# ingress Published articles for ingress. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## The Default Deny Dilemma: A Practical Guide to Kubernetes Network Policies DevFeed: [The Default Deny Dilemma: A Practical Guide to Kubernetes Network Policies]() Original publisher: [Read original article]() Author: Wellingtone Luvonga Published: 2026-09-08T03:00:00Z Content type: tutorial Language: en Sources: [CYBERTEC PostgreSQL | Services & Support]() Topics: [Kubernetes](), [Network](), [Security](), [Zero Trust](), [Architecture & Design]() Tags: [blog](), [cni](), [container](), [guide](), [how-to](), [ingress](), [kubernetes](), [network](), [network-security](), [postgersql](), [security](), [test](), [yaml](), [zero-trust]() ### AI overview A hands-on lab for implementing zero-trust network segmentation in Kubernetes with NetworkPolicies. It demonstrates default-deny rules, label-based ingress and egress permissions, DNS access, external API restrictions, and traffic validation in a three-tier frontend, backend, and PostgreSQL architecture enforced by Calico. ### Source excerpt This blog is a deep walkthrough about network policies in Kubernetes, read to know more. The post The Default Deny Dilemma: A Practical Guide to Kubernetes Network Policies appeared first on CYBERTEC PostgreSQL | Services & Support. ## Lab: VXLAN Bridging with EVPN Control Plane DevFeed: [Lab: VXLAN Bridging with EVPN Control Plane]() Original publisher: [Read original article]() Published: 2026-01-27T06:59:00Z Content type: tutorial Language: en Sources: [ipSpace.net blog]() Topics: [evpn](), [VXLAN](), [BGP](), [Ethernet]() Tags: [bgp](), [ethernet](), [evpn](), [github](), [ingress](), [ipv4](), [mac](), [netlab](), [vxlan]() ### AI overview This lab adds the EVPN control plane to VXLAN Ethernet bridging. The data plane remains VLANs mapped over VXLAN over IPv4, while EVPN, carried as a BGP address family, builds ingress replication lists and MAC-to-VTEP mappings. ### Source excerpt In the previous VXLAN labs, we covered the basics of Ethernet bridging over VXLAN and a more complex scenario with multiple VLANs. Now let's add the EVPN control plane into the mix. The data plane (VLANs mapped into VXLAN-over-IPv4) will remain unchanged, but we'll use EVPN (a BGP address family) to build the ingress replication lists and MAC-to-VTEP mappings. Read more ... ## Fork Yeah: We're keeping ingress-nginx alive DevFeed: [Fork Yeah: We're keeping ingress-nginx alive]() Original publisher: [Read original article]() Published: 2025-12-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [nginx](), [Kubernetes](), [Security](), [migration](), [Open Source](), [Maintainers](), [chainguard](), [container images](), [GitHub]() Tags: [chainguard](), [chainguard-emeritoss](), [chainguard-open-source](), [container-images](), [github](), [ingress](), [ingress-nginx](), [ingress-nginx-retirement](), [kubeapps](), [kubernetes](), [maintainers](), [migration](), [nginx](), [open-source](), [security]() ### AI overview Chainguard is maintaining a fork of ingress-nginx through its EmeritOSS program after the upstream project announced retirement and planned archiving in March 2026. It offers CVE-free container images, remediation SLAs, and FIPS versions while users evaluate migration options such as the Gateway API or other ingress controllers. ### Source excerpt Chainguard is keeping ingress-nginx alive through EmeritOSS, providing security-focused maintenance so teams can migrate safely without risk. ## Ingress-nginx-controller: Nightmare on CVE Street DevFeed: [Ingress-nginx-controller: Nightmare on CVE Street]() Original publisher: [Read original article]() Published: 2025-04-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [nginx](), [Vulnerabilities](), [Security](), [Kubernetes](), [chainguard containers](), [chainguard os](), [chainguard]() Tags: [availability](), [chainguard](), [chainguard-containers](), [chainguard-os](), [container-images](), [containers](), [cve](), [cves](), [ingress](), [ingress-nginx](), [kubernetes](), [nginx](), [remote-code-execution](), [security](), [vulnerabilities](), [wiz]() ### AI overview The article describes several critical remote code execution vulnerabilities affecting the Ingress-nginx-controller, including risks to Kubernetes cluster secrets, service availability, privileges, and security controls. It also explains how Chainguard reviewed its infrastructure, identified affected Chainguard Containers, and prepared patches using Chainguard OS's continuous update model. ### Source excerpt Chainguard was able to quickly respond to and handle the recent ingress-nginx-controller CVEs that were discovered by Wiz. See the actions we have taken. ## Configuring Azure Kubernetes Service Control Planes and Node Pools DevFeed: [Configuring Azure Kubernetes Service Control Planes and Node Pools]() Original publisher: [Read original article]() Author: Sumit Prasad Published: 2024-12-12T12:53:34Z Content type: tutorial Language: en Sources: [Myntra]() Topics: [Azure Kubernetes Service](), [Kubernetes](), [Azure](), [Containers](), [Orchestration](), [Scalability](), [Architecture & Design](), [DevOps]() Tags: [aks](), [aks-best-practices](), [aks-upgrade](), [architecture](), [azure](), [azure-kubernetes-service](), [best-practices](), [components](), [coredns-scaling](), [devops](), [getting-started](), [guide](), [ingress](), [kubernetes](), [performance-optimization](), [scalability]() ### AI overview This guide explains how to configure Azure Kubernetes Service (AKS) for performance and scalability. It describes the managed control plane, worker-node-based node pools, workload separation, and taints used to isolate system, ingress, platform, and application workloads. ### Source excerpt Introduction In this guide, we'll explore the intricacies of configuring Azure Kubernetes Service (AKS) for optimal performance and scalability. As a fully managed container orchestration service by Microsoft Azure, AKS simplifies deploying, managing, and scaling containerized applications using Kubernetes. Drawing from our extensive experience running AKS at scale, this blog aims to provide practical insights and solutions to common challenges faced by DevOps engineers, system administrators, and Kubernetes enthusiasts. We'll walk you through the AKS setup, offering step-by-step guidance, best practices, and tips from real-world scenarios. From fine-tuning the control plane to optimizing node pools, our goal is to equip you with the knowledge to leverage AKS in production environments fully. Join us as we delve into key considerations, navigate potential pitfalls, and share advanced configurations. Whether you're just getting started with AKS or looking to enhance your existing setup, this blog promises a comprehensive dive into Azure Kubernetes Service, informed by our hands-on experiences and lessons learned. AKS Architecture The AKS control plane, a managed service provided by Azure, oversees the management and orchestration of the Kubernetes cluster. It handles tasks such as scheduling, scaling, and monitoring the cluster. Node pools, or worker nodes, are the virtual machine scale sets that run the containers in the AKS cluster, executing workloads and running applications. Our AKS architecture, illustrated in the diagram below, includes multiple node pools, each dedicated to a specific purpose: System Node Pool: Hosts system-critical pods or add-on services managed by AKS. User Node Pools: Three user node pools are designated for: Platform components Ingress Application pods To ensure each node pool serves its intended purpose, we apply taints during their creation: The system node pool has a taint with the key-value pair CriticalAddonsOnly=true:NoSchedule. Th ## Remove Application Logic from Kubernetes Config DevFeed: [Remove Application Logic from Kubernetes Config]() Original publisher: [Read original article]() Author: Dylan Anthony Published: 2024-03-05T09:09:00Z Content type: article Language: en Sources: [Apollo Blog]() Topics: [Microservice](), [GraphQL](), [Kubernetes](), [YAML](), [API](), [Architecture & Design]() Tags: [apollo-federation](), [backend](), [bugs](), [fragmentation](), [gateway](), [graphql](), [ingress](), [kubernetes](), [yaml]() ### AI overview This article explains how duplicating microservice