{"id":31173,"date":"2019-10-31T21:39:53","date_gmt":"2019-10-31T18:39:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes\/"},"modified":"2019-10-31T21:39:53","modified_gmt":"2019-10-31T18:39:53","slug":"obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","title":{"rendered":"Kubernetes'e Ingress kontrollerite \u00fclevaade ja v\u00f5rdlus","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kubernetes&#039;e Ingress kontrollerite \u00fclevaade ja v\u00f5rdlus\" src=\"\/wp-content\/uploads\/2019\/04\/3e6d3882a8f5a96a257fab4daaa230f2.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKubernetes klastrit k\u00e4ivitades on oluline m\u00f5ista, millised n\u00f5uded selle ressursi suhtes on rakendusel, \u00e4rioludel ja arendajatel. Kui see teave on teada, saab alustada arhitektuurilise lahenduse valimist, sealhulgas konkreetse Ingress-kontrolleri valimist, kuna neid on praegu juba palju. Selleks, et saada p\u00f5hipilti olemasolevatest variantidest ilma hulga artiklite\/dokumendi uurimise vajaduseta, oleme koostanud selle \u00fclevaate, lisades p\u00f5hiaspekte (tootevalmid) Ingress-kontrollerite kohta.<\/p>\n<p>Loodame, et see aitab kolleegidel arhitektuurilise lahenduse valimisel \u2014 v\u00e4hemalt saab see olema l\u00e4htepunktiks p\u00f5hjalikuma teabe ja praktiliste katsete jaoks. Varem oleme uurinud sarnaseid materjale v\u00f5rgus ja, mis \u00fcllatav, ei leidnud \u00fchtegi m\u00f5istlikult t\u00e4ielikku ja mis k\u00f5ige t\u00e4htsam \u2014 struktureeritud \u2014 \u00fclevaadet. Nii et t\u00e4idame selle t\u00fchiku!<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Kriteeriumid<\/h2>\n<p>\nKuna v\u00f5rreldakse \u00fcldiselt ja saadakse mingi kasulik tulemus, on oluline m\u00f5ista mitte ainult teemat, vaid ka omada konkreetset kriteeriumide loetelu, mis suunavad uurimist\u00f6\u00f6d. Mitte pretendeerides Ingress\/Kubernetes k\u00f5ikide v\u00f5imalike kasutusjuhtude anal\u00fc\u00fcsile, oleme p\u00fc\u00fcdnud v\u00e4lja tuua k\u00f5ige \u00fcldisemad n\u00f5udmised kontrollereid k\u00e4sitlevalt \u2014 olge valmis, et kogu oma spetsiifilisusega tuleb igal juhul eraldi uurida.<\/p>\n<p>Kuid alustan omadustest, mis on saanud nii harjumuseks, et neid on ellu viidud k\u00f5ikides lahendustes ja ei k\u00e4sitleta:<\/p>\n<ul>\n<li> d\u00fcnaamiline teenuste avastamine (service discovery);<\/li>\n<li> SSL-terminatsioon;<\/li>\n<li> t\u00f6\u00f6 websocket'idega.<\/li>\n<\/ul>\n<p>\nN\u00fc\u00fcd \u2013 v\u00f5rdlemise punktidest:<\/p>\n<h3>Toetatud protokollid<\/h3>\n<p>\n\u00dcks p\u00f5hilisi kriteeriume valiku tegemisel. Teie tarkvara ei pruugi t\u00f6\u00f6tada standardse HTTP kujul v\u00f5i n\u00f5uda toimimist mitmesuguste protokollide kaudu. Kui teie juhtum on mittestandardne, siis kindlasti arvestage seda tegurit, et hiljem ei peaks klastrit \u00fcmber seadistama. K\u00f5ikidel kontrollereil varieerub toetatavate protokollide nimekiri.<\/p>\n<h3>Tarkvara aluseks<\/h3>\n<p>\nKontroller p\u00f5hineb mitmetel rakendustel. Populaarsed on nginx, traefik, haproxy, envoy. \u00dcldiselt ei pruugi see oluliselt m\u00f5jutada seda, kuidas liiklust vastu v\u00f5tetakse ja edastatakse, kuid on alati kasulik teada v\u00f5imalikke n\u00fcansse ja erip\u00e4rasid, mis on \u00abkapoti all\u00bb.<\/p>\n<h3>Liikluse suunamine<\/h3>\n<p>\nMillisel alusel saab otsustada, kuhu liiklus suunatakse? Tavalised on host ja path, kuid on ka t\u00e4iendavad v\u00f5imalused.