nghttpx Ingress controller

Kubernetes Meetup Tokyo #3 LT

Transcript

1. NGHTTPX INGRESS CONTROLLER Tatsuhiro Tsujikawa, Z Lab
2. WE WHAT IS INGRESS CONTROLLER? ▸ IngressϦιʔεΛಡΜͰ͍͍ײ͡ʹL7ϩʔυόϥϯαʔΛઃఆͯ͠ϦΫΤετ ͕ظ଴௨ΓʹϑΥϫʔυ͞ΕΔΑ͏ʹ͢ΔػೳΛఏڙ͢Δ΋ͷ͕ͦ͜ɺIngress controllerͳͷͰ͋Δɻ
 Quoted from http://qiita.com/tatsuhiro-t/items/5cc012d3f6386c8780b6
3. WE ARE NGHTTPX L7 LOAD BALANCER + INGRESS CONTROLLER = NGHTTPX INGRESS CONTROLLER
4. WE ARE HI NGHTTPX IS L7 LOAD BALANCER ▸ Developed by nghttp2 project, MIT licensed OSS ▸ HTTP/2 for both front end and backend ▸ Battle tested HTTP/2 implementation by libnghttp2 ▸ HTTP/2 Server Push ▸ Modern TLS features (session id, session tickets, OCSP, ALPN, PFS, HTTP/2, and CT) ▸ Binary hot swapping/graceful shutdown ▸ MRUBY scripting (very limited ATM) ▸ https://nghttp2.org/documentation/nghttpx.1.html NGHTTPX CLIENT SVC HTTP/2,
 HTTP/1 HTTP/2,
 HTTP/1 TLS,
 ClearText TLS,
 ClearText
5. WE ARE HIR NGHTTPX INGRESS CONTROLLER ▸ Developed and open sourced by Z Lab, MIT licensed ▸ https://github.com/zlabjp/nghttpx-ingress-lb ▸ Development has started by forking NGINX ingress controller ▸ HTTP/2 ▸ TLS ▸ and …
6. WE ARE HIRIN NGHTTPX INGRESS CONTROLLER ▸ Can initiate HTTP/2 connections (with/without TLS) to backend services ▸ NGINX ingress controller cannot do this at the time of writing ▸ gRPC? No problem ▸ Require explicit extended annotations …
7. WE ARE HIRING! NGHTTPX INGRESS CONTROLLER ▸ Explicit extended annotations apiVersion: extensions/v1beta1 kind: Ingress metadata: name: greeter annotations: ingress.zlab.co.jp/backend-config: '{"greeter": {"50051": {"proto": "h2"}}}' spec: rules: - http: paths: - path: /helloworld.Greeter/ backend: serviceName: greeter servicePort: 50051
8. THANK YOU! WE ARE HIRING! Z LAB