NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A...

17
NGINX controller 3.x for automation Antoon Huiskens NGINX Solutions Engineer June 18, 2020

Transcript of NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A...

Page 1: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

NGINX controller 3.x for automation

Antoon Huiskens

NGINX Solutions Engineer

June 18, 2020

Page 2: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

2004: NGINX Open-Source released (C10K)

2011: NGINX Inc founded

2013: NGINX Plus released

2017: NGINX Controller released

2019: F5 acquires NGINX

2020: NGINX Plus R22 (June)

2020: NGINX Controller 3.5 (June)

Page 3: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

450 million+Total sites running on NGINX

Source: Netcraft October 2020 Web Server Survey

https://news.netcraft.com/archives/2018/10/29/october-2018-web-server-survey.html
Page 4: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

MORE INFORMATION AT NGINX.COM

High Performance Webserver

and Reverse Proxy

Web Server

Page 5: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

MORE INFORMATION AT NGINX.COM

Flawless Application Delivery

for the Modern Web

Load Balancer Monitoring &

ManagementWeb ServerContent Cache Security Controls

Page 6: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

A few notes on how to automate NGINX plus

Page 7: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

MANAGING CONFIGURATION

Automating NGINX plus

For upstreams:• Service Discovery• Add/remove servers via API

In general:• Push config and reload (seamless)• Single owner of configuration• No end-to-nd validation

• NGINX will reject bad configuration

Page 8: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

Organisations automating at scale

require more

Page 9: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

Application delivery has different needsACCORDING TO WHOM YOU ASK…

Deliver existing apps faster with lightweight load balancing

Provision app services quickly

Align to dev cycles and CI/CD methodologies

Speed

Gain per-app and multi-app control

Ensure apps are protected from threats

See every app and service that’s deployed

Control

Page 10: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

DELIVER APPLICATIONS CONSISTENTLY AND RELIABLY ACROSS CLOUDS

Multiple clouds make life interesting

Consistency across clouds:• Security and performance addressed consitently

• Portability and centralized control

• Decreased complexity: no manual processes

• No reliance on cloud-native services

Hybrid Cloud

Page 11: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

From code to customer…

Code Load

balancer

DNSAPI

gateway

App

security

DDoS CDNIngress

controller

App / web

server

Customer

Page 12: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

Code Load

balancer

DNSAPI

gateway

App

security

DDoS CDNIngress

controller

App / web

server

Customer

Management Automation

Management Automation

Management Automation

Management Automation

Management Automation

App Developers App Architects DevOps Cloud Architects NetOps SecOps IT Leadership Support Customer Experience

Visibility and Analytics

NGINX controller – App centric approach

Page 13: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

SOFTWARE ADC SERVICES FOR ANY ENVIRONMENT

COMBINE CENTRALIZED CONTROL WITH DEVOPS AGILITY

F5

BIG-IP and BIG-IQ

Customer

App App App

NGINX PlusREST API

NGINX Controller

CONFIGURE

MONITOR

TUNE

ON PREM

MULTI-CLOUD

Adressing Multi-Cloud consistently

Page 14: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

HIGH LEVEL

CONFIDENTIAL

Controller 3.x Information Architecture

Platform Infrastructure Services Security Analytics

api-definitionsenvironments

apps

components

certs

published-apis

oas-config

locations

instances

identity-providers

clients

metrics

events

global

license

users

roles

gatewaysm

mm

m

m m

m

m

m

m

m

m

m

m m

m

mm1:11

1 1 m

1

m

m

1 1

IA Relationship

Reference Relationship

Placement

Page 15: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

A quick tour of NGINX controller

Page 16: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

Some terminology basics

Instance

Component

Workload

Location

Gateway

Make life easier with:

Environments:• gateways• certificates• Applications

Applications:• components• workloadgroups

Agent

Page 17: NGINX controller 3.x for automation · 2020-06-22 · Content Cache Web Server Security Controls. A few notes on how to automate NGINX plus. MANAGING CONFIGURATION ... at scale require

Thank You


NGINX modules reference...Nginx, Inc. develops and maintains NGINX open source distribution, and o ers commercial support and professional services for NGINX. About NGINX Plus •

NGINX modules reference...Nginx, Inc. develops and maintains NGINX open source distribution, and o ers commercial support and professional services for NGINX. About NGINX Plus •

Perl + nginx = ♥

Perl + nginx = ♥

Nginx Joomla

Nginx Joomla

Section: Architecture - HighLoad++ · 2013-10-27 · Monitoring: Zabbix API, Pinba + API, Graylog methods profiling utility. Caching: Nginx + Lua, Redis, APC, cache sharding and invalidation.

Section: Architecture - HighLoad++ · 2013-10-27 · Monitoring: Zabbix API, Pinba + API, Graylog methods profiling utility. Caching: Nginx + Lua, Redis, APC, cache sharding and invalidation.

