はじめてのKong Konnect

2021/04/09
HCCJP

Transcript

1. THE CLOUD CONNECTIVITY COMPANY
   1
   ƒŻƤƉƑ,POH
   Tokyo, Japan
   APRIL 2021
   THE CLOUD
   CONNECTIVITY COMPANY
   

   View Slide

2. THE CLOUD CONNECTIVITY COMPANY
   2
   Ϋϥ΢υίωΫςΟϏςΟͷ
   ͢΂ͯΛΧόʔ:
   ● API Gateway
   ● Ingress
   ● Service Mesh
   ● Integration (2021)
   αʔϏείωΫςΟϏςΟ
   ϓϥοτϑΥʔϜ
   

   View Slide

3. THE CLOUD CONNECTIVITY COMPANY
   3
   Basic Edge and
   Cross App Plugins
   Kuma Mesh
   Basic In-App
   Policies
   Kong Gateway
   Basic Edge and
   Cross App Plugins
   Kong Mesh
   Basic In-App
   Policies
   KIC decK
   Kong Gateway
   Enterprise
   RBAC
   OIDC AuthZ
   mTLS & JWT sig
   Advanced Transform
   Audit Logs
   Encryption of data at rest
   Distributed Caching
   GraphQL and Kafka
   OPA
   Hashicorp Vault
   Multi-Zone AutnZ
   FIPS-2 compliance
   Configuration Management UI
   Runtime Manager
   Developer Portal
   ServiceHub
   Immunity Anomaly Detection
   Vitals Analytics
   KIC decK
   KIC decK
   Open Source Projects
   Connectivity
   Fabric
   Services
   Connectivity
   Runtimes
   

   View Slide

4. THE CLOUD CONNECTIVITY COMPANY
   4
   σϓϩΠΠϝʔδ
   

   View Slide

5. THE CLOUD CONNECTIVITY COMPANY
   5
   Central
   Gateway
   ෳ਺ϨΠϠʔʹήʔτ΢ΣΠ഑ஔ
   Ingress

   Controller
   KONG
   KONG
   KONG
   KONG
   Ingress

   Controller
   KONG KONG
   Ingress

   Controller
   KONG KONG
   KONG
   Coarse-grained
   policies
   (e.g. global rate-
   limiting, user & app
   authentication, IP
   blacklist, etc.)
   Fine-grained policies
   (i.e. upstream TLS, specific
   microservice cluster rate-limiting)
   

   View Slide

6. THE CLOUD CONNECTIVITY COMPANY
   6
   Central
   Gateway
   KONG
   KONG
   KONG
   Any Kubernetes

   (EKS, AKS, GKE, OpenShift, etc.)
   Ingress
   Controller
   KONG
   KONG
   Service
   Sidecar
   Service
   Sidecar
   Service
   Sidecar
   Service
   Sidecar
   Sidecar
   ήʔτ΢ΣΠͱαʔϏεϝογϡʢk8sʣ
   

   View Slide

7. THE CLOUD CONNECTIVITY COMPANY
   7
   VM
   Central
   Gateway
   KONG
   KONG
   KONG
   Any Kubernetes

   (EKS, AKS, GKE, OpenShift, etc.)
   Ingress
   Controller
   KONG
   Service
   Sidecar
   Service
   Sidecar
   VM
   ήʔτ΢ΣΠͱαʔϏεϝογϡʢVMͱk8sࠞ߹ʣ
   

   View Slide

8. THE CLOUD CONNECTIVITY COMPANY
   8
   VM
   Central
   Gateway
   ౷߹͞ΕͨίϯτϩʔϧϓϨʔϯͷఏڙʢ= Konnectʣ
   KONG
   KONG
   KONG
   Any Kubernetes

   (EKS, AKS, GKE, OpenShift, etc.)
   Ingress
   Controller
   KONG
   Service
   Service
   VM
   

   View Slide

9. THE CLOUD CONNECTIVITY COMPANY
   9
   1ͭͷϓϩμΫτ - 2ͭͷύλʔϯ
   Konnect Self-managed Konnect Cloud
   

   View Slide

10. THE CLOUD CONNECTIVITY COMPANY
    10
    ηΩϡϦςΟͱ
    Ψόφϯε
    αʔϏε։ൃͷ
    εϐʔυΞοϓ
    1 3
    2
    αʔϏεͷެ։
    ར༻ͷଅਐ
    Kong KonnectͷϝϦοτ
    

    View Slide

11. THE CLOUD CONNECTIVITY COMPANY
    11
    σ Ϟ
    

    View Slide

12. THE CLOUD CONNECTIVITY COMPANY
    12
    αʔϏε։ൃεϐʔυΞοϓ
    

    View Slide

13. THE CLOUD CONNECTIVITY COMPANY
    13
    αʔϏε։ൃεϐʔυΞοϓ
    ϙϦγʔద༻Λૉૣ͘؆୯ʹ
    ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢
    νʔϜͰͷར༻͕؆୯ʹ
    ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ
    ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ
    αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ
    ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ
    1
    

    View Slide

14. THE CLOUD CONNECTIVITY COMPANY
    14
    Demo
    

    View Slide

15. THE CLOUD CONNECTIVITY COMPANY
    15
    αʔϏε։ൃεϐʔυΞοϓ
    ϙϦγʔద༻Λૉૣ͘؆୯ʹ
    ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢
    νʔϜͰͷར༻͕؆୯ʹ
    ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ
    ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ
    αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ
    ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ
    1
    

    View Slide

16. THE CLOUD CONNECTIVITY COMPANY
    16
    Demo
    

    View Slide

17. THE CLOUD CONNECTIVITY COMPANY
    17
    αʔϏε։ൃεϐʔυΞοϓ
    ϙϦγʔద༻Λૉૣ͘؆୯ʹ
    ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢
    νʔϜͰͷར༻͕؆୯ʹ
    ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ
    ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ
    αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ
    ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ
    1
    