application logic in Kubernetes YAML can cause fragmented information, inconsistencies, and bugs. It presents GraphQL and Apollo Federation as a way to reduce configuration, prevent conflicting routes, keep routing aligned with application code, and make service dependencies declarative. ### Source excerpt The traditional approach to microservices in Kubernetes requires duplicating application logic into YAML config files. This leads to information fragmentation, inconsistencies, and ultimately bugs. With GraphQL and Apollo Federation, you can reduce the amount of required config, prevent duplication, and have a better experience maintaining your API. In particular, Apollo Federation can: - Prevent conflicting API routes, and give better visibility into the entire API. ## LoadBalancer Services using Kubernetes in Docker (kind) DevFeed: [LoadBalancer Services using Kubernetes in Docker (kind)]() Original publisher: [Read original article]() Author: Owain Williams Published: 2022-09-20T20:08:29Z Content type: tutorial Language: en Sources: [Groupon Engineering -- Medium]() Topics: [Kubernetes](), [Docker](), [Orchestration](), [container](), [Development]() Tags: [container](), [development](), [docker](), [ingress](), [kind](), [kubernetes](), [load-balancer](), [orchestration]() ### AI overview This tutorial introduces Kubernetes and compares local options for experimenting with it, including Docker's single-node cluster, minikube, and kind. It explains that kind runs cluster nodes in containers and supports multi-node clusters, but the supplied text ends during cluster creation. ### Source excerpt Kubernetes is a very popular open-source container orchestration system for deploying, scaling, and updating your software, as well as automatically recovering from failures. If your code can be packaged into a container, e.g. via Docker, then it can run on Kubernetes, or k8s for short (which is sometimes pronounced 'kates' and refers to the 8 letters between the first and last letter). You can read more about it on the Kubernetes Documentation page. You can run a Kubernetes cluster in your own data centre as well as on many of the popular cloud providers, for example there's the Amazon Elastic Kubernetes Service (EKS), the Azure Kubernetes Service (AKS), and the Google Kubernetes Engine (GKE) to name a few. You can also create clusters that span your data centre and a cloud provider or even span multiple cloud providers. Here at Groupon, we have several Kubernetes clusters around the world hosted on both EKS and GKE. This is great for production, or even as a staging cluster, or shared development environment. But what if you just want to try it out and see what all the hype is about before you spend money on a new cluster? The good news is there are several options, if you've installed Docker you can enable a single-node Kubernetes cluster simply by ticking the option in the Docker settings. However, you will be tied to the version of Kubernetes that ships with your version of Docker. Another option is minikube which allows you to run specific versions of Kubernetes, or even multiple clusters with different versions. However, you'll still only be able to run single-node clusters. A single-node cluster is probably fine, and could well be all you ever need. But you won't be able to experiment with pods running on different nodes, and the various like-live scenarios that enable, for example using hostPath volumes with different files on each node. Before you fire up a load of VMs and try installing Kubernetes The Hard Way there is one more option, kind, which stands ## Wildcard Certificates with Traefik + cert-manager + Let's Encrypt in Kubernetes Tutorial DevFeed: [Wildcard Certificates with Traefik + cert-manager + Let's Encrypt in Kubernetes Tutorial]() Original publisher: [Read original article]() Author: Techno Tim Published: 2022-08-06T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Kubernetes](), [traefik](), [Tutorial](), [TLS (Transport Layer Security)](), [Cloudflare](), [Cloud]() Tags: [cloudflare](), [helm](), [ingress](), [kubernetes](), [load-balancer](), [tls](), [traefik](), [tutorial]() ### AI