Wondershare EdrawMind
Mindmap-Galerie Alibaba Cloud Microservice Engine
- 24
Alibaba Cloud Microservice Engine
Microservices Engine MSE (Microservices Engine) is a one-stop microservices platform for the industry's mainstream open source microservices ecosystem. It provides a registration configuration center (natively supports Nacos/ZooKeeper/Eureka), cloud native gateway (natively supports Ingress/Envoy), microservices Service governance (natively supports Spring Cloud/Dubbo/Sentinel, follows OpenSergo service governance specifications) capabilities
Bearbeitet um 2024-01-19 10:26:00
- Für Sie empfohlen
- Gliederung
Java basic summary, Web framework, distributed architecture, data structure and algorithm and core knowledge (distributed, big data, microservices)
- 19
Alibaba Cloud Microservice Engine
Product introduction
Microservices Engine MSE (Microservices Engine) is a one-stop microservices platform for the industry's mainstream open source microservices ecosystem. It provides a registration configuration center (natively supports Nacos/ZooKeeper/Eureka), cloud native gateway (natively supports Ingress/Envoy), microservices Service governance (native support for Spring Cloud/Dubbo/Sentinel, following OpenSergo service governance specifications) capabilities.
Product Features
MSE products include the following modules: microservice registration center, microservice governance, and cloud native gateway.
module describe Microservice registration configuration center It supports full hosting of registration and configuration centers (compatible with Nacos/ZooKeeper/Eureka), and has rich and complete monitoring alarms, console operation and maintenance operations and engine types. Compared with open source components, it has higher performance, SLA guarantee and configuration capabilities. Microservice governance It non-invasively enhances mainstream open source microservice frameworks such as Spring Cloud and Apache Dubbo, provides rich service management and traffic protection functions, and decouples middleware from business. Cloud native gateway Provide a safe and efficient next-generation gateway that complies with K8s Ingress standards, integrating Ingress traffic gateway, microservices, and security gateway into one.
By choosing the microservice engine MSE, you can achieve full hosting of the application registration and configuration center, service governance, and cloud-native gateway technology, and easily build resources with the following advantages:
Function describe Open source enhancements It is 100% compatible with open source community products, seamlessly connects to K8s, and provides enhanced capabilities in performance, observability, and ease of operation. Fully managed service Provides fully managed clustering. You only need to focus on business development, without deployment and operation and maintenance, making it more professional, more flexible, and more reliable. High availability The instances provided by the microservice engine have complete monitoring and operation and maintenance, optimizing a large number of availability pain points of open source middleware. No intrusion Application code, configuration, and images can be connected to the management center without modification, and support Spring Cloud, Dubbo, and multi-language applications. Embrace cloud native Supports ACK, ACK Serverless cluster, ECS, SAE and multi-language applications to access the management center to achieve microservice governance. Visualization Provides a visual interface. Make services visible, manageable, and controllable, detect service availability, and set alerts for services.
Related cloud services
Container service ACK
: ACK integrates the MSE governance center, connects Spring Cloud and Dubbo applications deployed on ACK to the MSE governance center, and uses MSE for microservice governance.
Service Mesh ASM
: Access the service grid ASM, compatible with the community Istio open source service grid, and easily implement multi-language microservice governance.
Application High Availability Service AHAS
: You can quickly use SaaS high-availability services, including architecture visualization, architecture change tracking, fault drills, and traffic protection, without any code changes. Among them, traffic protection has been fully integrated into MSE microservice management, and you can use the function directly in MSE microservice management enterprise version.
Application real-time monitoring service ARMS
: For distributed architecture, comprehensive monitoring of applications helps you quickly locate error interfaces and slow interfaces, reproduce calling parameters, and discover system bottlenecks, thereby greatly improving the efficiency of online problem diagnosis.
Application Configuration ManagementACM
: Centrally manage configurations in all application environments, reduce the cost of managing configurations in distributed systems, and reduce the risk of reduced availability or even failure due to incorrect configuration changes.
Link Tracing Tracing Analysis
: Provides complete call link restoration, call request volume statistics, link topology, application dependency analysis and other functions to help you quickly analyze and diagnose performance bottlenecks of distributed applications.
Message queue Kafka version
: Provides fully managed services and provides you with a complete set of management and control OpenAPIs to implement a series of resource management and operation and maintenance functions.
