Контроллеры Kubernetes Ingress: Сравнительный анализ

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: minimal-ingress
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
spec:
  rules:
  - http:
      paths:
      - path: /testpath
        pathType: Prefix
        backend:
          service:
            name: test
            port:
              number: 80

apiVersion: v1
kind: Service
metadata:
  name: my-service
  annotations:
    getambassador.io/config: |
      ---
      apiVersion: ambassador/v1
      kind: Mapping
      name: my-service_mapping
      prefix: /my-service/
      service: my-service
spec:
  ports:
  - port: 80
    targetPort: 8080
  selector:
    app: my-service

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: my-gateway
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 80
      name: http
      protocol: HTTP
    hosts:
    - "*.example.com"
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: my-virtualservice
spec:
  hosts:
  - "service.example.com"
  gateways:
  - my-gateway
  http:
  - route:
    - destination:
        host: my-service
        port:
          number: 8080

apiVersion: projectcontour.io/v1
kind: HTTPProxy
metadata:
  name: basic
spec:
  virtualhost:
    fqdn: example.com
  routes:
    - conditions:
      - prefix: /
      services:
        - name: app
          port: 80

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: secure-app
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`example.com`)
      kind: Rule
      services:
        - name: app
          port: 80
  tls:
    certResolver: le

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: ingress-controller-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: ingress-controller
  minReplicas: 2
  maxReplicas: 10
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 75

# Пример конфигурации канареечного деплоя с NGINX
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: canary-ingress
  annotations:
    nginx.ingress.kubernetes.io/canary: "true"
    nginx.ingress.kubernetes.io/canary-weight: "30"
spec:
  rules:
  - host: app.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: app-canary
            port:
              number: 80

kind: ConfigMap
apiVersion: v1
metadata:
  name: nginx-config
data:
  proxy-connect-timeout: "10"
  proxy-read-timeout: "120"
  client-max-body-size: "8m"
  proxy-body-size: "8m"
  server-tokens: "false"
  proxy-buffer-size: "128k"

# Пример конфигурации с цепочкой middleware
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: secured-app
spec:
  entryPoints:
    - web
  routes:
  - match: Host(`app.example.com`)
    kind: Rule
    middlewares:
    - name: rate-limit
    - name: basic-auth
    services:
    - name: app-service
      port: 80

# Пример middleware для ограничения скорости запросов
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: rate-limit
spec:
  rateLimit:
    average: 100
    burst: 50

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: haproxy-ingress
  annotations:
    haproxy.org/timeout-client: "30s"
    haproxy.org/balance-algorithm: "leastconn"
    haproxy.org/backend-check-interval: "2s"
    haproxy.org/ssl-redirect: "true"
spec:
  rules:
  - host: high-load.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: high-load-app
            port:
              number: 80

kind: ConfigMap
apiVersion: v1
metadata:
  name: haproxy-configmap
data:
  healthz-port: "10253"
  backend-server-slots-increment: "4"
  timeout-stop: "30s"
  dynamic-scaling: "true"

apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: rate-limiting
config:
  minute: 5
  policy: local
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: kong-demo
  annotations:
    konghq.com/plugins: rate-limiting
spec:
  rules:
  - host: api.example.com
    http:
      paths:
      - path: /users
        pathType: Prefix
        backend:
          service:
            name: user-service
            port:
              number: 80

apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: key-auth
plugin: key-auth

# Конфигурация Istio Gateway с множественными хостами
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: multi-host-gateway
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 443
      name: https-api
      protocol: HTTPS
    tls:
      mode: SIMPLE
      credentialName: api-cert
    hosts:
    - "api.example.com"
  - port:
      number: 443
      name: https-web
      protocol: HTTPS
    tls:
      mode: SIMPLE
      credentialName: web-cert
    hosts:
    - "www.example.com"

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: complex-routing
spec:
  hosts:
  - "api.example.com"
  gateways:
  - multi-host-gateway
  http:
  - match:
    - uri:
        prefix: /v2
      headers:
        end-user:
          exact: beta-tester
    route:
    - destination:
        host: api-v2-beta
        port:
          number: 80
  - match:
    - uri:
        prefix: /v2
    route:
    - destination:
        host: api-v2
        port:
          number: 80
  - route:
    - destination:
        host: api-v1
        port:
          number: 80

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: websocket-ingress
  annotations:
    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
    nginx.ingress.kubernetes.io/proxy-connect-timeout: "3600"
spec:
  rules:
  - host: ws.example.com
    http:
      paths:
      - path: /socket
        pathType: Prefix
        backend:
          service:
            name: websocket-service
            port:
              number: 80

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: grpc-ingress
  annotations:
    nginx.ingress.kubernetes.io/backend-protocol: "GRPC"
spec:
  rules:
  - host: grpc.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: grpc-service
            port:
              number: 50051

# Минималистичная конфигурация Traefik для небольшого проекта
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: simple-app
spec:
  entryPoints:
    - web
    - websecure
  routes:
  - match: Host(`app.startup.com`)
    kind: Rule
    services:
    - name: app-service
      port: 80
  tls:
    certResolver: le

nginx.ingress.kubernetes.io/configuration-snippet: |
  more_set_headers "X-Debug-Original-URI: $request_uri";

data:
  proxy-buffer-size: "128k"
  proxy-buffers: "4 256k"
  proxy-busy-buffers-size: "256k"

livenessProbe:
  httpGet:
    path: /healthz
    port: 10254
  initialDelaySeconds: 10
  periodSeconds: 10
readinessProbe:
  httpGet:
    path: /healthz
    port: 10254
  periodSeconds: 10

# Специальная DNS-запись для тестирования нового контроллера
apiVersion: v1
kind: Service
metadata:
  name: new-ingress-controller
  annotations:
    external-dns.alpha.kubernetes.io/hostname: test-api.example.com
spec:
  type: LoadBalancer
  selector:
    app: new-ingress-controller
  ports:
  - port: 80
    targetPort: 80

apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: nginx-ingress-monitor
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: ingress-nginx
  endpoints:
  - port: metrics
    interval: 15s

nginx.ingress.kubernetes.io/configuration-snippet: |
  log_format detailed '$remote_addr - $remote_user [$time_local] '
                     '"$request" $status $body_bytes_sent '
                     '"$http_referer" "$http_user_agent" $request_time';
  access_log /var/log/nginx/access.log detailed;

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: user-domain-ingress
  namespace: user-services
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /$2
spec:
  rules:
  - host: app.example.com
    http:
      paths:
      - path: /users(/|$)(.*)
        pathType: Prefix
        backend:
          service:
            name: user-service
            port:
              number: 80

data:
  keep-alive: "75"
  upstream-keepalive-connections: "64"
  upstream-keepalive-timeout: "300"
  upstream-keepalive-requests: "1000"