kubernetes/ingress-nginxArchived
Ingress Nginx
This project is a Kubernetes Ingress Controller that functions as a layer 7 traffic router and NGINX reverse proxy. It serves as a secure network gateway, directing external HTTP and HTTPS traffic to backend services within a cluster based on declarative routing rules.
The controller acts as a TLS termination gateway to secure traffic and integrates with Prometheus to expose request metrics and latency data for cluster monitoring. It supports canary deployment workflows by implementing weight-based traffic splitting between different versions of a service.
The system manages external access and multi-service routing through hostname and path-based rules. It utilizes a template-driven configuration process that synchronizes with cluster resources, employing leader election for high availability and hot-reloading to apply updates without disrupting active connections.
Features
- Ingress Controllers - Manages external access to Kubernetes services through load balancing and name-based virtual hosting.
- Ingress Gateways - Provides a single entry point and secure network gateway for all external traffic entering the Kubernetes cluster.
- Go Template Rendering - Uses Go's text/template engine to dynamically render Nginx routing configurations.
- Configuration-Driven Templating Engines - Generates Nginx configuration files by processing Go templates based on cluster resource data.
- Dynamic Resource Watching - Employs Kubernetes informers to watch for resource changes and trigger configuration updates.
- Reverse Proxy Configurations - Configures NGINX as a reverse proxy to handle load balancing and routing for Kubernetes services.
- Layer 4 and Layer 7 Proxies - Operates as an application-layer proxy to route requests based on hostnames and paths.
- Layer 7 Traffic Routers - Directs application-layer requests to backend services using hostname and path-based rules.
- Request Routing - Directs incoming web requests to internal services using predefined hostnames and path-based matching rules.
- Configuration Generators - Compiles Kubernetes resource data into unified Nginx configuration files.
- TLS Termination - Terminates TLS connections at the ingress layer to secure traffic before it enters the cluster.
- Proxy Traffic Management - Directs external network traffic to internal services using a high-performance reverse proxy and load balancer.
- Traffic Routing - Routes HTTP and HTTPS traffic to multiple backend services based on hostnames and custom rules.
- Reverse Proxies - Implements a high-performance reverse proxy using Nginx to handle load balancing and request routing.
- Hot Reloading - Provides the capability to apply configuration changes immediately without restarting the process.
- Signal-Based Reloading - Applies configuration changes by sending a reload signal to Nginx to avoid dropping connections.
- Canary Deployment Controllers - Manages incremental traffic shifts for API updates to safely perform canary deployments.
- Leader Election - Uses distributed locking to ensure only one controller instance manages the configuration state.
- Annotation-Driven Configurations - Parses Kubernetes Ingress annotations to inject specific Nginx directives for rate limiting and SSL.
- Weighted Traffic Splitting - Implements canary rollouts by distributing traffic between service versions using weighted load balancing.
- Ingress Annotation Injections - Implements custom Nginx configuration injection via Kubernetes Ingress resource annotations.
- Kubernetes Monitors - Exposes NGINX request counts and latency metrics for Kubernetes cluster performance monitoring via Prometheus.
- Lua Scripting Extensions - Utilizes embedded Lua scripts for dynamic L7 request processing and routing logic.
- Networking - Ingress controller using NGINX as a reverse proxy.
