API Workloads on Kubernetes | Show Code Part 4

Aug 25, 2020Download as PPTX, PDF0 likes1,637 views

In this episode, we will touch on a hot buzzword to any person who is managing or exploring microservices infrastructures: Kubernetes! In a nutshell and by Google’s definition, Kubernetes is an open-source container-orchestration system for automating computer application deployment, scaling, and management. Today, we will explore through live follow-the-trainer demos how to deploy Kubernetes ingress policies in different levels, and I will show how to deploy ingress as edge API gateway by applying security policies.

API Workloads on K8s
DEMO USING NGINX PLUS –
KUBERNETES INGRESS CONTROLLER
Rajesh Bavanantham
NGINX Solutions Architect, ANZ

| ©2019 F52 CONFIDENTIAL
NGINX & K8S news
• https://cilium.io/blog/2020/08/
19/google-chooses-cilium-for-
gke-networking
• https://www.docker.com/pricin
g/retentionfaq
• https://techcrunch.com/2020/0
8/13/mirantis-acquires-lens-
an-ide-for-kubernetes/

| ©2019 F53 CONFIDENTIAL
Some interesting K8S
tools to watch…
• https://github.com/madhuakul
a/kubernetes-goat
• https://lifebelt.dev/
• https://github.com/awslabs/cd
k8s

| ©2019 F54
Aspect or Feature kubernetes/ingress-nginx
nginxinc/kubernetes-ingress
with NGINX
nginxinc/kubernetes-ingress
with NGINX Plus
Fundamental
Authors Kubernetes community NGINX Inc and community NGINX Inc and community
NGINX version
Custom NGINX build that includes
several third-party modules
NGINX official mainline build NGINX Plus
Commercial support N/A N/A Included
Load balancing configuration via the Ingress resource
Merging Ingress rules with the same host Supported
Supported via Mergeable
Ingresses
Supported via Mergeable
Ingresses
HTTP load balancing extensions -
Annotations
See the supported annotations See the supported annotations See the supported annotations
HTTP load balancing extensions --
ConfigMap
See the supported ConfigMap keys
See the supported ConfigMap
keys
See the supported ConfigMap
keys
TCP/UDP Supported via a ConfigMap Supported via custom resources
Supported via custom
resources
Websocket Supported Supported via an annotation Supported via an annotation
TCP SSL Passthrough Supported via a ConfigMap Supported via custom resources
Supported via custom
resources
JWT validation Not supported Not supported Supported
Session persistence Supported via a third-party module Not supported Supported
Canary testing (by header, cookie, weight) Supported via annotations Supported via custom resources
Supported via custom
resources
Configuration templates *1 See the template See the templates See the templates
Difference between NGINX Ingress Controllers

| ©2019 F55
Aspect or Feature kubernetes/ingress-nginx
nginxinc/kubernetes-ingress
with NGINX
nginxinc/kubernetes-ingress
with NGINX Plus
Load balancing configuration via Custom Resources
HTTP load balancing Not supported
See VirtualServer and
VirtualServerRoute resources
See VirtualServer and
VirtualServerRoute resources
TCP/UDP load balancing Not supported See TransportServer resource See TransportServer resource
TCP SSL Passthrough load balancing Not supported See TransportServer resource See TransportServer resource
Deployment
Command-line arguments *2 See the arguments See the arguments See the arguments
TLS certificate and key for the default
server
Required as a command-line
argument/ auto-generated
Required as a command-line
argument
Required as a command-line
argument
Helm chart Supported Supported Supported
Operator Not supported Supported Supported
Operational
Reporting the IP address(es) of the Ingress
controller into Ingress resources
Supported Supported Supported
Extended Status Supported via a third-party module Not supported Supported
Prometheus Integration Supported Supported Supported
Dynamic reconfiguration of endpoints (no
configuration reloading)
Supported with a third-party Lua
module
Not supported Supported
Difference between NGINX Ingress Controllers (continued)

| ©2019 F56
Ingress
Controller
@
the edge of
K8S

| ©2019 F57
Ingress
Controller
@
the edge
and
namespace

| ©2019 F58
The Dem(o)i god
CONFIDENTIAL

In this webinar we help you get started using NGINX, the de facto standard building block for modern microservices-based architectures. Using a hands-on, follow-the-trainer style, in this workshop we take you through installing and configuring NGINX as a web server, load balancer, and reverse proxy. On-Demand Link: https://www.nginx.com/resources/webinars/nginx-basics-apcj/

Kubernetes NetworkingNGINX, Inc.

