Upgrade to Pro — share decks privately, control downloads, hide ads and more …

はじめてのKong Konnect

はじめてのKong Konnect

2021/04/09
HCCJP

5df67047ff8dd67c1f3b7e0f9b48c2ee?s=128

Takafumi Ikeda

April 09, 2021
Tweet

Transcript

  1. THE CLOUD CONNECTIVITY COMPANY 1 ƒŻƤƉƑ,POH Tokyo, Japan APRIL 2021

    THE CLOUD CONNECTIVITY COMPANY
  2. THE CLOUD CONNECTIVITY COMPANY 2 Ϋϥ΢υίωΫςΟϏςΟͷ ͢΂ͯΛΧόʔ: • API Gateway

    • Ingress • Service Mesh • Integration (2021) αʔϏείωΫςΟϏςΟ ϓϥοτϑΥʔϜ
  3. THE CLOUD CONNECTIVITY COMPANY 3 Basic Edge and Cross App

    Plugins Kuma Mesh Basic In-App Policies Kong Gateway Basic Edge and Cross App Plugins Kong Mesh Basic In-App Policies KIC decK Kong Gateway Enterprise RBAC OIDC AuthZ mTLS & JWT sig Advanced Transform Audit Logs Encryption of data at rest Distributed Caching GraphQL and Kafka OPA Hashicorp Vault Multi-Zone AutnZ FIPS-2 compliance Configuration Management UI Runtime Manager Developer Portal ServiceHub Immunity Anomaly Detection Vitals Analytics KIC decK KIC decK Open Source Projects Connectivity Fabric Services Connectivity Runtimes
  4. THE CLOUD CONNECTIVITY COMPANY 4 σϓϩΠΠϝʔδ

  5. THE CLOUD CONNECTIVITY COMPANY 5 Central Gateway ෳ਺ϨΠϠʔʹήʔτ΢ΣΠ഑ஔ Ingress
 Controller

    KONG KONG KONG KONG Ingress
 Controller KONG KONG Ingress
 Controller KONG KONG KONG Coarse-grained policies (e.g. global rate- limiting, user & app authentication, IP blacklist, etc.) Fine-grained policies (i.e. upstream TLS, specific microservice cluster rate-limiting)
  6. THE CLOUD CONNECTIVITY COMPANY 6 Central Gateway KONG KONG KONG

    Any Kubernetes
 (EKS, AKS, GKE, OpenShift, etc.) Ingress Controller KONG KONG Service Sidecar Service Sidecar Service Sidecar Service Sidecar Sidecar ήʔτ΢ΣΠͱαʔϏεϝογϡʢk8sʣ
  7. THE CLOUD CONNECTIVITY COMPANY 7 VM Central Gateway KONG KONG

    KONG Any Kubernetes
 (EKS, AKS, GKE, OpenShift, etc.) Ingress Controller KONG Service Sidecar Service Sidecar VM ήʔτ΢ΣΠͱαʔϏεϝογϡʢVMͱk8sࠞ߹ʣ
  8. THE CLOUD CONNECTIVITY COMPANY 8 VM Central Gateway ౷߹͞ΕͨίϯτϩʔϧϓϨʔϯͷఏڙʢ= Konnectʣ

    KONG KONG KONG Any Kubernetes
 (EKS, AKS, GKE, OpenShift, etc.) Ingress Controller KONG Service Service VM
  9. THE CLOUD CONNECTIVITY COMPANY 9 1ͭͷϓϩμΫτ - 2ͭͷύλʔϯ Konnect Self-managed

    Konnect Cloud
  10. THE CLOUD CONNECTIVITY COMPANY 10 ηΩϡϦςΟͱ Ψόφϯε αʔϏε։ൃͷ εϐʔυΞοϓ 1

    3 2 αʔϏεͷެ։ ར༻ͷଅਐ Kong KonnectͷϝϦοτ
  11. THE CLOUD CONNECTIVITY COMPANY 11 σ Ϟ

  12. THE CLOUD CONNECTIVITY COMPANY 12 αʔϏε։ൃεϐʔυΞοϓ

  13. THE CLOUD CONNECTIVITY COMPANY 13 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ • ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ

    • ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ • APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1
  14. THE CLOUD CONNECTIVITY COMPANY 14 Demo

  15. THE CLOUD CONNECTIVITY COMPANY 15 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ • ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ

    • ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ • APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1
  16. THE CLOUD CONNECTIVITY COMPANY 16 Demo

  17. THE CLOUD CONNECTIVITY COMPANY 17 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ • ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ

    • ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ • APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1
  18. THE CLOUD CONNECTIVITY COMPANY 18 Demo

