Canadian CNCF: "Emissary-ingress 101: An introduction to the CNCF incubation-level API gateway"
0 likes389 views
Emissary Ingress is an open-source, cloud-native API gateway built on Envoy, focusing on developer-friendly configurations and wide industry adoption. It supports advanced traffic management, app security, and observability features, making it suitable for service mesh integrations and cloud-native architectures. Over four years since its initial release, Emissary has grown significantly in community and usage across various major production deployments.
Canadian CNCF: "Emissary-ingress 101: An introduction to the CNCF incubation-level API gateway"
- 1. Emissary Ingress 101 Daniel Bryant @danielbryantuk | db@datawire.io Director of DevRel, Ambassador Labs
- 2. What is Emissary Ingress? Open-source cloud-native API gateway, powered by Envoy ● Formerly known as Ambassador API Gateway ● CNCF Incubation project ● Developer-focused (self-service config) ○ CRDs, Ingress, or Kubernetes annotations ● Wide adoption over the past four years 2
- 3. Traffic management Emissary is an API Gateway Jane: /quote/ Mark: /quote/update/ 3
- 4. Emissary is an API Gateway Jane: /quote/ Mark: /quote/update/ App development App security 4 Mark: /quote/update/ X Rate Limiting Resilience Observability
- 5. Resilience • Advanced load balancing • Circuit breakers • Automatic retries • Timeouts • Auth (via ext_authz) • Rate limiting (via rls.proto) Observability • Distributed tracing • Real-time metrics • Logs (+Envoy output) Cloud-native • Service discovery with Kubernetes and Consul • Zero downtime configuration • Stateless high availability architecture L7 support • HTTP/1.0, HTTP/1.1, HTTP/2 • gRPC, gRPC-Web • TCP, WebSockets • Server Name Indication (SNI) • Gzip compression Emissary Core Features Emissary Core Features 5
- 6. Emissary is Built on Envoy Proxy 6
- 7. Emissary is Ambassador’s Open Core 7
- 8. Use cases
- 9. API Gateway for North/South traffic Traffic management App security App development 9
- 11. Hub and Spoke Traffic management App security App development 11
- 13. Service meshes: We’ve got you covered https://www.getambassador.io/docs/edge-stack/latest/howtos/
- 14. Configuration
- 15. Configuring the Control Plane apiVersion: getambassador.io/v2 kind: Mapping metadata: name: quote-mapping spec: prefix: /quote/ service: quote apiVersion: getambassador.io/v2 kind: Host metadata: name: wildcard-host spec: hostname: “*” acmeProvider: authority: none tlsSecret: name: base-cert apiVersion: getambassador.io/v2 kind: AuthService metadata: name: extauth-service spec: auth_service: example-auth path_prefix: “/extauth” allowed_request_headers: - “x-example-session” allowed_authorization_headers: - “x-example-session” - “x-example-userid” apiVersion: getambassador.io/v2 kind: Mapping metadata: name: quote2-mapping spec: prefix: /quote/ service: fancy-quote weight: 10 apiVersion: getambassador.io/v2 kind: Mapping metadata: name: restricted-mapping spec: host: restricted.example.com prefix: /restricted/ rewrite: /a/very/safe/path/ rewrite_host: safe.example.com service: dangerous-service 15
- 16. Configuring the Control Plane apiVersion: getambassador.io/v2 kind: Mapping metadata: name: quote-mapping spec: prefix: /quote/ service: quote apiVersion: networking.k8s.io/v1 kind: Ingress metadata: annotations: kubernetes.io/ingress.class: ambassador name: example-ingress spec: tls: - hosts: - sslexample.foo.com secretName: sslexample-cert rules: - host: sslexample.foo.com http: paths: - path: /quote/ backend: serviceName: quote servicePort: 80 apiVersion: getambassador.io/v2 kind: Host metadata: name: wildcard-host spec: hostname: “sslexample.foo.com” acmeProvider: authority: none tlsSecret: name: sslexample-cert 16
- 18. Service meshes: We’ve got you covered https://www.getambassador.io/docs/edge-stack/latest/howtos/
- 19. Make Money* with Emissary-Ingress & Linkerd Install add_linkerd_headers: true * Making money not guaranteed!
- 21. Emissary + HashiCorp Consul www.youtube.com/watch?v=QnvU4vCgAlE blog.getambassador.io/part-3-incremental-app-migration-from-vms-to-kubernetes-amb assador-and-consul-aacf87eea3e8
- 24. Adoption
- 25. Four Remarkable Years Initial release, March 2017 Ambassador 1.0 release, Jan 2020 CNCF donation as Emissary, April 2021 3.3K GitHub stars 5000+ Slack members 160+ contributors 500+ forks 25
- 27. The cloud native superpower: The people Emissary Ingress could never have come this far without the amazing community that’s grown up around it Many, many thanks! (And we’re only just getting started)
- 28. Proven and Growing Rapidly Many production deployments: ● AppDirect: (KubeCon NA 2018 presentation) ● GoSpotCheck: (KubeCon NA 2019 presentation) ● Lifion by ADP ● Ticketmaster ● Chick-Fil-A ● OneFootball (KubeCon EU 2019 presentation) 28
- 29. Getting Started with Emissary-Ingress www.getambassador.io/docs/edge-stack/latest/topics/install/install-ambassador-oss/ app.getambassador.io/initializer/
- 30. Thanks! @danielbryantuk | db@datawire.io To get involved or ask questions: www.getambassador.io/developer-office-hours/ a8r.io/slack 30