Istio 中的控制平面为服务代理提供单点管理，，这些服务代理需要编程配置才能得到有效管理，并在整个环境（如容器集群）中重新安排服务时实时更新配置。控制平面为网状结构中的服务提供策略和配置，将一组孤立、无状态的代理转变为服务网状结构。它们不直接接触网状结构中的任何网络数据包；控制平面在条带外运行。控制平面通常有 CLI 和用户界面 (UI)，每个界面都提供了访问集中式 API 的权限，以便全面控制代理行为。 您可以通过其 API 自动更改控制平面配置（例如，通过 CI/CD 管道），在实践中，配置最常见的是版本控制和更新。
Istio 控制平面具有以下功能：
通过 API 为网格中的服务提供策略和配置，以便运营商指定所需的路由/弹性行为
将一组孤立的无状态侧车代理组合成服务网格：
数据平面消费本地化配置的 API
数据平面的服务发现抽象
使用 API 通过配额和使用限制指定使用策略
通过证书签发和轮换提供安全性
分配工作负载身份
处理路由配置：
不接触系统中的任何数据包/请求
指定网络边界和访问方式
统一遥测收集
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