<\/p>\n<h3>Nimi-ala klastris<\/h3>\n<p>\nNimi-ala (namespace) on v\u00f5imalus loogiliselt jagada ressursse Kubernetes'is (nt stage, production jne). On Ingress-kontrollereid, mis tuleb paigaldada eraldi igasse nimi-alasse (siis suunab see liikluse <i>ainult<\/i> pod'ide seda korda). On ka selliseid (ja neid on selgelt enamuses), mis t\u00f6\u00f6tavad globaalselt kogu klastris \u2013 nendes suunatakse liiklus igasse klastripodi, s\u00f5ltumata nimedest.<\/p>\n<h3>Proovid upstream'ide jaoks<\/h3>\n<p>\nKuidas tagatakse, et liiklus suunatakse tervetesse rakenduse ja teenuse eksemplaridesse? On v\u00f5imalusi aktiivsete ja passiivsete kontrollide, uuesti katsete (retries), circuit breaker'ite kasutamiseks. <i>(t\u00e4iendavate detailide kohta vaata n\u00e4iteks <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/438426\/\">artiklit Istio kohta<\/a><\/noindex>)<\/i>, kohandatud olekupuuduste kontrollide (custom health checks) ja muu sarnase kohta. See on v\u00e4ga oluline parameeter, kui sul on k\u00f5rged n\u00f5udmised saadavusele ja kiirele h\u00e4irete lahendamisele.<\/p>\n<h3>Tasakaalustamisalgoritmid<\/h3>\n<p>\nSiin on palju v\u00f5imalusi: alates traditsioonilistest <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Round-robin_DNS\">ring-levi<\/a><\/noindex> kuni eksootilisteni nagu <noindex><a rel=\"nofollow\" href=\"http:\/\/www.loadbalancer.org\/blog\/load-balancing-windows-terminal-server-haproxy-and-rdp-cookies\/\">rdp-cookie<\/a><\/noindex>, ning ka eraldi v\u00f5imalused nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/solutions\/900933\">kleepuvad sessioonid<\/a><\/noindex>.<\/p>\n<h3>Autentimine<\/h3>\n<p>\nMilliseid autentimiskeeme toetab kontroller? Basic, digest, oauth, external-auth \u2014 arvan, et need valikud peaksid olema tuttavad. See on oluline kriteerium, kui kasutatakse palju arendajate kontuure (ja\/v\u00f5i lihtsalt suletud), millele p\u00e4\u00e4seb ligi l\u00e4bi Ingressi. <\/p>\n<h3>Liiklust\u00f5husus<\/h3>\n<p>\nKas kontroller toetab selliseid sageli kasutatavaid liikluse jaotamise mehhanisme, nagu kanarindade juurutamine (canary), A\/B-testimine, liikluse peegeldamine (mirroring\/shadowing)? See on t\u00f5eliselt tundlik teema rakendustele, mis vajavad t\u00e4pset ja delikaatset liikluse haldamist toote testimiseks, tootmisvigade t\u00f5rkeotsimiseks mitte reaalajas (v\u00f5i minimeeritud kaotustega), liikluse anal\u00fc\u00fcsimiseks jne.<\/p>\n<h3>Tasuline tellimus<\/h3>\n<p>\nKas kontrolleril on tasuline versioon, millel on laiendatud funktsioonid ja\/v\u00f5i tehniline tugi?<\/p>\n<h3>Graafiline kasutajaliides (Web UI)<\/h3>\n<p>\nKas kontrolleri seadete haldamiseks on olemas mingi graafiline kasutajaliides? Peamiselt mugavuse t\u00f5ttu ja\/v\u00f5i neile, kes peavad tegema mingeid muudatusi Ingressi seadistustes, kuid \u201etoorete\u201d malli kasutamine on ebamugav. See v\u00f5ib osutuda kasulikuks, kui arendajad soovivad liikluse kallal katsetada.<\/p>\n<h3>JWT-i valideerimine<\/h3>\n<p>\nSisseehitatud JSON web-tokenite kontroll autoriseerimiseks ja l\u00f5ppkasutaja valideerimiseks.<\/p>\n<h3>Konfiguratsioonifaili kohandamise v\u00f5imalused<\/h3>\n<p>\nMallide laiendatavus, mis v\u00f5imaldab standardsete konfiguratsioonimallide lisada oma direktiive, lippe jms.<\/p>\n<h3>P\u00f5himehhanismid DDoS-i eest kaitsmiseks<\/h3>\n<p>\nLihtsad vajaduse piiramisalgoritmid v\u00f5i keerulisemad v\u00f5imalused liikluse filtreerimiseks aadresside, valgete nimekirjade, riikide jms alusel.