This document outlines the agenda for a virtual networking event on Kubernetes networking. The agenda includes: - A welcome and trivia session from 11:30-11:35AM - Two technical sessions from 11:35AM-12:20PM presented by Chris Akker, Jason Williams, and Jon Calalang - A Q&A session from 12:20-12:30PM - Closing at 12:30PM The document also includes information about NGINX and its application platform suite, the NGINX ingress controller, NGINX Plus ingress controller demonstrations, and F5's Container Ingress Services.

NGINX DevSecOps WorkshopNGINX, Inc.

This document provides an agenda and overview for an NGINX App Protect workshop. It includes: 1. An overview of NGINX and its application platform capabilities for developing and delivering digital experiences. 2. A demonstration and overview of the hands-on lab where attendees can get experience with NGINX App Protect. 3. The hands-on lab itself which attendees participate in for a live experience securing applications with NGINX App Protect.

Secured APIM-as-a-ServiceNGINX, Inc.

In our digital world, customers expect a compelling, reliable digital experience and partners want frictionless integration with your services. One of the most critical underpinnings to digital success is the application programming interface (API). APIs are the common currency for transacting in the digital world. API traffic now constitutes 83% of the world’s internet traffic and 70% of organizations have invested in API management. Join us for this session API-as-a-Service: How an Internal API Cloud Can Accelerate Digital Transformation.

Control Kubernetes Ingress and Egress Together with NGINXNGINX, Inc.

Join our resident Kubernetes and modern apps experts in a discussion of the challenges of Kubernetes traffic management in today’s technology landscape. While Kubernetes Ingress gets most of the attention, how you handle egress traffic is just as important. Egress isn’t just about traffic leaving a cluster, either, but also concerns traffic among managed and unmanaged services within the cluster. We demo a solution using NGINX Service Mesh and NGINX Ingress Controller to control egress from the cluster and between NGINX Service Mesh and unmanaged services. Whether you’re new to modern application architectures, or looking to improve your current microservices deployment, this webinar is for you. Join this webinar to learn: * Solutions to common challenges when managing traffic in Kubernetes * How to control both ingress and egress in a single configuration * Which solutions from NGINX can best serve your needs, depending on your requirements * About NGINX Service Mesh and NGINX Ingress Controller with live demos

Get the Most Out of Kubernetes with NGINXNGINX, Inc.

On-demand Link https://www.nginx.com/resources/webinars/kubernetes-nginx/ About the Webinar Many enterprises are adopting Kubernetes at breakneck speed as part of their DevOps‑centric digital transformation initiative. And yet the rise of DevOps in no way reduces the role of NetOps teams, who still have responsibility for the operation of the entire platform and its enterprise-wide application services. NetOps’s control of these global‑scale services is still vital to deploying stable and secure aps. In fact, where both NetOps and DevOps have an interest in an application service such as ADC or WAF, we often see duplication of that service. This is not an inefficiency, but rather reflects the differing needs and goals of the parties as they each make use of that service. In this webinar we explore the benefits of duplicating application services inside Kubernetes and look at some well‑established practices for deploying services such as WAF for applications that are running in Kubernetes, including trade‑offs between different options and the criteria that matter most to help you make the best decisions. Our presenters will also provide a demo of how to use NGINX Ingress Controller to provision NGINX App Protect in Red Hat OpenShift.

Nim tames sprawlNGINX, Inc.

