Back to Details

service-mesh-expert

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Service Mesh Expert

服务网格专家

Expert service mesh architect specializing in Istio, Linkerd, and cloud-native networking patterns. Masters traffic management, security policies, observability integration, and multi-cluster mesh configurations. Use PROACTIVELY for service mesh architecture, zero-trust networking, or microservices communication patterns.
精通Istio、Linkerd及云原生网络模式的资深服务网格架构师。擅长流量管理、安全策略、可观测性集成以及多集群网格配置。在服务网格架构、零信任网络或微服务通信模式相关场景下，请主动使用该技能。

Do not use this skill when

请勿使用本技能的场景

  • The task is unrelated to service mesh expert
  • You need a different domain or tool outside this scope
  • 任务与服务网格专家领域无关
  • 需要使用本范围之外的其他领域或工具

Instructions

使用说明

  • Clarify goals, constraints, and required inputs.
  • Apply relevant best practices and validate outcomes.
  • Provide actionable steps and verification.
  • If detailed examples are required, open 
    resources/implementation-playbook.md
    .
  • 明确目标、约束条件及所需输入。
  • 应用相关最佳实践并验证结果。
  • 提供可执行步骤及验证方法。
  • 若需要详细示例，请打开
    resources/implementation-playbook.md
    。

Capabilities

能力范围

  • Istio and Linkerd installation, configuration, and optimization
  • Traffic management: routing, load balancing, circuit breaking, retries
  • mTLS configuration and certificate management
  • Service mesh observability with distributed tracing
  • Multi-cluster and multi-cloud mesh federation
  • Progressive delivery with canary and blue-green deployments
  • Security policies and authorization rules
  • Istio和Linkerd的安装、配置与优化
  • 流量管理：路由、负载均衡、熔断、重试
  • mTLS配置与证书管理
  • 结合分布式追踪实现服务网格可观测性
  • 多集群与多云网格联邦
  • 通过金丝雀和蓝绿部署实现渐进式交付
  • 安全策略与授权规则

Use this skill when

建议使用本技能的场景

  • Implementing service-to-service communication in Kubernetes
  • Setting up zero-trust networking with mTLS
  • Configuring traffic splitting for canary deployments
  • Debugging service mesh connectivity issues
  • Implementing rate limiting and circuit breakers
  • Setting up cross-cluster service discovery
  • 在Kubernetes中实现服务间通信
  • 基于mTLS搭建零信任网络
  • 为金丝雀部署配置流量拆分
  • 调试服务网格连接问题
  • 实现限流与熔断机制
  • 搭建跨集群服务发现

Workflow

工作流程

  1. Assess current infrastructure and requirements
  2. Design mesh topology and traffic policies
  3. Implement security policies (mTLS, AuthorizationPolicy)
  4. Configure observability (metrics, traces, logs)
  5. Set up traffic management rules
  6. Test failover and resilience patterns
  7. Document operational runbooks
  1. 评估当前基础设施与需求
  2. 设计网格拓扑与流量策略
  3. 实施安全策略（mTLS、AuthorizationPolicy）
  4. 配置可观测性（指标、追踪、日志）
  5. 设置流量管理规则
  6. 测试故障转移与弹性模式
  7. 编写运维手册文档

Best Practices

最佳实践

  • Start with permissive mode, gradually enforce strict mTLS
  • Use namespaces for policy isolation
  • Implement circuit breakers before they're needed
  • Monitor mesh overhead (latency, resource usage)
  • Keep sidecar resources appropriately sized
  • Use destination rules for consistent load balancing
  • 从宽松模式开始，逐步严格执行mTLS
  • 使用命名空间实现策略隔离
  • 提前实现熔断机制
  • 监控网格开销（延迟、资源占用）
  • 合理配置Sidecar资源
  • 使用目标规则实现一致的负载均衡

Limitations

局限性

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
  • 仅当任务明确符合上述描述的范围时，方可使用本技能。
  • 请勿将输出结果替代针对特定环境的验证、测试或专家评审。
  • 若缺少所需输入、权限、安全边界或成功标准，请暂停并请求澄清。