<\/p>\n<h3>K\u00fcsimuste j\u00e4lgimine<\/h3>\n<p>\nVaatamis-, j\u00e4lgimis- ja silumisv\u00f5imalused p\u00e4ringute j\u00e4lgimiseks Ingress'ilt konkreetsetele teenustele\/pod'idele ning ideaaljuhul ka teenuste\/pod'ide vahel.<\/p>\n<h3>WAF<\/h3>\n<p>\nToetamine <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Web_application_firewall\">rakenduslik firewall<\/a><\/noindex>.<\/p>\n<h2>Ingress Kontrolc\u00fcs\u00fc<\/h2>\n<p>\nKontrolc\u00fclerin listesi \u015fu temel tabloda olu\u015fturulmu\u015ftur <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/ingress-controllers\/#additional-controllers\">Kubernetes ametlikest dokumentidest<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/spreadsheets\/d\/16bxRgpO1H_Bn-5xVZ1WrR_I-0A-GOI6egmhvqqLMOmg\/edit\">bu tablo<\/a><\/noindex>. Baz\u0131lar\u0131n\u0131, belirli bir yere \u00f6zg\u00fc veya yayg\u0131n olmayan (erken a\u015fama geli\u015fim) olmalar\u0131 nedeniyle incelemelerimizden \u00e7\u0131kard\u0131k. Geriye kalanlar a\u015fa\u011f\u0131da ele al\u0131nm\u0131\u015ft\u0131r. Genel \u00e7\u00f6z\u00fcmlerle ba\u015flay\u0131p ard\u0131ndan \u00f6zet tabloyla devam edelim.<\/p>\n<h3>Kubernetes Ingress\u2019i<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/ingress-nginx\">github.com\/kubernetes\/ingress-nginx<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>Bu, topluluk taraf\u0131ndan geli\u015ftirilen resmi bir Kubernetes kontrolc\u00fcs\u00fcd\u00fcr. Ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 gibi, nginx \u00fczerine in\u015fa edilmi\u015ftir ve ek yetenekler sa\u011flamak i\u00e7in \u00e7e\u015fitli Lua eklentileri ile zenginle\u015ftirilmi\u015ftir. Nginx\u2019in pop\u00fclaritesinin ve bir kontrolc\u00fc olarak kullan\u0131ld\u0131\u011f\u0131nda \u00fczerindeki minimum modifikasyonun neden oldu\u011fu, ortalama bir m\u00fchendis (web deneyimi olan) taraf\u0131ndan en basit ve anla\u015f\u0131l\u0131r yap\u0131land\u0131rma se\u00e7ene\u011fi olabilir.<\/p>\n<h3>NGINX Inc. Ingress\u2019i<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nginxinc\/kubernetes-ingress\">github.com\/nginxinc\/kubernetes-ingress<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>Nginx geli\u015ftiricilerinin resmi \u00fcr\u00fcn\u00fcd\u00fcr. \u00dccretli bir versiyonu vard\u0131r. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nginx.com\/products\/nginx\/\">NGINX Plus<\/a><\/noindex>. Peamine idee on k\u00f5rge stabiilsuse tase, pidev tahes\u00fcndmuste \u00fchilduvus, v\u00e4liste moodulite puudumine ja v\u00e4idetavalt suurenenud kiirus (v\u00f5rreldes ametliku kontrolleriga), mis on saavutatud Lua'ist loobumisega. <\/p>\n<p>Tasuta versioon on oluliselt k\u00e4rbitud, sealhulgas isegi ametliku kontrolleriga v\u00f5rreldes (seoses endiste Lua-moodulite puudumisega). Tasuline versioon peab sisaldama piisaval m\u00e4\u00e4ral t\u00e4iendavat funktsionaalsust: reaalajas meetmed, JWT-sertifitseerimine, aktiivsed tervisekontrollid jne. Oluline eelis NGINX Ingress'i ees on t\u00e4ielik TCP\/UDP liikluse tugi (ka kogukonna versioonis!). Miinus - <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nginxinc\/kubernetes-ingress\/issues\/464\">puudumine<\/a><\/noindex> funktsioonide osas liikluse jagamiseks, mis \u201eon arendajatele maksimaalse prioriteediga\u201c, kuid vajab rakendamiseks aega.<\/p>\n<h3>Kong Ingress<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Kong\/kubernetes-ingress-controller\">github.com\/Kong\/kubernetes-ingress-controller<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>Toode, mida arendab Kong Inc. kahes variandis: kommertslik ja tasuta. P\u00f5hineb nginx'i platvormil, mille v\u00f5imalusi on laiendatud suure hulga Lua-moodulitega.