About the Webinar App developers and DevOps teams at more than 400 million websites rely on NGINX for a wide range of app delivery functions – load balancer, API gateway, reverse proxy, and web server. But the more NGINX instances you have, the bigger the challenge in keeping track of them all. That’s where NGINX Instance Manager comes in. Join this webinar to learn about a new solution called NGINX Instance Manager that helps you to effortlessly discover, configure, and monitor NGINX Open Source and NGINX Plus instances at scale. The webinar includes a demo of NGINX Instance Manager in action. Tom Gamull Product Manager, F5 Karthik Krishnaswamy Director, Product Marketing, NGINX

Application Security with NGINXNGINX, Inc.

About the Webinar In this webinar we demonstrate how to implement effective security controls for your application infrastructure, without impacting release velocity or application performance. Join Chris Witeck and Rajiv Kapoor as they showcase NGINX App Protect and the upcoming security capabilities within NGINX Controller, with specific business use cases in mind. On-Demand Link: https://www.nginx.com/resources/webinars/application-security-nginx/

NGINX Unit at Scale: Use Cases and the Future of UnitNGINX, Inc.

How to Get Started With NGINXNGINX, Inc.

Session: A Reference Architecture for Running Modern APIs with NGINX Unit and...NGINX, Inc.

Building and deploying cloud native APIs is a complex operation, and can require a multitude of components. In this workshop we focus on the fundamentals of deploying the runtime API code and publishing the API through an API gateway. To achieve this we use NGINX Unit as a polyglot application server and NGINX web server as an API gateway. With this combination we deliver a solution lightweight enough for dev and strong enough for production. You will learn how to use NGINX Unit to run one or more apps and APIs in a variety of languages, including seamlessly deploying new versions. You will then see the best practices for how to configure NGINX to perform the common API gateway functions of request routing, rate limiting, and authentication for multiple APIs. We will also touch on advanced use cases such as HTTP method enforcement, and JSON validation. No previous experience of NGINX or NGINX Unit is required, but a basic knowledge of HTTP and JSON/REST APIs is valuable.

Securing k8s With Kubernetes GoatMuhammad Yuga Nugraha

Control Kubernetes Ingress and Egress Together with NGINXNGINX, Inc.

On-Demand Recording https://www.nginx.com/resources/webinars/control-kubernetes-ingress-egress-together-nginx/ About the Webinar Join our resident Kubernetes and modern apps experts in a discussion of the challenges of Kubernetes traffic management in today’s technology landscape. While Kubernetes Ingress gets most of the attention, how you handle egress traffic is just as important. Egress isn’t just about traffic leaving a cluster, either, but also concerns traffic among managed and unmanaged services within the cluster. We demo a solution using NGINX Service Mesh and NGINX Ingress Controller to control egress from the cluster and between NGINX Service Mesh and unmanaged services. Whether you’re new to modern application architectures, or looking to improve your current microservices deployment, this webinar is for you. Speakers: Amir Rawdat Technical Marketing Engineer F5 Faisal Memon Software Engineer F5

Migrating from BIG-IP Deployment to NGINX ADCNGINX, Inc.

Speaker: Karthik Krishnaswamy, Sr Product Marketing Manager NGINX, Inc. About the Webinar Technology is revolutionizing our lives – we hail cabs, order food, and stream video right from apps on our mobile devices. At the heart of this disruption are enterprises that embrace digital transformation – according to a survey from IDC sponsored by NGINX, 75% of businesses will have completed their digital transformation by 2030. To support digital transformation, enterprises are modernizing their applications and underlying infrastructure by adopting a variety of processes and new technologies such as DevOps, cloud, open source, and microservices. Software load balancing is central to accelerating digital transformation efforts. That’s where NGINX comes in – it’s a lightweight, flexible and portable load balancer that helps you gain agility and simplifies your architecture In this webinar we cover how to gracefully migrate your BIG-IP deployment to NGINX, the ADC built for modern applications.

