Ingress Nginx

This project is a Kubernetes Ingress Controller that functions as a layer 7 traffic router and NGINX reverse proxy. It serves as a secure network gateway, directing external HTTP and HTTPS traffic to backend services within a cluster based on declarative routing rules.

The controller acts as a TLS termination gateway to secure traffic and integrates with Prometheus to expose request metrics and latency data for cluster monitoring. It supports canary deployment workflows by implementing weight-based traffic splitting between different versions of a service.

The system manages external access and multi-service routing through hostname and path-based rules. It utilizes a template-driven configuration process that synchronizes with cluster resources, employing leader election for high availability and hot-reloading to apply updates without disrupting active connections.

Features

Ingress Controllers - Manages external access to Kubernetes services through load balancing and name-based virtual hosting.

Ingress Gateways - Provides a single entry point and secure network gateway for all external traffic entering the Kubernetes cluster.

Go Template Rendering - Uses Go's text/template engine to dynamically render Nginx routing configurations.

Configuration-Driven Templating Engines - Generates Nginx configuration files by processing Go templates based on cluster resource data.

Dynamic Resource Watching - Employs Kubernetes informers to watch for resource changes and trigger configuration updates.

Reverse Proxy Configurations - Configures NGINX as a reverse proxy to handle load balancing and routing for Kubernetes services.

Layer 4 and Layer 7 Proxies - Operates as an application-layer proxy to route requests based on hostnames and paths.

Layer 7 Traffic Routers - Directs application-layer requests to backend services using hostname and path-based rules.

Request Routing - Directs incoming web requests to internal services using predefined hostnames and path-based matching rules.

Configuration Generators - Compiles Kubernetes resource data into unified Nginx configuration files.

TLS Termination - Terminates TLS connections at the ingress layer to secure traffic before it enters the cluster.

Proxy Traffic Management - Directs external network traffic to internal services using a high-performance reverse proxy and load balancer.

Traffic Routing - Routes HTTP and HTTPS traffic to multiple backend services based on hostnames and custom rules.

Reverse Proxies - Implements a high-performance reverse proxy using Nginx to handle load balancing and request routing.

Hot Reloading - Provides the capability to apply configuration changes immediately without restarting the process.

Signal-Based Reloading - Applies configuration changes by sending a reload signal to Nginx to avoid dropping connections.

Canary Deployment Controllers - Manages incremental traffic shifts for API updates to safely perform canary deployments.

Leader Election - Uses distributed locking to ensure only one controller instance manages the configuration state.

Annotation-Driven Configurations - Parses Kubernetes Ingress annotations to inject specific Nginx directives for rate limiting and SSL.

Weighted Traffic Splitting - Implements canary rollouts by distributing traffic between service versions using weighted load balancing.

Ingress Annotation Injections - Implements custom Nginx configuration injection via Kubernetes Ingress resource annotations.

Kubernetes Monitors - Exposes NGINX request counts and latency metrics for Kubernetes cluster performance monitoring via Prometheus.

Lua Scripting Extensions - Utilizes embedded Lua scripts for dynamic L7 request processing and routing logic.

kubernetesingress-nginxArchived

Features

Star history