<\/p>\n<p>Alguses keskendus see API p\u00e4ringute t\u00f6\u00f6tlemisele ja marsruutimisele, st API Gateway n\u00e4ol, kuid praeguseks on see saanud t\u00e4ie\u00f5iguslikuks sisenemisjuhtimiseks. Peamised eelised: arvukad lisamoodulid (sealhulgas ka kolmandate osapoolte arendajatelt), mida on lihtne paigaldada ja konfigureerida ning millega saab rakendada laia valikut t\u00e4iendavaid v\u00f5imalusi. Siiski pakuvad sisseehitatud funktsioonid juba palju v\u00f5imalusi. T\u00f6\u00f6 konfigureerimine toimub CRD-ressursside kaudu.<\/p>\n<p>Toote oluline omadus \u2014 t\u00f6\u00f6 \u00fches piirios (cross-namespaced asemel) on vaieldav teema: m\u00f5ned peavad seda puuduseks (iga piiriala jaoks tuleb luua \u00fcksused), aga kellegi jaoks on see funktsioon (suurem isolatsiooniaste, kuna kui \u00fcks kontroller rikki l\u00e4heb, siis on probleem piiratud vaid \u00fche piirkonjaga).<i>o<\/i>github.com\/containous\/traefik<\/p>\n<h3>Traefik<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/containous\/traefik\">github.com\/containous\/traefik<\/a><\/noindex><\/i><br \/>\n<i>Litsents: MIT<\/i><\/p>\n<p>Proxie, mis loodi algselt p\u00e4ringute marsruutimise t\u00f6\u00f6ks mikroteenuste ja nende d\u00fcnaamilise keskkonna jaoks. Seet\u00f5ttu on palju kasulikke v\u00f5imalusi: konfigureerimise v\u00e4rskendamine ilma taask\u00e4ivitamiseta, suure hulga tasakaalustusmeetodite tugi, veebiliides, m\u00f5\u00f5dikute suunamine, erinevate protokollide tugi, REST API, kanarilevited ja palju muud. Meeldiv omadus on ka Let's Encrypt sertifikaatide toetus otse kasti. Puuduseks on see, et k\u00f5rge k\u00e4ttesaadavuse (HA) korral peab kontroller endale installima ja \u00fchendama oma KV-lao.<\/p>\n<h3>HAProxy<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jcmoraisjr\/haproxy-ingress\">github.com\/jcmoraisjr\/haproxy-ingress<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>HAProxy on juba ammu tuntud kui proxie ja liikluse tasakaalustaja. Kubernetes klastris pakub see \u201epehme\u201d konfigureerimise v\u00e4rskendust (ilma liikluse kadumiseta), teenuste avastamine DNS-i kaudu, d\u00fcnaamiline konfigureerimine API kaudu. Atraktiivne v\u00f5ib olla ka t\u00e4ielik kohandamine konfi malli kaudu CM asendamise teel, samuti v\u00f5imalused kasutada selle funktsioone Sprig'i teegist. \u00dcldiselt keskendub lahenduse p\u00f5hifookus t\u00f6\u00f6 suurele kiirusel, optimeeritusele ja ressursikasutuse efektiivsusele. Kontrolleri eelised on rekordiliselt suur hulk erinevaid tasakaalustusviise.<\/p>\n<h3>Voyager<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/appscode\/voyager\">github.com\/appscode\/voyager<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>HAproxy p\u00f5hine kontroller, mis positsioneerib end universaalse lahendusena, toetades laia valikut v\u00f5imalusi paljudes teenusepakkujates. Pakub v\u00f5imalust liikluse tasakaalustamiseks L7 ja L4 tasemel, kusjuures L4 TCP liikluse tasakaalustamist v\u00f5ib pidada lahenduse \u00fcheks peamiseks funktsiooniks.