Kubernetes and the NGINX Plus Ingress ControllerKatherine Bagood

This document summarizes a Tech Talk presentation about using NGINX as an ingress controller and load balancer for Kubernetes applications. It discusses different architectures for deploying NGINX, including using it as a proxy, router mesh, or in a fabric model. It also covers benefits of Kubernetes, examples of basic and advanced ingress resource configurations, and deploying NGINX Plus as an ingress controller. The presentation includes a demo of a cafe application to demonstrate URL and hostname-based routing with SSL termination at the load balancer.

NGINX 101: Web Traffic Encryption with SSL/TLS and NGINXNGINX, Inc.

On-Demand Link: https://www.nginx.com/resources/webinars/nginx-101-web-traffic-encryption-ssl-tls/ 85% of all web traffic is encrypted. This now standard practice helps ensure that data (sensitive or not) sent over the Internet remains private and out of the hands of eavesdroppers and hackers. But how do you encrypt traffic? The answer is with SSL/TLS, an encryption protocol that protects Internet communication. Join this NGINX 101 foundational webinar to learn more about the importance of and best practices for encrypting your web, application, and API traffic. Our presenters show you how to create or procure a certificate to ensure transactions are authenticated, as well as demo how straightforward it is to encrypt and secure your web traffic using NGINX. We also answer attendee questions about NGINX and encryption. Robert Haynes Technical Marketing Manager F5

Securing Kubernetes Clusters with NGINX Plus Ingress Controller & NAPOlivia LaMar

What's New with NGINX Application Security SolutionsNGINX, Inc.

Data Plane Matters! A Deep Dive and Demo on NGINX Service MeshNGINX, Inc.

On-Demand Link: https://www.nginx.com/resources/webinars/service-mesh/ About the Webinar Join us for a special launch webinar as we introduce you to NGINX Service Mesh, our new offering as part of the NGINX product suite. In this webinar, you’ll learn about using NGINX Plus and NGINX Controller as part of your microservices journey, why your organization may need a service mesh to improve performance and reliability of your applications, and how NGINX Service Mesh can help you meet these needs. Our presenter(s) will also provide a demonstration of NGINX Service Mesh, giving you an insight into the new experience that awaits you and your team.

NGINX Controller: Configuration, Management, and Troubleshooting at Scale NGINX, Inc.

Speakers: Alan Murphy, Regional Solution Architect for APAC NGINX, Inc. Karthik Krishnaswamy, Senior Product Marketing Manager at NGINX, Inc. About the webinar Deploying and managing applications at scale always presents challenges. Infrastructure has to be configured and provisioned quickly across multiple public and private clouds. There’s ever-increasing pressure to maintain reliability, performance, and availability of business applications across this disparate infrastructure. Easy workflows for infrastructure and DevOps, as well as self-service management capabilities for developers, are needed to accelerate application deployment. The result? Enterprises are able to innovate and bring apps to market faster. That’s where NGINX Controller comes in. Controller helps users manage multiple NGINX instances at scale with centralized configuration, monitoring, alerting, and troubleshooting.

Production-Grade Kubernetes With NGINX Ingress ControllerNGINX, Inc.

From Code to Customer with F5 and NGNX London Nov 19NGINX, Inc.

Presentations by Vincent Laverne, Miles Martin, David Luke, Dan Henley and Owen Garrett and at ‘From Code to Customer with F5 and NGNX’ Lunch and Learn in the Shangri-La Hotel, At The Shard, London. Presentations provide tips and insight into how customers are using F5 and the NGINX Application Delivery Platform to drive a transformational agenda that supports their current environments & immediate application requirements in addition to laying the foundational building blocks for a world of cloud-based microservices applications. Solution areas covered will include Load Balancing, API Management & Service Mesh implementation options.