Nginx Secure

Nginx Secure

ngx openresty: an Nginx ecosystem glued by Lua - agentzhagentzh.org/misc/slides/ngx-openresty-ecosystem.pdf · # a connection pool that can cache up to ... an Nginx upstream module

ngx openresty: an Nginx ecosystem glued by Lua - agentzhagentzh.org/misc/slides/ngx-openresty-ecosystem.pdf · # a connection pool that can cache up to ... an Nginx upstream module

Resin Outperforms NginX

Resin Outperforms NginX

ADVANCED DOCKER - LinuxDays · docker run -it --rm fedora bash docker run -d --name my-nginx nginx docker logs my-nginx docker exec -it my-nginx sh docker rm -fv my-nginx

ADVANCED DOCKER - LinuxDays · docker run -it --rm fedora bash docker run -d --name my-nginx nginx docker logs my-nginx docker exec -it my-nginx sh docker rm -fv my-nginx

NGINX modules reference...Nginx, Inc. p.4 of 351 CONTENTS CONTENTS A Changelog for NGINX Plus334 B Legal Notices338 Index345 Nginx, Inc. p.5 of 351 Chapter 1 Core modules 1.1 …

NGINX modules reference...Nginx, Inc. p.4 of 351 CONTENTS CONTENTS A Changelog for NGINX Plus334 B Legal Notices338 Index345 Nginx, Inc. p.5 of 351 Chapter 1 Core modules 1.1 …

Ant-loiter · worker nginx Ngx_http_lua_api rbtree Ngx_stream_limit_conn_module Ngx_http_limit_conn_module Ngx_stream_limit_req_module http cache ssl Ngx_http_upstream_zone_module

Ant-loiter · worker nginx Ngx_http_lua_api rbtree Ngx_stream_limit_conn_module Ngx_http_limit_conn_module Ngx_stream_limit_req_module http cache ssl Ngx_http_upstream_zone_module

Introduction to Nginx

Introduction to Nginx

Tuning NGINX for high performance - SCALE · Tuning NGINX for high performance Nick Shadrin nick@nginx.com. #nginx #nginxconf ... • NGINX Amplify is a free monitoring SaaS solution.

Tuning NGINX for high performance - SCALE · Tuning NGINX for high performance Nick Shadrin [email protected]. #nginx #nginxconf ... • NGINX Amplify is a free monitoring SaaS solution.

Serving Media with NGINX Plus - NGINX | High … STREAMING MEDIA WITH NGINX PLUS Table of Contents 3 About NGINX Plus 3 Using this Guide 4 Prerequisites and System Requirements 5 Serving

Serving Media with NGINX Plus - NGINX | High … STREAMING MEDIA WITH NGINX PLUS Table of Contents 3 About NGINX Plus 3 Using this Guide 4 Prerequisites and System Requirements 5 Serving

Nginx Servats Module Documentation - media.readthedocs.org · CHAPTER 1 Overview Scribe / Nginx Servats Module an Nginx module that provides server status information. 1.1Source Information

Nginx Servats Module Documentation - media.readthedocs.org · CHAPTER 1 Overview Scribe / Nginx Servats Module an Nginx module that provides server status information. 1.1Source Information

Serving Media with NGINX Plus...3 STREAMING MEDIA WITH NGINX PLUS This guide explains how to use NGINX Plus as a streaming media server. It provides instructions for configuring NGINX

Serving Media with NGINX Plus...3 STREAMING MEDIA WITH NGINX PLUS This guide explains how to use NGINX Plus as a streaming media server. It provides instructions for configuring NGINX

Integrate NGINX - eventtracker.com · 3 Integrate NGINX Overview NGINX is a web server which can also be used as a reverse proxy, load balancer and HTTP cache. EventTracker integrates

Integrate NGINX - eventtracker.com · 3 Integrate NGINX Overview NGINX is a web server which can also be used as a reverse proxy, load balancer and HTTP cache. EventTracker integrates

Caching Strategies - Confoo 2015 PROXY CACHE % The Internet Proxy Web Server There are many tools to help set up or use reverse proxy caches. EXAMPLES % Varnish Cache NGINX Content

Caching Strategies - Confoo 2015 PROXY CACHE % The Internet Proxy Web Server There are many tools to help set up or use reverse proxy caches. EXAMPLES % Varnish Cache NGINX Content

3 Ways to Automate App Deployments with NGINX

3 Ways to Automate App Deployments with NGINX

LECTURE 15 - Florida State Universitycarnahan/cis4930sp17/Lecture15_cis4930.pdf · CONFIGURING NGINX This is the easy part. Start up nginx. $ sudo /etc/init.d/nginx start Now, /etc/nginx/sites-enabled

LECTURE 15 - Florida State Universitycarnahan/cis4930sp17/Lecture15_cis4930.pdf · CONFIGURING NGINX This is the easy part. Start up nginx. $ sudo /etc/init.d/nginx start Now, /etc/nginx/sites-enabled

NSX-T Deep Dive: Kubernetes Networkingadmin@k8s -master:~$ kubectl run nginx foo --image=nginx n foo deployment "nginx-foo"created admin@k8s-master:~$ kubectl run nginx-bar --image=nginx

NSX-T Deep Dive: Kubernetes Networkingadmin@k8s -master:~$ kubectl run nginx foo --image=nginx n foo deployment "nginx-foo"created admin@k8s-master:~$ kubectl run nginx-bar --image=nginx