overview A step-by-step tutorial for configuring Traefik as a Kubernetes Ingress Controller, installing cert-manager, and using Cloudflare DNS challenges with Let's Encrypt to automatically provision TLS and wildcard certificates. ### Source excerpt Traefik, cert-manager, Cloudflare, and Let's Encrypt are a winning combination when it comes to securing your services with certificates in Kubernetes.Today, we'll install and configure Traefik, the cloud native proxy and load balancer, as our Kubernetes Ingress Controller.We'll then install and configure cert-manager to manage certificates for our cluster.We'll set up Let's Encrypt as our Clu... ## New Pluralsight Course - Deploying and Managing Azure Kubernetes Service (AKS) Networking DevFeed: [New Pluralsight Course - Deploying and Managing Azure Kubernetes Service (AKS) Networking]() Original publisher: [Read original article]() Author: Anthony Nocentino Published: 2022-05-31T00:00:00Z Content type: release Language: en Sources: [Kubernetes on Anthony Nocentino's Blog]() Topics: [Kubernetes](), [Azure](), [networking](), [Disaster Recovery](), [Cloud]() Tags: [aks](), [availability](), [azure](), [azure-kubernetes-service](), [cni](), [containers](), [disaster-recovery](), [failover](), [ingress](), [kubernetes](), [kubernetes-clusters](), [networking](), [pluralsight]() ### AI overview The article announces a new Pluralsight course on deploying and managing Azure Kubernetes Service (AKS) networking. The course covers AKS networking models, kubenet, Azure CNI, services, ingress controllers, application access, and disaster recovery design patterns. ### Source excerpt My new course "Deploying and Managing Azure Kubernetes Service (AKS) Networking" is now available on Pluralsight here! If you want to learn about the course, check out the trailer here, or if you're going to dive right in, check it out here! Azure Kubernetes Service is a platform-as-a-service that provides Kubernetes Services in the Azure Cloud. This course will teach you to design, configure, and manage networking, services, and disaster recovery in Azure Kubernetes Service. ## Updated Pluralsight Course - Configuring and Managing Kubernetes Networking, Services, and Ingress DevFeed: [Updated Pluralsight Course - Configuring and Managing Kubernetes Networking, Services, and Ingress]() Original publisher: [Read original article]() Author: Anthony Nocentino Published: 2021-10-20T00:00:00Z Content type: release Language: en Sources: [Kubernetes on Anthony Nocentino's Blog]() Topics: [Kubernetes](), [configuration](), [networking](), [Routing (disambiguation)](), [TLS (Transport Layer Security)](), [Azure Kubernetes Service]() Tags: [azure-kubernetes-service](), [containers](), [course](), [ingress](), [kubernetes](), [kubernetes-networking](), [networking](), [pluralsight](), [services](), [ssh](), [tls](), [training]() ### AI overview An updated Pluralsight course teaches Kubernetes cluster networking fundamentals and how to configure and access applications using Services and Ingress. Updates include SSH techniques for Azure Kubernetes Service nodes, revised Ingress examples, IngressClass, and the networking.k8s.io/v1 API version. ### Source excerpt My updated course "Configuring and Managing Kubernetes Networking, Services, and Ingress" is now available on Pluralsight here! If you want to learn about the course, check out the trailer here, or if you're going to dive right in, check it out here! It's time to dig deeper into Kubernetes networking! You will learn Kubernetes cluster networking fundamentals and configuring and accessing applications in a Kubernetes Cluster with Services and Ingress. ## Configuring Traefik 2 Ingress for Kubernetes DevFeed: [Configuring Traefik 2 Ingress for Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-04-08T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Kubernetes](), [k3s](), [rancher](), [Cloudflare]() Tags: [certificates](), [cloudflare](), [helm](), [high-availability](), [homelab](), [ingress](), [k3s](), [kubernetes](), [rancher](), [self-hosting](), [ssl](), [traefik](), [tutorial]() ### AI overview A tutorial for configuring Traefik 2 as the ingress