Features
Microservice registration configuration center
functional module Feature details Related documents Service management Supports visual service query and management of Nacos and Eureka, making it easier to manage accessed services. Management services Data management Supports ZooKeeper visual data query and update, allowing you to focus on business data. Manage data Observation analysis Supports visual engine monitoring indicators, including monitoring of connections, TPS, QPS and other indicators, helping you locate system bottlenecks. Nacos monitoring engine ZooKeeper monitoring engine Alarm management Supports receiving alarms through SMS, email, and DingTalk, so you can keep track of abnormal business dynamics in a timely manner. Manage alarm contacts Migrate to the cloud The cloud migration capability provided by MSE uses the MSE Sync white-screen migration tool to synchronize the information of the source cluster and the target cluster. The client can perceive all the information of the source cluster and the target cluster. Migrate to the cloud Configuration management Supports creating, synchronizing, viewing, editing and deleting configurations. Create configuration
Microservice Governance Center
functional module Feature details Related documents Service inquiry Supports querying the service list and service details of deployed applications, including basic information, service calling relationships, metadata, etc. Inquiry service Offline without loss For any online application, lossless offline can realize service consumers without being aware of it and maintain business continuity without loss. It is supported by applications connected to the platform by default and does not require any additional operations. Configuration lossless offline Lossless launch For any application to be released, lossless launch ensures the safe release of the application by providing a series of functions such as service warm-up, delayed registration, and alignment of the microservice life cycle with the K8s life cycle. Configuration lossless online label routing Classify one or more service providers into the same group through labels, thereby restricting traffic to only flow in the specified group, and achieving traffic isolation. Configure label routing Full link grayscale By creating swim lane rules, the same versions of one or more applications are divided into the same swim lane, thereby restricting traffic to only flow in the designated swim lane, and achieving full-link traffic isolation. Configure full-link grayscale based on Java microservice gateway Full-link grayscale based on MSE Ingress Traffic protection Traffic protection takes traffic as the entry point and ensures business stability from multiple dimensions such as flow control, isolation control, hotspot parameter protection, and Web protection. It provides more professional and stable traffic protection methods and second-level traffic level distribution analysis functions. Configure flow control rules Configure isolation rules Configure circuit breaker rules Configure hotspot rules Microservice testing Provides the testing function of microservices, and you can easily initiate calls to services through the console. Test service Remove outliers Detect the availability of Spring Cloud and Dubbo application instances and make dynamic adjustments to ensure successful service calls, thereby improving business stability and service quality. Remove outliers Service authentication When one of your microservice applications has security requirements, you can authenticate other applications that call the application, and only allow calls from applications that match the authentication rules. Configure service authentication
Cloud native gateway
functional module Feature details Related documents safety certificate Integrated authentication login system allows businesses to quickly build security barriers, supporting HTTPS certificates, IP blacklists, authentication and authorization (including JWT, OIDC and IDaaS), and abnormal traffic cleaning. Set gateway IP blacklist and whitelist Gateway Authentication Overview Associated domain names Observability Supports functions such as global dashboard, gateway instance monitoring, log retrieval, business top list, log delivery, link tracking, and alarm management. View gateway monitoring data Enable gateway log delivery Enable gateway link tracking Manage alert rules Routing configuration Supports service governance functions such as current limiting and downgrading, service discovery, service routing, multiple registration centers, traffic marking, canary publishing, and timeout configuration. Routing Overview Configure timeout policy Configure rewrite policy Configure current limiting policy Configure Header setting policy Configure cross-domain resource sharing policy Configure retry strategy High availability Integrated current limiting and circuit breaker capabilities help businesses build a high-availability system from the entrance, prevent large promotion peaks from overwhelming the system, and provide multi-availability zone deployment, automatic detection, and fault self-healing capabilities. Create a new cloud native gateway MSE Ingress Overview Manage alarm contacts Service management Supports adding, deleting, modifying, and checking services, making it easy for you to add services in the service list and their backend node addresses to the gateway. Add service Change service Delete service View services Manage service version Manage service traffic rules Configuring active health checks for services Service source management Supports multiple service sources such as container services (including ACK and ACK Serverless clusters), EDAS registration center, SAE registration center, MSE ZooKeeper, and MSE Nacos, allowing the gateway to dynamically obtain your backend service list. Create a new service source Modify service source Delete service source Domain name management The cloud native gateway provides multi-domain name management capabilities, making it easy for you to manage protocols, certificates, and routing configurations under different domain names. Associated domain names Change domain name Delete domain name
Product advantages
Microservice Engine MSE is a one-stop microservice platform for the industry's mainstream open source microservice frameworks such as SpringCloud, Dubbo and multiple languages. It supports the service grid ecology, standard, flexible and precise control of traffic, helping to improve the overall system availability, and MSE Numerous enhancements have been made in terms of high availability, performance, and security, giving your applications enterprise-level protection.
