifying it within the <a href="#service-mesh">service mesh</a>. Unlike the <a href="#service-name">service name</a> and the [workload principal], the workload name is not a strongly verified property and should not be used when enforcing ACLs. The workload names is accessible in Istio configuration as the <code>source.name</code> and <code>destination.name</code> <a href="#attribute">attributes</a>.</p></li><li class="word" id="workload-principal">Workload Principal</li><li class="definition"><p>Identifies the verifiable authority under which a <a href="#workload">workload</a> runs. Istio’s service-to-service authentication is used to produce the workload principal. By default workload principals are compliant with the SPIFFE ID format.</p><ul><li>Multiple <a href="#workload">workloads</a> may share the same workload principal, but each workload has a single canonical workload principal</li><li>Workload principals are accessible in Istio configuration as the <code>source.user</code> and <code>destination.user</code> <a href="#attribute">attributes</a>.</li></ul></li></ul></div></div></div></div></div></div></div></div><script src="/v0.4/js/sidebar.min.js"></script><footer><div class="container"><div class="row"><div class="col-lg-2 col-md-2 col-sm-2"></div><div class="col-lg-3 col-md-3 col-sm-3 col-xs-12 center-block"><ul><li><a class="header" href="/v0.4/docs/welcome">Docs</a></li><li><a href="/v0.4/docs/concepts">Concepts</a></li><li><a href="/v0.4/docs/setup">Setup</a></li><li><a href="/v0.4/docs/tasks">Tasks</a></li><li><a href="/v0.4/docs/guides">Guides</a></li><li><a href="/v0.4/docs/reference">Reference</a></li></ul></div><div class="col-lg-3 col-md-3 col-sm-3 col-xs-12 center-block"><ul><li><a class="header" href="/v0.4/help">Help</a></li><li><a href="/v0.4/faq">FAQ</a></li><li><a href="/v0.4/glossary">Glossary</a></li><li><a href="/v0.4/troubleshooting">Troubleshooting</a></li><li><a href="/v0.4/bugs">Report Bugs</a></li><li><a href="https://github.com/istio/istio.github.io/issues/new?title=Issue with _docs/welcome/glossary.md">Doc Bugs & Gaps</a></li><li><a href="https://github.com/istio/istio.github.io/edit/master/_docs/welcome/glossary.md">Edit This Page</a></li></ul></div><div class="col-lg-3 col-md-3 col-sm-3 col-xs-12 center-block"><ul><li> <a class="header" href="/v0.4/community">Community</a></li><li> <a href="https://groups.google.com/forum/#!forum/istio-users" target="_blank" rel="noopener">User</a> | <a href="https://groups.google.com/forum/#!forum/istio-dev" target="_blank" rel="noopener">Dev Mailing Lists</a></li><li><a href="https://twitter.com/IstioMesh" target="_blank" rel="noopener">Twitter</a></li><li><a href="https://stackoverflow.com/questions/tagged/istio" target="_blank" rel="noopener">Stack Overflow</a></li><li><a href="https://github.com/istio/community" target="_blank" rel="noopener">GitHub</a></li><li><a href="https://github.com/istio/community/blob/master/WORKING-GROUPS.md" target="_blank" rel="noopener">Working Groups</a></li></ul></div><div class="col-lg-1 col-md-1 col-sm-1"></div></div><div class="row"><p class="description small text-center"> Istio 0.4, Copyright © 2017 Istio Authors<br> Archived on 20-Dec-2017</p></div></div></footer><script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.15.0/jquery.validate.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery.form/4.2.1/jquery.form.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery-visible/1.2.0/jquery.visible.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/slick.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/clipboard.js/1.7.1/clipboard.min.js"></script> <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script> <script src="/v0.4/js/common.min.js"></script> <script src="/v0.4/js/search.js"></script> <script src="/v0.4/js/prism.min.js"></script></body></html>
|