controller on a highly available k3s Kubernetes cluster, including Rancher compatibility, external load balancing, and wildcard certificates stored on persistent storage. ### Source excerpt This guide is for installing traefik 2 on k3s.If you're not using rancher, that's fine, just skip to Reconfiguring k3s Note: There is an updated tutorial on installing traefik + cert-manager on Kubernetes here. However, if you want to store your certificates on disk, this tutorial here is perfectly fine. It assumes you have followed: Fully Automated K3S etcd High Availability Install ... ## Self-Hosting Your Homelab Services with SSL -- Let's Encrypt, MetalLB, Traefik, Rancher, Kubernetes DevFeed: [Self-Hosting Your Homelab Services with SSL -- Let's Encrypt, MetalLB, Traefik, Rancher, Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2020-08-15T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Homelab](), [Self-hosted](), [Tutorial](), [Kubernetes](), [rancher](), [traefik](), [SSL]() Tags: [certificates](), [homelab](), [ingress](), [kubernetes](), [proxy](), [rancher](), [self-hosting](), [ssl](), [traefik](), [tutorial](), [video](), [vpn]() ### AI overview A step-by-step video tutorial for securing self-hosted homelab services with SSL certificates. It covers Rancher, Kubernetes, Kubernetes Ingress, MetalLB, Traefik, Let's Encrypt, and DNS, including a staging-to-production certificate configuration change. ### Source excerpt Are you self-hosting lots of services at home in your homelab? Have you been port forwarding or using VPN to access your self-hosted services wishing you had certificates so that you can access them securely over SSL? Well after this video, you can! In this step by step tutorial we'll walk through setting up Rancher and Kubernetes with a reverse proxy, Kubernetes Ingress, MetalLB, Traefik, L... ## Using Google-Managed Certificates and Identity-Aware Proxy With GKE DevFeed: [Using Google-Managed Certificates and Identity-Aware Proxy With GKE]() Original publisher: [Read original article]() Published: 2020-06-24T16:31:44Z Content type: tutorial Language: en Sources: [Brave New Geek]() Topics: [Google Cloud Platform (GCP)](), [Kubernetes](), [certificates](), [SSL](), [Authentication](), [Authorization](), [Deployment](), [Cloud]() Tags: [authentication](), [authorization](), [cloud](), [cloud-native](), [deployment](), [gclb](), [gcp](), [gke](), [google](), [google-cloud](), [identity-aware-proxy](), [ingress](), [kubernetes](), [load-balancer](), [proxy](), [security](), [ssl](), [tutorial](), [zero-trust]() ### AI overview A tutorial on deploying an application to Google Kubernetes Engine, configuring Google Cloud Load Balancer ingress with a global static IP and Google-managed SSL certificate, and enabling Identity-Aware Proxy for authenticated access. ### Source excerpt Ingress on Google Kubernetes Engine (GKE) uses a Google Cloud Load Balancer (GCLB). GCLB provides a single anycast IP that fronts all of your backend compute instances along with a lot of other rich features. In order to create a GCLB that uses HTTPS, an SSL certificate needs to be associated with the ingress resource. This certificate can either be self-managed or Google-managed. The benefit of using a Google-managed certificate is that they are provisioned, renewed, and managed for your domain names by Google. These managed certificates can also be configured directly with GKE, meaning we can configure our certificates the same way we declaratively configure our other Kubernetes resources such as deployments, services, and ingresses. ## New Pluralsight Course - Configuring and Managing Kubernetes Networking, Services, and Ingress DevFeed: [New Pluralsight Course - Configuring and Managing Kubernetes Networking, Services, and Ingress]() Original publisher: [Read original article]() Author: Anthony Nocentino Published: 2020-05-27T11:54:50Z Content type: release Language: en Sources: [Kubernetes on Anthony Nocentino's Blog]() Topics: [Kubernetes](), [networking](), [Pluralsight](), [Learning](), [Cloud]() Tags: [cloud](), [container](), [containers](), [course](), [ingress](), [kubernetes](), [kubernetes-networking](), [linux](), [networking](), [pluralsight](), [services]() ### AI