<\/p>\n<h3>Contour<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/heptio\/contour\">github.com\/heptio\/contour<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>Selle lahenduse aluseks on mitte ainult Envoy: see on v\u00e4lja t\u00f6\u00f6tatud <i>koost\u00f6\u00f6s<\/i> selle populaarse proksi autoritega. Oluline omadus on Ingressi ressursihalduse jagamine CRD-ressursside IngressRoute abil. See aitab organisatsioonidel, millel on mitu arendusmeeskonda, kes kasutavad \u00fchte klastrit, maksimeerida liikluse t\u00f6\u00f6tlemise turvalisust naaberkonfiguratsioonides ja kaitsta neid Ingressi ressursside muutmisest p\u00f5hjustatud vigade eest.<\/p>\n<p>Pakutakse ka laiemat tasakaalustusmeetodite valikut (sealhulgas p\u00e4ringute peegeldamine, automaatsed kordused, p\u00e4ringute kiiruspiirangud ja palju muud), detailne liiklusvoogude ja t\u00f5rgete j\u00e4lgimine. V\u00f5ib-olla on m\u00f5nedele oluline puudus, et ei toetata sticky seansse (kuigi t\u00f6\u00f6) <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/heptio\/contour\/issues\/361\">on juba k\u00e4imas<\/a><\/noindex>).<\/p>\n<h3>Istio Ingress<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/istio.io\/docs\/tasks\/traffic-management\/ingress\/\">istio.io\/docs\/tasks\/traffic-management\/ingress<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>Kohandatud teenusemeeslahendus, mis on mitte ainult sissetuleva liikluse juhtiv Ingress-kontroller, vaid kontrollib ka kogu liiklust klastris. \"Kapoti all\" kasutatakse iga teenuse jaoks sidecar-proksina Envoy'd. Sisuliselt on see suur kombain, mis \"v\u00f5ib k\u00f5ike\", ja selle peamine m\u00f5te on maksimaalne hallatavus, laiendatavus, turvalisus ja l\u00e4bipaistvus. Selle abil saate peensusteni kohandada liikluse marsruutimist, juurdep\u00e4\u00e4su autoriseerimist teenuste vahel, koormuse tasakaalustamist, j\u00e4lgimist, kanarirelease ja palju muud. Lisainfot Istio kohta leiate artiklite seeriast.<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/438426\/\">Tagasi mikroteenustele Istio abil<\/a><\/noindex>\u00bb.<\/p>\n<h3>Ambassador<\/h3>\n<p>\n<i>Veebileht: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/datawire\/ambassador\">github.com\/datawire\/ambassador<\/a><\/noindex><\/i><br \/>\n<i>Litsents: Apache 2.0<\/i><\/p>\n<p>Veel \u00fcks lahendus Envoy p\u00f5hjal. Saadaval tasuta ja kaubanduslikud versioonid. Positioneeritakse kui \"t\u00e4iesti Kuberneteses kodune\", mis toob kaasa vastavad eelised (tihe integreeritus K8si meetodite ja \u00fcksustega).<\/p>\n<h2>V\u00f5rdlev tabel<\/h2>\n<p>\nNii et artikli tipptase \u2014 see tohutu tabel:<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ss\/wh\/lj\/sswhljo-rjkms7nadtyewqkxrdi.png\"><img decoding=\"async\" alt=\"Kubernetes&#039;e Ingress kontrollerite \u00fclevaade ja v\u00f5rdlus\" src=\"\/wp-content\/uploads\/2019\/04\/3a6c552df6b8b7b6a88517046fa7a275.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Seda saab klikkida, et n\u00e4ha detailsemalt, ja see on saadaval ka vormingus <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/spreadsheets\/d\/1xjff2AMS6QXSdh8E8ay_uNMoUa2OLIanCallvkDvAy0\/edit#gid=0\">Google Sheets<\/a><\/noindex>.<\/p>\n<h2>Kokkuv\u00f5tteks<\/h2>\n<p>\nArtikli eesm\u00e4rk on anda p\u00f5hjalikum arusaam (kuigi mitte ammendav!) sellest, milline valik sobib teie konkreetsele olukorrale. Nagu ikka, on igal kontrolleril omad plussid ja miinused...