kubernetes/ingress-nginxArchived
Ingress Nginx
This project is a Kubernetes Ingress Controller that functions as a layer 7 traffic router and NGINX reverse proxy. It serves as a secure network gateway, directing external HTTP and HTTPS traffic to backend services within a cluster based on declarative routing rules.
The controller acts as a TLS termination gateway to secure traffic and integrates with Prometheus to expose request metrics and latency data for cluster monitoring. It supports canary deployment workflows by implementing weight-based traffic splitting between different versions of a service.
The system manages external access and multi-service routing through hostname and path-based rules. It utilizes a template-driven configuration process that synchronizes with cluster resources, employing leader election for high availability and hot-reloading to apply updates without disrupting active connections.
Features
- Ingress Controllers - Manages external access to Kubernetes services through load balancing and name-based virtual hosting.
- Ingress Gateways - Provides a single entry point and secure network gateway for all external traffic entering the Kubernetes cluster.
- Go Template Rendering - Uses Go's text/template engine to dynamically render Nginx routing configurations.
- Configuration-Driven Templating Engines - Generates Nginx configuration files by processing Go templates based on cluster resource data.
- Dynamic Resource Watching - Employs Kubernetes informers to watch for resource changes and trigger configuration updates.
- Reverse Proxy Configurations - Configures NGINX as a reverse proxy to handle load balancing and routing for Kubernetes services.
- Layer 4 and Layer 7 Proxies - Operates as an application-layer proxy to route requests based on hostnames and paths.
- Layer 7 Traffic Routers - Directs application-layer requests to backend services using hostname and path-based rules.
- Request Routing - Directs incoming web requests to internal services using predefined hostnames and path-based matching rules.
- Configuration Generators - Compiles Kubernetes resource data into unified Nginx configuration files.
- TLS Termination - Terminates TLS connections at the ingress layer to secure traffic before it enters the cluster.
- Proxy Traffic Management - Directs external network traffic to internal services using a high-performance reverse proxy and load balancer.
- Traffic Routing - Routes HTTP and HTTPS traffic to multiple backend services based on hostnames and custom rules.
- Reverse Proxies - Implements a high-performance reverse proxy using Nginx to handle load balancing and request routing.
- Hot Reloading - Provides the capability to apply configuration changes immediately without restarting the process.
- Signal-Based Reloading - Applies configuration changes by sending a reload signal to Nginx to avoid dropping connections.
- Canary Deployment Controllers - Manages incremental traffic shifts for API updates to safely perform canary deployments.
- Leader Election - Uses distributed locking to ensure only one controller instance manages the configuration state.
- Annotation-Driven Configurations - Parses Kubernetes Ingress annotations to inject specific Nginx directives for rate limiting and SSL.
- Weighted Traffic Splitting - Implements canary rollouts by distributing traffic between service versions using weighted load balancing.
- Ingress Annotation Injections - Implements custom Nginx configuration injection via Kubernetes Ingress resource annotations.
- Kubernetes Monitors - Exposes NGINX request counts and latency metrics for Kubernetes cluster performance monitoring via Prometheus.
- Lua Scripting Extensions - Utilizes embedded Lua scripts for dynamic L7 request processing and routing logic.
- Networking - Ingress controller using NGINX as a reverse proxy.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