  19. THE CLOUD CONNECTIVITY COMPANY 19 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ • ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ

    • ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ • APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1
  20. THE CLOUD CONNECTIVITY COMPANY 20 ηΩϡϦςΟͱΨόφϯε

  21. THE CLOUD CONNECTIVITY COMPANY 21 αʔϏεΛೝূೝՄͰอޢ͢Δ • ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ αʔϏεؒτϥϑΟοΫͷϞχλϦϯά •

    Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ 2 ηΩϡϦςΟͱΨόφϯε
  22. THE CLOUD CONNECTIVITY COMPANY 22 Demo

  23. THE CLOUD CONNECTIVITY COMPANY 23 αʔϏεΛೝূೝՄͰอޢ͢Δ • ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ αʔϏεؒτϥϑΟοΫͷϞχλϦϯά •

    Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ 2 ηΩϡϦςΟͱΨόφϯε
  24. THE CLOUD CONNECTIVITY COMPANY 24 Demo

  25. THE CLOUD CONNECTIVITY COMPANY 25 αʔϏεΛೝূೝՄͰอޢ͢Δ • ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ αʔϏεؒτϥϑΟοΫͷϞχλϦϯά •

    Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ 2 ηΩϡϦςΟͱΨόφϯε
  26. THE CLOUD CONNECTIVITY COMPANY 26 αʔϏεͷެ։ͱར༻ଅਐ

  27. THE CLOUD CONNECTIVITY COMPANY 27 εϖοΫυϦϒϯ։ൃͱAPIςετ • Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ

    αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ • αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ 3 αʔϏεͷެ։ͱར༻ଅਐ
  28. THE CLOUD CONNECTIVITY COMPANY 28 Demo

  29. THE CLOUD CONNECTIVITY COMPANY 29 εϖοΫυϦϒϯ։ൃͱAPIςετ • Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ

    αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ • αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ 3 αʔϏεͷެ։ͱར༻ଅਐ
  30. THE CLOUD CONNECTIVITY COMPANY 30 Demo

  31. THE CLOUD CONNECTIVITY COMPANY 31 εϖοΫυϦϒϯ։ൃͱAPIςετ • Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ

    αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ • αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ 3 αʔϏεͷެ։ͱར༻ଅਐ
  32. THE CLOUD CONNECTIVITY COMPANY 32 ηΩϡϦςΟͱ Ψόφϯε αʔϏε։ൃͷ εϐʔυΞοϓ 1

    3 2 αʔϏεͷެ։ ར༻ͷଅਐ Kong KonnectͷϝϦοτ
  33. THE CLOUD CONNECTIVITY COMPANY 33 ๛෋ͳϓϥάΠϯ

  34. THE CLOUD CONNECTIVITY COMPANY 34 ୅දతͳϓϥάΠϯ ๛෋ͳϓϥάΠϯ

  35. THE CLOUD CONNECTIVITY COMPANY 35 αʔϏεϝογϡ

  36. THE CLOUD CONNECTIVITY COMPANY 36 Kuma ▪ Kong ͷఏڙ͢Δ৽͍͠ OSS

    ▪ Envoy ্ʹߏங͞ΕͨϢχόʔαϧαʔϏεϝογϡ ▪ ඇৗʹܰྔͳσʔλϓϨʔϯͱίϯτϩʔϧϓϨʔϯ ▪ L4/L7 ͷτϥϑΟοΫͷ؂ࢹɺϧʔςΟϯάɺϩΪϯάɺ mTLSɺαʔϏεؒͷ૬ޓ઀ଓΛίʔυมߋͳ͠ʹ࣮ݱ ▪ k8s ωΠςΟϒͰ͋Δͱಉ࣌ʹඇ k8s ϕʔεʢVMɾϕΞ ϝλϧʣͷαʔϏε্Ͱ΋ಈ࡞͠ɺطଘͷγεςϜͱ͏ ·͘౷߹ ▪ ϚΠΫϩαʔϏεԽɾΫϥ΢υωΠςΟϒԽ΁εϜʔζ ʹҠߦ͢Δ͜ͱ͕Ͱ͖Δ ▪ OPAωΠςΟϒαϙʔτ ▪ Enterprise൛͸Kong Meshͱݺশ
  37. THE CLOUD CONNECTIVITY COMPANY 37 Ϋϥ΢υίωΫςΟϏςΟͷ ͢΂ͯΛΧόʔ: • API Gateway

    • Ingress • Service Mesh • Integration (2021) αʔϏείωΫςΟϏςΟ ϓϥοτϑΥʔϜ
  38. THE CLOUD CONNECTIVITY COMPANY 38 Thank You