Supercharge your Ingress with Kong

A presentation at gRPC Community Meetup in October 2021 in by Viktor Gamov

Slide 1

Slide 1

THE CLOUD CONNECTIVITY COMPANY Supercharge Your Ingress with Kong Viktor Gamov | @gamussa October 2021 f THE CLOUD CONNECTIVITY COMPANY Kong Con idential

Slide 2

Slide 2

★gamov.dev/twitter ★gamov.dev/telegram ★gamov.dev/youtube @gamussa | @thekonginc

Slide 3

Slide 3

Agenda What I will try to show you today • Cloud Native / Kubernetes Native Application Management • Intro to Kubernetes Ingress • Advanced Features @gamussa | @grpcio | @thekonginc

Slide 4

Slide 4

Kubernetes Native Apps THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 5

Slide 5

THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 6

Slide 6

type: LoadBalancer LB Orders Orders THE CLOUD CONNECTIVITY COMPANY Orders @gamussa | @grpcio | @thekonginc

Slide 7

Slide 7

LB Bills Orders THE CLOUD CONNECTIVITY COMPANY Analytics Orders Bills Inventory @gamussa | @grpcio | @thekonginc Inventory Analytics Orders

Slide 8

Slide 8

LB LB Bills Orders THE CLOUD CONNECTIVITY COMPANY LB Analytics Orders Bills Inventory @gamussa | @grpcio | @thekonginc Inventory Analytics Orders

Slide 9

Slide 9

Proxy Bills Orders THE CLOUD CONNECTIVITY COMPANY Analytics Orders Bills Inventory @gamussa | @grpcio | @thekonginc Inventory Analytics Orders

Slide 10

Slide 10

Kubernetes Ingress THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 11

Slide 11

Vendor Neutral Spec apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: finance-apis spec: rules: - host: example.com http: paths: - path: /bills backend: service: name: bills THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 12

Slide 12

The Same Old One port of entry Traf ic management

  • Operations - Security & audits - $ effective

Connection management - TCP and TLS termination Certi icate management Service mesh f THE CLOUD CONNECTIVITY COMPANY f Load balancing Throttling Canary Service mesh @gamussa | @grpcio | @thekonginc 12

Slide 13

Slide 13

kubectl apply -f ingress.yaml API-server Proxy bills orders THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc 13

Slide 14

Slide 14

Who will implement all this? Load-balance Circuit-break Authentication Metrics Rate-limiting Logging Caching Transformations Serverless Custom logic THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc 14

Slide 15

Slide 15

THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 16

Slide 16

Hmm… kubectl apply -f ingress.yaml API-server Proxy bills orders THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc 16

Slide 17

Slide 17

What if? Proxy THE CLOUD CONNECTIVITY COMPANY Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic @gamussa | @grpcio | @thekonginc 17

Slide 18

Slide 18

con iguration.konghq.com/v1 Custom Resource De inition KongPlugins Additional functions that can be executed as requests are proxied to each Service @gamussa | @grpcio | @thekonginc f f THE CLOUD CONNECTIVITY COMPANY Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic 18

Slide 19

Slide 19

Popular gRPC plugins ■ Ingress for gRPC services ■ https://docs.konghq.com/hub/kong-inc/grpc-gateway/ ■ https://docs.konghq.com/hub/kong-inc/grpc-web/ THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 20

Slide 20

DEMO! Talk is cheap, show me the code ™ THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc

Slide 21

Slide 21

Join Kong Nation! Links - https://konghq.com/kong-builders/ - https://youtube.com/konginc - https://konghq.com/community/ THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc