はじめてのKong Konnect

Slide 1

Slide 1 text

THE CLOUD CONNECTIVITY COMPANY 1 ƒŻƤƉƑ,POH Tokyo, Japan APRIL 2021 THE CLOUD CONNECTIVITY COMPANY

Slide 2

Slide 2 text

THE CLOUD CONNECTIVITY COMPANY 2 Ϋϥ΢υίωΫςΟϏςΟͷ ͢΂ͯΛΧόʔ: ● API Gateway ● Ingress ● Service Mesh ● Integration (2021) αʔϏείωΫςΟϏςΟ ϓϥοτϑΥʔϜ

Slide 3

Slide 3 text

THE CLOUD CONNECTIVITY COMPANY 3 Basic Edge and Cross App Plugins Kuma Mesh Basic In-App Policies Kong Gateway Basic Edge and Cross App Plugins Kong Mesh Basic In-App Policies KIC decK Kong Gateway Enterprise RBAC OIDC AuthZ mTLS & JWT sig Advanced Transform Audit Logs Encryption of data at rest Distributed Caching GraphQL and Kafka OPA Hashicorp Vault Multi-Zone AutnZ FIPS-2 compliance Configuration Management UI Runtime Manager Developer Portal ServiceHub Immunity Anomaly Detection Vitals Analytics KIC decK KIC decK Open Source Projects Connectivity Fabric Services Connectivity Runtimes

Slide 4

Slide 4 text

THE CLOUD CONNECTIVITY COMPANY 4 σϓϩΠΠϝʔδ

Slide 5

Slide 5 text

THE CLOUD CONNECTIVITY COMPANY 5 Central Gateway ෳ਺ϨΠϠʔʹήʔτ΢ΣΠ഑ஔ Ingress  Controller KONG KONG KONG KONG Ingress  Controller KONG KONG Ingress  Controller KONG KONG KONG Coarse-grained policies (e.g. global rate- limiting, user & app authentication, IP blacklist, etc.) Fine-grained policies (i.e. upstream TLS, specific microservice cluster rate-limiting)

Slide 6

Slide 6 text

THE CLOUD CONNECTIVITY COMPANY 6 Central Gateway KONG KONG KONG Any Kubernetes  (EKS, AKS, GKE, OpenShift, etc.) Ingress Controller KONG KONG Service Sidecar Service Sidecar Service Sidecar Service Sidecar Sidecar ήʔτ΢ΣΠͱαʔϏεϝογϡʢk8sʣ

Slide 7

Slide 7 text

THE CLOUD CONNECTIVITY COMPANY 7 VM Central Gateway KONG KONG KONG Any Kubernetes  (EKS, AKS, GKE, OpenShift, etc.) Ingress Controller KONG Service Sidecar Service Sidecar VM ήʔτ΢ΣΠͱαʔϏεϝογϡʢVMͱk8sࠞ߹ʣ

Slide 8

Slide 8 text

THE CLOUD CONNECTIVITY COMPANY 8 VM Central Gateway ౷߹͞ΕͨίϯτϩʔϧϓϨʔϯͷఏڙʢ= Konnectʣ KONG KONG KONG Any Kubernetes  (EKS, AKS, GKE, OpenShift, etc.) Ingress Controller KONG Service Service VM

Slide 9

Slide 9 text

THE CLOUD CONNECTIVITY COMPANY 9 1ͭͷϓϩμΫτ - 2ͭͷύλʔϯ Konnect Self-managed Konnect Cloud

Slide 10

Slide 10 text

THE CLOUD CONNECTIVITY COMPANY 10 ηΩϡϦςΟͱ Ψόφϯε αʔϏε։ൃͷ εϐʔυΞοϓ 1 3 2 αʔϏεͷެ։ ར༻ͷଅਐ Kong KonnectͷϝϦοτ

Slide 11

Slide 11 text

THE CLOUD CONNECTIVITY COMPANY 11 σ Ϟ

Slide 12

Slide 12 text

THE CLOUD CONNECTIVITY COMPANY 12 αʔϏε։ൃεϐʔυΞοϓ

Slide 13

Slide 13 text

THE CLOUD CONNECTIVITY COMPANY 13 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1

Slide 14

Slide 14 text

THE CLOUD CONNECTIVITY COMPANY 14 Demo

Slide 15

Slide 15 text

THE CLOUD CONNECTIVITY COMPANY 15 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1

Slide 16

Slide 16 text

THE CLOUD CONNECTIVITY COMPANY 16 Demo

Slide 17

Slide 17 text

THE CLOUD CONNECTIVITY COMPANY 17 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1

Slide 18

Slide 18 text

THE CLOUD CONNECTIVITY COMPANY 18 Demo

Slide 19

Slide 19 text

THE CLOUD CONNECTIVITY COMPANY 19 αʔϏε։ൃεϐʔυΞοϓ ϙϦγʔద༻Λૉૣ͘؆୯ʹ ● ։ൃͱσϓϩΠͷ଎౓্͕͕Γ·͢ νʔϜͰͷར༻͕؆୯ʹ ● ։ൃνʔϜ͕ࣗ཯తʹϧʔςΟϯάઃఆՄೳɺRBACʹ ΑͬͯݖݶΛ෼͚Δͷ΋؆୯ʹ αʔϏεσϦόϦʔͷࣗಈԽ͕Մೳ ● APIήʔτ΢ΣΠͷઃఆΛCI/CDʹ૊ΈࠐΉͷ͕༰қ 1