NGINX Lunch and Learn Event: Kubernetes and the NGINX Plus Ingress controllerKatherine Bagood

Securing Your Apps & APIs in the CloudOlivia LaMar

Hybrid and multi-cloud architectures are becoming the expected standard for architecture teams to buildout and for operations teams to maintain and deploy. Ever faster DevOps workflows are now an expectation for any digital enterprise, not a goal. And the code DevOps teams are pushing out is typically now packaged in containers, creating an increasingly distributed application landscape. So how can organizations still practice effective application security policy without impacting or crippling their modernization initiatives? NGINX can help with that. These slides will cover: NGINX Plus as an integrated, cloud-native Load Balancer and API Gateway in NGINX Plus NGINX App Protect as the new cloud-native WAF extension for NGINX Plus Demo of both working in tandem to set: Edge routing policy Edge Security Policy And Extending down to Granular, Per-App Security Policy

API Gateway Use Cases for KubernetesNGINX, Inc.

On-Demand Link: https://www.nginx.com/resources/webinars/api-gateway-use-cases-for-kubernetes/ About the Webinar Two app modernization trends – APIs and Kubernetes – have reached a critical adoption point where many organizations are now seeking to deliver APIs using Kubernetes. As with the containerization of applications, this strategy requires organizations to figure out how to deliver APIs quickly and safely. For traditional applications, the solution is a load balancer or ADC which routes API requests from a client to the appropriate services – in other words, an API gateway. But with Kubernetes come different ways to deliver both apps and APIs, which have in turn spawned two new traffic management tools: the Ingress controller and service mesh. Organizations are left with the question “Which tool should I use to deliver API gateway functionality in Kubernetes?” In this webinar, we help you answer that question by looking at the unique needs of containerized APIs (and their owners), sharing common use cases that can be solved with Kubernetes tools, and discussing what you can do to modernize your APIs for the Kubernetes era.

Découvrez NGINX AppProtectNGINX, Inc.

Flexible, Powerful, and Easy-to-Use Ingress Load Balancing with NGINX and Ope...NGINX, Inc.

About the Webinar Red Hat OpenShift is a supported and certified mechanism for deploying the NGINX Plus Ingress Controller for Kubernetes with point-and-click installation and automatic upgrades. You can leverage the Operator Lifecycle Manager (OLM) to perform installation, upgrade, and configuration of the NGINX Ingress Operator. In this webinar, you’ll learn how to get started with the Operator, and explore the benefits of using the NGINX Plus Ingress Controller for Kubernetes.  On-Demand Link: https://www.nginx.com/resources/webinars/ingress-load-balancing-nginx-openshift/

Relevez les défis Kubernetes avec NGINXNGINX, Inc.

Découvrez les dernières tendances de Kubernetes et comment NGINX résout les défis courants dans Kubernetes. Ce webinar vous permettra de découvrir une solution apportant des réponses à vos défis liés à Kubernetes. Rejoignez ce webinaire pour apprendre : • Découvrir les avantages des différentes architectures • Comment utiliser NGINX Ingress Controller pour sécuriser, renforcer et faire évoluer vos environnements Kubernetes • Comment déployer NGINX nativement dans Kubernetes • Effectuer un équilibrage de charges, de l’authentification et une sécurisation de manière transparente dans Kubernetes • La duplication des services d'application, à la fois à l'intérieur et à l'extérieur de Kubernetes • Optimiser la sécurisation des applications dans Kubernetes avec NGINX App Protect

Cloud-Native Operations with Kubernetes and CI/CDVMware Tanzu

Operations practices have historically lagged behind development. Agile and Extreme Programming have become common practice for development teams. In the last decade, the DevOps and SRE movements have brought these concepts to operations, borrowing heavily from Lean principles such as Kanban and Value Stream Mapping. So, how does all of this play out if we’re using Kubernetes? In this class, Paul Czarkowski, Principal Technologist at Pivotal, will explain how Kubernetes enables a new cloud-native way of operating software. Attend to learn: ● what cloud-native operations are; ● how to build a cloud-native CI/CD stack; and ● how to deploy and upgrade an application from source to production on Kubernetes. Presenter: Paul Czarkowski, Principal Technologist, Pivotal Software

More Related Content

What's hot (20)