20 Questions
What is Ingress?
A door to your Kubernetes services
True or false: An Ingress controller is required to use an Ingress.
True
What is Intel's primary focus when contributing to Envoy?
Security enhancements
True or false: A service mesh is an extra layer of application that runs on top of a Kubernetes cluster.
True
What are the capabilities of Envoy?
Dynamic configuration based on xDS REST protocols and tracing services
What is the main feature of Intel's contribution to crypto acceleration?
Transport Layer Security handshake
What is a service mesh?
A cloud-native dedicated infrastructure layer application
True or false: The Ingress API has enough capabilities to satisfy all the needs of the community.
False
What is the purpose of Ingress?
To allow external traffic into a Kubernetes cluster
What is the Gateway API?
A way to address the issues with the Ingress API
What is Intel's working area for hosting and baking features before they hit the upstream?
A dedicated Intel working area
True or false: Envoy is an edge and service proxy with a large community on GitHub.
True
What type of filters can be used with Envoy-based service meshes?
Intrusion Detection System (IDS
True or false: Tracing services are useful for optimizing the performance of services.
True
What are some of the areas of contribution Intel is working on?
Crypto acceleration
What can tracing services be used for?
Understanding the flow of requests
What is the community project associated with Envoy?
GitHub
What is the purpose of the Ingress API?
To set specific rules for how to route incoming traffic
What is the purpose of the Gateway API?
To provide dynamic configuration based on xDS REST protocols
What is the purpose of a service mesh?
To control service-to-service communication inside the Kubernetes cluster
Study Notes
- Ingress is a door to your Kubernetes services that allows external access to the cluster.
- An Ingress defines a Kubernetes API that allows external reachable URLs with load balancing.
- An Ingress object sets specific rules for how to route incoming traffic.
- An Ingress controller is an application that implements an Ingress API.
- An Ingress is not enough by itself, so the community has been thinking beyond Ingress.
- A service mesh is a cloud-native dedicated infrastructure layer application that controls service-to-service communication inside the Kubernetes cluster.
- Like the other Kubernetes services, the service mesh needs an entrance, such as an Ingress, to the services running on top of the service mesh.
- The Ingress API is simple and stable, but due to the lack of capabilities, vendors and others have created workarounds like extra APIs or annotations.
- The Gateway API was created to address the issues with the Ingress API and its lack of capabilities.
- Envoy is a popular edge and service proxy with over twenty thousand stars and almost four thousand forks on GitHub statistics. It's a very active and healthy community project.
- Envoy incorporates all the learnings from the older versions, including the dynamic configuration based on xDS REST protocols and the ability to load dynamically.
- Envoy includes filters that perform transformations on requests and responses, and can be chained together to add features like Intrusion Detection System (IDS), compression, rate limiting, and more.
- With these filters, you can add features like Intrusion Detection System (IDS), compression, rate limiting, and more as layer 7 filters.
- Envoy also has extensive statistics that can be exposed via Prometheus and Grafana, for example.
- Tracing services can help you understand the flow of requests and the time spent on each step of the process.
- Tracing services can be used with Envoy-based service meshes to create very detailed call graphs.
- This information can be useful for understanding the flow of requests and for optimizing the performance of your services.
Test your knowledge of Kubernetes Ingress, Ingress controller, service mesh, and Envoy proxy with this quiz. Learn about routing rules, service-to-service communication, and the capabilities of Ingress and Gateway APIs.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