    View Slide

18. THE CLOUD CONNECTIVITY COMPANY
    18
    Demo
    

    View Slide

19. THE CLOUD CONNECTIVITY COMPANY
    19
    αʔϏε։ൃεϐʔυΞοϓ
    ϙϦγʔద༻Λૉૣ͘؆୯ʹ
    ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢
    νʔϜͰͷར༻͕؆୯ʹ
    ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ
    ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ
    αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ
    ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ
    1
    

    View Slide

20. THE CLOUD CONNECTIVITY COMPANY
    20
    ηΩϡϦςΟͱΨόφϯε
    

    View Slide

21. THE CLOUD CONNECTIVITY COMPANY
    21
    αʔϏεΛೝূೝՄͰอޢ͢Δ
    ● ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ
    αʔϏεؒτϥϑΟοΫͷϞχλϦϯά
    ● Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ
    2 ηΩϡϦςΟͱΨόφϯε
    

    View Slide

22. THE CLOUD CONNECTIVITY COMPANY
    22
    Demo
    

    View Slide

23. THE CLOUD CONNECTIVITY COMPANY
    23
    αʔϏεΛೝূೝՄͰอޢ͢Δ
    ● ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ
    αʔϏεؒτϥϑΟοΫͷϞχλϦϯά
    ● Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ
    2 ηΩϡϦςΟͱΨόφϯε
    

    View Slide

24. THE CLOUD CONNECTIVITY COMPANY
    24
    Demo
    

    View Slide

25. THE CLOUD CONNECTIVITY COMPANY
    25
    αʔϏεΛೝূೝՄͰอޢ͢Δ
    ● ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ
    αʔϏεؒτϥϑΟοΫͷϞχλϦϯά
    ● Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ
    2 ηΩϡϦςΟͱΨόφϯε
    

    View Slide

26. THE CLOUD CONNECTIVITY COMPANY
    26
    αʔϏεͷެ։ͱར༻ଅਐ
    

    View Slide

27. THE CLOUD CONNECTIVITY COMPANY
    27
    εϖοΫυϦϒϯ։ൃͱAPIςετ
    ● Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ
    αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ
    ● αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ
    3 αʔϏεͷެ։ͱར༻ଅਐ
    

    View Slide

28. THE CLOUD CONNECTIVITY COMPANY
    28
    Demo
    

    View Slide

29. THE CLOUD CONNECTIVITY COMPANY
    29
    εϖοΫυϦϒϯ։ൃͱAPIςετ
    ● Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ
    αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ
    ● αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ
    3 αʔϏεͷެ։ͱར༻ଅਐ
    

    View Slide

30. THE CLOUD CONNECTIVITY COMPANY
    30
    Demo
    

    View Slide

31. THE CLOUD CONNECTIVITY COMPANY
    31
    εϖοΫυϦϒϯ։ൃͱAPIςετ
    ● Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ
    αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ
    ● αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ
    3 αʔϏεͷެ։ͱར༻ଅਐ
    

    View Slide

32. THE CLOUD CONNECTIVITY COMPANY
    32
    ηΩϡϦςΟͱ
    Ψόφϯε
    αʔϏε։ൃͷ
    εϐʔυΞοϓ
    1 3
    2
    αʔϏεͷެ։
    ར༻ͷଅਐ
    Kong KonnectͷϝϦοτ
    

    View Slide

33. THE CLOUD CONNECTIVITY COMPANY
    33
    ๛෋ͳϓϥάΠϯ
    

    View Slide

34. THE CLOUD CONNECTIVITY COMPANY
    34
    ୅දతͳϓϥάΠϯ
    ๛෋ͳϓϥάΠϯ
    

    View Slide

35. THE CLOUD CONNECTIVITY COMPANY
    35
    αʔϏεϝογϡ
    

    View Slide

36. THE CLOUD CONNECTIVITY COMPANY
    36
    Kuma
    ■ Kong ͷఏڙ͢Δ৽͍͠ OSS
    ■ Envoy ্ʹߏங͞ΕͨϢχόʔαϧαʔϏεϝογϡ
    ■ ඇৗʹܰྔͳσʔλϓϨʔϯͱίϯτϩʔϧϓϨʔϯ
    ■ L4/L7 ͷτϥϑΟοΫͷ؂ࢹɺϧʔςΟϯάɺϩΪϯάɺ
    mTLSɺαʔϏεؒͷ૬ޓ઀ଓΛίʔυมߋͳ͠ʹ࣮ݱ
    ■ k8s ωΠςΟϒͰ͋Δͱಉ࣌ʹඇ k8s ϕʔεʢVMɾϕΞ
    ϝλϧʣͷαʔϏε্Ͱ΋ಈ࡞͠ɺطଘͷγεςϜͱ͏
    ·͘౷߹
    ■ ϚΠΫϩαʔϏεԽɾΫϥ΢υωΠςΟϒԽ΁εϜʔζ
    ʹҠߦ͢Δ͜ͱ͕Ͱ͖Δ
    ■ OPAωΠςΟϒαϙʔτ
    ■ Enterprise൛͸Kong Meshͱݺশ
    

    View Slide

37. THE CLOUD CONNECTIVITY COMPANY
    37
    Ϋϥ΢υίωΫςΟϏςΟͷ
    ͢΂ͯΛΧόʔ:
    ● API Gateway
    ● Ingress
    ● Service Mesh
    ● Integration (2021)
    αʔϏείωΫςΟϏςΟ
    ϓϥοτϑΥʔϜ
    

    View Slide

38. THE CLOUD CONNECTIVITY COMPANY
    38
    Thank You
    

    View Slide