emissary-ingress/emissary

Features

• Kubernetes API Gateways - Manages incoming external traffic and routes it to internal microservices within Kubernetes using Envoy Proxy.
• Microservice Traffic Management - Manages and routes traffic between distributed microservices using a Kubernetes-native API gateway.
• Service Mesh - Integrates with service mesh architectures to manage communication, security, and automated traffic routing between microservices.
• Progressive Delivery Strategies - Supports advanced deployment methodologies including canary and blue-green updates to incrementally shift traffic.
• High Availability Traffic Distribution - Distributes network traffic across multiple backend instances to ensure high availability and redundancy.
• Kubernetes Configurations - Translates Kubernetes custom resources and annotations into proxy configurations via a control plane.
• Microservices Traffic Management - Implements advanced routing and load balancing for distributed microservice architectures.
• Application Layer Load Balancing - Routes Layer 7 requests to healthy endpoints using content-aware load balancing policies.
• Declarative Traffic Rules - Uses a declarative engine to match request attributes against rules for routing and security.
• Envoy Data Planes - Utilizes an Envoy proxy as the underlying data plane for high-performance traffic routing.
• gRPC-Web Bridging - Implements a translation layer that converts gRPC-Web requests from browsers into standard gRPC server requests.
• gRPC Traffic Routing - Routes high-performance gRPC and gRPC-Web traffic while managing HTTP/2 and TLS.
• HTTP/2 Support - Provides high-performance routing for microservices using the HTTP/2 protocol.
• Ingress-Based Routing - Maps external HTTP/HTTPS requests to internal microservices using host and path matching rules.
• TLS Termination - Decrypts incoming HTTPS requests at the ingress layer to centralize certificate management.
• Traffic Routing Policies - Defines traffic rules using a declarative policy engine and custom resource labels.
• Canary - Routes a small percentage of traffic to new service versions to test stability during releases.
• API Security Policy Enforcement - Applies security policies to incoming requests to protect microservices from unauthorized access.
• External Authentication - Delegates identity verification and authorization checks to external services via gRPC.
• gRPC and HTTP TLS Securings - Encrypts gRPC communication by terminating or originating TLS using ALPN protocols.
• External Service Authorizers - Delegates authentication and authorization checks to external gRPC or HTTP services before routing traffic.
• Mutual TLS Authentication - Implements mutual TLS authentication to establish trusted, encrypted peer connections between the gateway and backend microservices.
• Gateway-to-Backend Encryption - Encrypts data in transit between the gateway and backends using end-to-end TLS.
• Mutual TLS Transport Encryption - Ensures encrypted communication between the gateway and upstream services using mutual TLS.
• Transport Layer Encryption - Secures communication between the gateway and upstream microservices using mutual TLS.
• Zero Trust Networking - Enforces a zero-trust security model using mutual TLS and external identity verification for all traffic.
• Canary Deployment Controllers - Shifts network traffic incrementally between different service versions to test new releases.
• Stability Patterns - Maintains system stability using circuit breaking and sticky sessions to prevent total failure.
• Annotation-Driven Configurations - Uses resource annotations to configure routing and membership for self-service management.
• Request Rate Limiting - Implements mechanisms to cap the number of incoming requests using external rate limiting services.
• Gateway Rate Limiters - Provides rate limiting at the API gateway level to control traffic flow to downstream microservices.
• Upstream Connection Throttling - Prevents backend service overload by capping maximum connections and pending requests.
• Weighted Round-Robin Strategies - Distributes requests across multiple service versions using weighted round-robin algorithms for canary testing.
• Cross-Namespace Routing - Targets services in different namespaces by utilizing fully qualified DNS names for cross-namespace communication.
• Dynamic Service Discovery - Resolves backend service locations by integrating with Kubernetes DNS or external registries.
• Weighted Load Balancing - Distributes traffic across multiple service versions using weights to enable canary releases.
• Multi-Cluster Service Connectivity - Enables linking and proxying requests across multiple Kubernetes clusters into a unified network.
• Edge Routing - Directs external incoming traffic into internal services via an edge proxy.
• Session Persistence - Maintains user session consistency by routing requests from a specific session to a consistent backend via cookies.
• Service Meshes - Integrates with external mesh architectures to synchronize networking and traffic policies.
• TLS Origination - Provides the ability to encrypt outgoing traffic to backend services using defined security certificates.
• Upstream TLS Origination - Originate TLS connections to backend services using authenticated client certificates for secure internal communication.
• Cross-Cluster Traffic Steering - Enables traffic forwarding and service mirroring across multiple Kubernetes clusters through gateway engines.
• Layer 4 TCP Routing - Maps raw Layer 4 TCP connections to upstream services based on IP addresses or hostnames.
• Endpoint Protection Measures - Protects service endpoints by implementing centralized authentication, encryption, and rate limiting.
• Gateway Performance Monitoring - Exports performance metrics to observability tools for real-time system monitoring.
• Distributed Tracing - Integrates with external providers to record execution spans and traces for observing distributed traffic flow.
• Multi-Protocol Metrics Exporters - Exports aggregated statistics to external tools using Prometheus, StatsD, and DogStatsD protocols.
• System Statistics Collection - Collects request counts, response codes, and latency metrics to track service utilization.
• External Registry Resolvers - Dynamically locates and routes requests to application endpoints using external service registries.
• API Gateways and Proxies - Kubernetes-native API gateway built on Envoy Proxy.

स्टार हिस्ट्री