Slide 20

Slide 20 text

THE CLOUD CONNECTIVITY COMPANY 20 ηΩϡϦςΟͱΨόφϯε

Slide 21

Slide 21 text

THE CLOUD CONNECTIVITY COMPANY 21 αʔϏεΛೝূೝՄͰอޢ͢Δ ● ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ αʔϏεؒτϥϑΟοΫͷϞχλϦϯά ● Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ 2 ηΩϡϦςΟͱΨόφϯε

Slide 22

Slide 22 text

THE CLOUD CONNECTIVITY COMPANY 22 Demo

Slide 23

Slide 23 text

THE CLOUD CONNECTIVITY COMPANY 23 αʔϏεΛೝূೝՄͰอޢ͢Δ ● ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ αʔϏεؒτϥϑΟοΫͷϞχλϦϯά ● Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ 2 ηΩϡϦςΟͱΨόφϯε

Slide 24

Slide 24 text

THE CLOUD CONNECTIVITY COMPANY 24 Demo

Slide 25

Slide 25 text

THE CLOUD CONNECTIVITY COMPANY 25 αʔϏεΛೝূೝՄͰอޢ͢Δ ● ίʔυΛॻ͘͜ͱͳ͘ೝূೝՄΛ௥ՃͰ͖Δ αʔϏεؒτϥϑΟοΫͷϞχλϦϯά ● Vitals΍༷ʑͳϓϥάΠϯΛ༻͍ͯτϥϑΟοΫͷ؂ࢹΛ࣮ݱ 2 ηΩϡϦςΟͱΨόφϯε

Slide 26

Slide 26 text

THE CLOUD CONNECTIVITY COMPANY 26 αʔϏεͷެ։ͱར༻ଅਐ

Slide 27

Slide 27 text

THE CLOUD CONNECTIVITY COMPANY 27 εϖοΫυϦϒϯ։ൃͱAPIςετ ● Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ ● αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ 3 αʔϏεͷެ։ͱར༻ଅਐ

Slide 28

Slide 28 text

THE CLOUD CONNECTIVITY COMPANY 28 Demo

Slide 29

Slide 29 text

THE CLOUD CONNECTIVITY COMPANY 29 εϖοΫυϦϒϯ։ൃͱAPIςετ ● Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ ● αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ 3 αʔϏεͷެ։ͱར༻ଅਐ

Slide 30

Slide 30 text

THE CLOUD CONNECTIVITY COMPANY 30 Demo

Slide 31

Slide 31 text

THE CLOUD CONNECTIVITY COMPANY 31 εϖοΫυϦϒϯ։ൃͱAPIςετ ● Insomnia Kong StudioΛ࢖ͬͨίϥϘϨʔγϣϯ αʔϏεͷެ։ɺσϕϩούʔϙʔλϧ ● αʔϏεΛσϕϩούʔϙʔλϧʹެ։͠ɺར༻Λଅਐ 3 αʔϏεͷެ։ͱར༻ଅਐ

Slide 32

Slide 32 text

THE CLOUD CONNECTIVITY COMPANY 32 ηΩϡϦςΟͱ Ψόφϯε αʔϏε։ൃͷ εϐʔυΞοϓ 1 3 2 αʔϏεͷެ։ ར༻ͷଅਐ Kong KonnectͷϝϦοτ

Slide 33

Slide 33 text

THE CLOUD CONNECTIVITY COMPANY 33 ๛෋ͳϓϥάΠϯ

Slide 34

Slide 34 text

THE CLOUD CONNECTIVITY COMPANY 34 ୅දతͳϓϥάΠϯ ๛෋ͳϓϥάΠϯ

Slide 35

Slide 35 text

THE CLOUD CONNECTIVITY COMPANY 35 αʔϏεϝογϡ

Slide 36

Slide 36 text

THE CLOUD CONNECTIVITY COMPANY 36 Kuma ■ Kong ͷఏڙ͢Δ৽͍͠ OSS ■ Envoy ্ʹߏங͞ΕͨϢχόʔαϧαʔϏεϝογϡ ■ ඇৗʹܰྔͳσʔλϓϨʔϯͱίϯτϩʔϧϓϨʔϯ ■ L4/L7 ͷτϥϑΟοΫͷ؂ࢹɺϧʔςΟϯάɺϩΪϯάɺ mTLSɺαʔϏεؒͷ૬ޓ઀ଓΛίʔυมߋͳ͠ʹ࣮ݱ ■ k8s ωΠςΟϒͰ͋Δͱಉ࣌ʹඇ k8s ϕʔεʢVMɾϕΞ ϝλϧʣͷαʔϏε্Ͱ΋ಈ࡞͠ɺطଘͷγεςϜͱ͏ ·͘౷߹ ■ ϚΠΫϩαʔϏεԽɾΫϥ΢υωΠςΟϒԽ΁εϜʔζ ʹҠߦ͢Δ͜ͱ͕Ͱ͖Δ ■ OPAωΠςΟϒαϙʔτ ■ Enterprise൛͸Kong Meshͱݺশ

Slide 37

Slide 37 text

THE CLOUD CONNECTIVITY COMPANY 37 Ϋϥ΢υίωΫςΟϏςΟͷ ͢΂ͯΛΧόʔ: ● API Gateway ● Ingress ● Service Mesh ● Integration (2021) αʔϏείωΫςΟϏςΟ ϓϥοτϑΥʔϜ

Slide 38

Slide 38 text

THE CLOUD CONNECTIVITY COMPANY 38 Thank You