overview The article announces a Pluralsight course on Kubernetes networking, Services, and Ingress. It covers networking fundamentals, cluster topology, Pod networking, CNI and DNS, application access through Services, and exposing applications with Ingress, including TLS-secured access. ### Source excerpt My new course "Configuring and Managing Kubernetes Networking, Services, and Ingress" is now available on Pluralsight here! Check out the trailer here or if you want to dive right in go here! In this course you will learn Kubernetes cluster networking fundamentals and configuring and accessing applications in a Kubernetes Cluster with Services and Ingress. This course targets IT professionals that design and maintain Kubernetes and container-based solutions. The course can be used by both the IT pro learning new skills and the system administrator or developer preparing for using Kubernetes both on-premises and in the Cloud. ## GKE using Traefik as the ingress controller DevFeed: [GKE using Traefik as the ingress controller]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2020-02-02T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [Gke](), [traefik](), [Kubernetes](), [Cloudflare]() Tags: [cloudflare](), [gke](), [ingress](), [kubernetes](), [load-balancer](), [traefik]() ### AI overview The article explains how using Traefik as the ingress controller in a GKE Kubernetes cluster caused intermittent Cloudflare HTTP 520 errors. A load balancer sent traffic to preemptible nodes that did not run Traefik; if a node was preempted during a slow request, the request ended prematurely. The proposed fix is to configure load-balancer health checks so only nodes running Traefik receive traffic. ### Source excerpt I recently fell into a trap using Traefik as the ingress controller in one cluster. I decided to write about it with hopes it maybe help someone else. ## A visual guide on troubleshooting Kubernetes deployments DevFeed: [A visual guide on troubleshooting Kubernetes deployments]() Original publisher: [Read original article]() Author: Daniele Polencic Published: 2019-12-05T00:00:00Z Content type: tutorial Language: en Sources: [Learnk8s]() Topics: [Kubernetes](), [Deployment](), [debugging]() Tags: [applications](), [components](), [debug](), [deployment](), [guide](), [ingress](), [kubernetes](), [load-balancer](), [troubleshooting](), [yaml]() ### AI overview A visual guide to troubleshooting Kubernetes deployments. It explains how Deployments, Services, Ingresses, and Pods relate, and highlights key relationships to check when diagnosing deployment issues. ### Source excerpt Master Kubernetes troubleshooting. Debug pod failures, resolve common errors, and diagnose deployment issues with proven strategies. ## Caddy Partnership With Light Code Labs DevFeed: [Caddy Partnership With Light Code Labs]() Original publisher: [Read original article]() Published: 2019-07-22T00:00:00Z Content type: release Language: en Sources: [William Kennedy]() Topics: [Load Balancing](), [Go Language](), [Open Source](), [Security](), [Software]() Tags: [announce](), [ardan-labs](), [blog](), [go](), [go-programming](), [golang](), [ingress](), [load-balancing](), [open-source](), [partnership](), [programming](), [security]() ### AI overview Ardan Labs announces a partnership with Light Code Labs and Caddy author Matt Holt to bring Caddy into Ardan Labs' products and services. Caddy is a Go-based, open-source ingress and load-balancing service with automated security features and plugin support. ### Source excerpt Ardan Labs (a leader in building Go enterprise software) is excited to announce that we have partnered with Light Code Labs and Matt Holt to bring Caddy into the Ardan Labs family of products and services. Caddy is a lightweight ingress service written in Go that provides automated security features and a plugin environment for extensibility. With the service being free open source (FOSS), small and large Go engineering teams finally have the ability to own and maintain their ingress and load balancing software with ease. We believe the Caddy project is as important as Docker and Kubernetes in maintaining a solid and scalable production environment. ## How SoundCloud Uses HAProxy with Kubernetes for User-Facing Traffic DevFeed: [How SoundCloud Uses HAProxy with Kubernetes for User-Facing Traffic]() Original publisher: [Read original article]() Published: 2017-12-07T00:00:00Z Content type: article Language: en Sources: [SoundCloud Backstage Blog]() Topics: [Kubernetes](), [Deployment](), [Routing (disambiguation)](), [HTTP]() Tags: [architecture](), [command-line](), [haproxy](), [ingress](), [kubernetes](), [microservices](), [port](), [routing](), [ssl]() ### AI overview SoundCloud describes replacing its homegrown deployment platform with Kubernetes and addressing the challenge of routing user traffic to dynamically moving pods. Because much of its infrastructure is physical, SoundCloud uses HAProxy servers to terminate SSL and forward requests to internal services. The article explains an approach that uses Kubernetes Services of type NodePort to expose applications to the HAProxy layer. ### Source excerpt A little less than two years ago, SoundCloud began the journey of replacing our homegrown deployment platform, Bazooka, with Kubernetes. Kubernetes automates deployment, scaling, and management of containerized applications. ## Kubernetes 中使用 API Gateway 替代 Ingress DevFeed: [Kubernetes 中使用 API Gateway 替代 Ingress]() Original publisher: [Read original article]() Author: Joway Published: 2017-09-12T00:00:00Z Content type: opinion Language: zh Sources: [Random Thoughts]() Topics: [Kubernetes](), [API](), [gateway](), [nginx](), [Cloud]() Tags: [api](), [ddos](), [gateway](), [ingress](), [kubernetes](), [mysql](), [nginx](), [tech](), [ui]() ### AI overview This Chinese technical article discusses using an API Gateway with Kubernetes instead of relying solely on Ingress. It explains Layer 4 and Layer 7 load balancing, describes Kubernetes Service and Ingress architecture, examines limitations in extending Ingress rules, and begins evaluating Kong and Orange against requirements for API management, authentication, UI, community support, and simple operation. ### Source excerpt 背景 最近在构思基于 Kubernetes 建立一个个人的开放云平台 , 听起来有点不自量力 , 不过作为个人业余小玩意还是蛮好玩的。最终的成品希望是用户能够轻松地在平台上跑一些简单的无状态服务 和 cronjob 。 在搭建平台的时候遇到的第一个困难是需要有一个好用且功能全面的 API Gateway , 主流的网关服务大多是基于 OpenResty 基础上进行二次开发 , 所需要完成的工作无非是负载均衡，和 API 管理, 加上一些零零碎碎的小功能。 ## GKE in production DevFeed: [GKE in production]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2017-07-02T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [Gke](), [Google Cloud Platform (GCP)](), [Kubernetes](), [Amazon Web Services](), [Digital Ocean]() Tags: [aws](), [cloud-sql](), [digitalocean](), [gke](), [google-cloud](), [health-checks](), [heroku](), [ingress](), [kubernetes](), [postfix](), [sendgrid](), [spinnaker]() ### AI overview A developer describes deploying small applications on GKE and lessons learned from moving between AWS and Google Cloud. The article covers SSL with Kubernetes Ingress, email delivery through SendGrid, Cloud SQL access through a sidecar container, and deployment with a shell script or Spinnaker. ### Source excerpt I've been working with DigitalOcean, Heroku and AWS for some years now. ## 70% cheaper Kubernetes cluster on AWS DevFeed: [70% cheaper Kubernetes cluster on AWS]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2017-04-28T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [Kubernetes](), [Amazon Web Services](), [nginx](), [Bash]() Tags: [aws](), [bash](), [clusters](), [deployments](), [ingress](), [kubernetes](), [limits](), [nginx](), [production](), [sandbox]() ### AI overview This tutorial describes strategies for reducing the cost of a sandbox Kubernetes cluster on AWS by about 70%. It covers tuning pod resource requests and limits, routing services through one nginx Ingress load balancer, and scaling down idle deployments with a Bash script. ### Source excerpt We are running Kubernetes on both sandbox and production for some months now. Our production cluster is still small, with few services running on it, but, most of our sandbox environment is running on a Kubernetes cluster on AWS.