Advantage illustrate Ready out of the box It is 100% compatible with open source community products Nacos, ZooKeeper and Eureka. The business code does not require any modification. It can be used quickly after modifying the cluster registration center address. Registration configuration center fully managed Providing fully managed clusters, you do not need to pay attention to engine resource purchase, monitoring, operation and maintenance, and disaster recovery issues. You only need to focus on business development without deployment and operation and maintenance. High availability It supports multi-availability zone disaster recovery, has complete traffic protection, health detection, automatic recovery and other capabilities, optimizes a large number of availability pain points of Nacos, ZooKeeper and Eureka, and ensures long-term and stable operation of the engine. No intrusion Application code, configuration, and images can be connected to microservice management without modification and experience MSE service management capabilities. Open source enhancements It is 100% compatible with mainstream microservice open source projects, seamlessly connects to K8s, and supports mainstream open source frameworks Spring Cloud, Dubbo and multi-language applications. Visualization Provide a visual data monitoring interface to make services visible, manageable, and controllable. low cost It saves the labor costs of user-built gateways, registration configuration centers, and microservice governance systems. High performance and high integration can further reduce resource costs. High integration Seamlessly connects with Alibaba Cloud product system. For example, container service, log service, application monitoring, web application firewall, etc. provide you with a one-stop microservice solution.
Application scenarios
Service registration and distributed system coordination
The MSE registration and configuration center can realize service registration and discovery, configuration management, distributed data management and other functions, and supports multiple engine types (compatible with Nacos, ZooKeeper and Eureka). Can be applied to the following business scenarios.
Microservice registration and discovery
In the rapidly developing era of cloud computing, microservices are becoming more and more widely used. MSE provides a highly available, operation-free and stable service registration center for microservices developed using Spring Cloud and Dubbo frameworks.
Distributed scheduling (supports non-microservice scenarios)
MSE ZooKeeper provides a wealth of distributed locks, distributed queues and other functions, which can provide a variety of distributed coordination solutions for self-built distributed applications, improve the high availability of the system, and realize the construction of distributed application systems quickly and efficiently. If you are using big data components such as Hadoop, HBase, Kafka, and Flink, you will use ZooKeeper provided by MSE as the HA (High Availability) solution by default.
Recommended to use with:
Message queue Kafka
Enhance the online stability of microservices and improve R&D efficiency
In the process of microservices going online, we rely on the microservices governance capabilities provided by MSE. You can obtain the following capabilities without modifying any code or configuration.
Comprehensive elimination of risks in the change process
Relying on configuration management, lossless online and offline and full-link grayscale capabilities, risks in the change process are completely eliminated.
Comprehensive elimination of risks caused by accidental problems
Relying on current limiting, downgrading, circuit breaker, isolation and other capabilities, it can effectively limit current protection, peak load shaving, fault isolation, and downgrade protection when occasional traffic peaks and dependent service abnormalities occur.
Implement agile development of microservices at low cost
Relying on the development environment isolation capability, multiple sets of logically isolated development environments can be expanded at low cost without increasing the cost of physical machines, effectively solving the problems of environment preemption and conflicts, and achieving agile development.
Recommended to use with
Microservice engine MSE Cloud server ECS Cloud database RDS version Object storage OSS Container service
Combine traffic gateway and microservice gateway into one to reduce resource overhead
Traffic gateways (such as Nginx) provide global policies that have nothing to do with back-end business applications, such as HTTPS certificate offloading, web firewalls, global traffic monitoring, etc. Microservice gateway (such as Spring Cloud Gateway) refers to a policy that is tightly coupled with the business and provides a single business domain level, such as service governance, identity authentication, etc. The MSE cloud native gateway turns the two-layer gateway into one layer, which not only saves 50% of resource overhead, but also reduces operation, maintenance and usage costs.
In the traditional gateway model, the traffic gateway is responsible for north-south traffic scheduling and security protection, and the microservice gateway is responsible for east-west traffic scheduling and service governance. In the next-generation gateway model, the cloud native gateway is responsible for east-west, north-south traffic scheduling, security protection, and service governance. The deployment structure diagram is as follows:
Provide rich authentication and authentication capabilities to reduce security access costs
Authentication is a fundamental requirement for gateways. The MSE cloud native gateway not only provides conventional JWT authentication, but also provides OIDC authentication based on the authorized open network standard OAuth 2.0. At the same time, the MSE cloud-native gateway also supports Alibaba Cloud's application identity service IDaaS, which helps you realize third-party authentication logins such as Alipay, Taobao, and Tmall, and supports extended authentication and authentication functions in the form of plug-ins to reduce security access costs.
The MSE cloud native gateway is responsible for east-west, north-south traffic scheduling, security protection and service management. The schematic diagram of the authentication and authentication function is as follows: