Supercharge your Ingress with Kong
A presentation at gRPC Community Meetup by Viktor Gamov
THE CLOUD CONNECTIVITY COMPANY Supercharge Your Ingress with Kong Viktor Gamov | @gamussa October 2021 f THE CLOUD CONNECTIVITY COMPANY Kong Con idential
★gamov.dev/twitter ★gamov.dev/telegram ★gamov.dev/youtube @gamussa | @thekonginc
Agenda What I will try to show you today • Cloud Native / Kubernetes Native Application Management • Intro to Kubernetes Ingress • Advanced Features @gamussa | @grpcio | @thekonginc
Kubernetes Native Apps THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
type: LoadBalancer LB Orders Orders THE CLOUD CONNECTIVITY COMPANY Orders @gamussa | @grpcio | @thekonginc
LB Bills Orders THE CLOUD CONNECTIVITY COMPANY Analytics Orders Bills Inventory @gamussa | @grpcio | @thekonginc Inventory Analytics Orders
LB LB Bills Orders THE CLOUD CONNECTIVITY COMPANY LB Analytics Orders Bills Inventory @gamussa | @grpcio | @thekonginc Inventory Analytics Orders
Proxy Bills Orders THE CLOUD CONNECTIVITY COMPANY Analytics Orders Bills Inventory @gamussa | @grpcio | @thekonginc Inventory Analytics Orders
Kubernetes Ingress THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
Vendor Neutral Spec apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: finance-apis spec: rules: - host: example.com http: paths: - path: /bills backend: service: name: bills THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
The Same Old One port of entry Traf ic management
- Operations - Security & audits - $ effective
Connection management - TCP and TLS termination Certi icate management Service mesh f THE CLOUD CONNECTIVITY COMPANY f Load balancing Throttling Canary Service mesh @gamussa | @grpcio | @thekonginc 12
kubectl apply -f ingress.yaml API-server Proxy bills orders THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc 13
Who will implement all this? Load-balance Circuit-break Authentication Metrics Rate-limiting Logging Caching Transformations Serverless Custom logic THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc 14
THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
Hmm… kubectl apply -f ingress.yaml API-server Proxy bills orders THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc 16
What if? Proxy THE CLOUD CONNECTIVITY COMPANY Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic @gamussa | @grpcio | @thekonginc 17
con iguration.konghq.com/v1 Custom Resource De inition KongPlugins Additional functions that can be executed as requests are proxied to each Service @gamussa | @grpcio | @thekonginc f f THE CLOUD CONNECTIVITY COMPANY Authentication Load-balance Logging Circuit-break Metrics Rate-limiting Caching Transformations Serverless Custom logic 18
Popular gRPC plugins ■ Ingress for gRPC services ■ https://docs.konghq.com/hub/kong-inc/grpc-gateway/ ■ https://docs.konghq.com/hub/kong-inc/grpc-web/ THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
DEMO! Talk is cheap, show me the code ™ THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
Join Kong Nation! Links - https://konghq.com/kong-builders/ - https://youtube.com/konginc - https://konghq.com/community/ THE CLOUD CONNECTIVITY COMPANY @gamussa | @grpcio | @thekonginc
Have you ever find yourself in a situation when all your services are running in Kubernetes, and now you need to expose them to the outside world securely and reliably? Viktor Gamov will introduce the Kubernetes Ingress and how you can use it in gRPC applications. He will talk about the Kong Ingress Controller (KIC), an open-source implementation of the Kubernetes Controller that can be installed and managed precisely as any other Kubernetes resource. You will learn how to easily expose Kubernetes services to the outside world with KIC. During this talk, you will learn about the vast plugin ecosystem of Kong Gateway to declaratively enable security, API rate limiting, and native gRPC support!
Video
Resources
The following resources were mentioned during the presentation or are useful additional information.
-
Demo app
demo application includes grpc version of quote service
Buzz and feedback
Here’s what was said about this presentation on social media.