<\/p>\n<p>Kubernetes'e klassikaline Ingress on hea oma kergesti k\u00e4tte saadavuse ja usaldusv\u00e4\u00e4rsuse poolest ning pakub piisavalt rikkalikke v\u00f5imalusi \u2014 tavaliselt piisab sellest t\u00e4iesti. Siiski, kui on suurenenud n\u00f5udmised stabiilsuse, funktsioonide taseme ja arenduse osas, tasub kaaluda Ingress'i, mis kasutab NGINX Plusi ja tasulist tellimust. Kongil on lai valik pluginaid (ja seega ka nende poolt pakutavaid v\u00f5imalusi), ning tasulises versioonis on neid isegi rohkem. Sellel on ulatuslikud v\u00f5imalused t\u00f6\u00f6tada API v\u00e4ravana, d\u00fcnaamiliseks konfigureerimiseks CRD-ressursside p\u00f5hjal, ja Kubernetes'e p\u00f5hiteenuste haldamiseks.<\/p>\n<p>Kui teil on k\u00f5rgendatud n\u00f5uded tasakaalustamise ja autoriseerimise meetodite osas, vaadake Traefiki ja HAProxy poole. Need on avatud l\u00e4htekoodiga projektid, mille usaldusv\u00e4\u00e4rsust on aastate jooksul testitud ning mille stabiilsus ja areng on pidev. Contour ilmus turule paar aastat tagasi, kuid n\u00e4eb endiselt liiga noor v\u00e4lja ja omab ainult baass funktsioone, mis on lisatud Envoy p\u00f5hjal. Kui on n\u00f5udmisi WAF-i olemasolu\/integreerimise osas enne rakendust, tasub vaadata ka Kubernetes'i Ingressi v\u00f5i HAProxy poole.<\/p>\n<p>Funktsioonide poolest k\u00f5ige rikkamad tooted on need, mis on ehitatud Envoy p\u00f5hjal, eriti Istio. See paistab olevat kompleksne lahendus, mis 'suudab k\u00f5ike', mis omakorda t\u00e4hendab ka oluliselt k\u00f5rgemat sisenemispiiri konfiguratsiooni\/k\u00e4ivitamise\/halduse osas v\u00f5rreldes teiste lahendustega.<\/p>\n<p>Meie valikuks on olnud ja endiselt kasutatakse Kubernetes'elt saadud Ingress, mis katab 80\u201390% vajadustest. See on piisavalt usaldusv\u00e4\u00e4rne, kergesti seadistatav ja laiendatav. \u00dcldiselt peaks see sobima enamikule klastritest\/rakendustest, kui pole spetsiifilisi n\u00f5udeid. Sarnastest universaalsetest ja suhteliselt lihtsatest toodetest v\u00f5ib soovitada ka Traefik ja HAProxy.<\/p>\n<h2>P.S.<\/h2>\n<p>\nLugege ka meie blogist:<\/p>\n<ul>\n<li> \u201eTagasi mikroteenuste juurde koos Istio\u2019ga\u201c: <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/438426\/\">osa 1 (tutvumine p\u00f5hifunktsioonidega)<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/440378\/\">osa 2 (suunamine, liikluse haldamine)<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/443668\/\">osa 3 (autentimine ja autoriseerimine)<\/a><\/noindex>;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/445596\/\">Kubernetesi n\u00e4pun\u00e4ited ja nipid: isikup\u00e4rastatud vealehed NGINX Ingress'is<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/427745\/\">Kubernetes'i n\u00e4pun\u00e4ited ja trikid: juurdep\u00e4\u00e4s dev-platvormidele<\/a><\/noindex>\u00bb.<\/li>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/447180\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441\u0430\u043c\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0431\u0438\u0437\u043d\u0435\u0441 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u044d\u0442\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u043a \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a \u0432\u044b\u0431\u043e\u0440\u0443 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e Ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430, \u043a\u043e\u0438\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0436\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23140,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441\u0430\u043c\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0431\u0438\u0437\u043d\u0435\u0441 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u044d\u0442\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u043a \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a \u0432\u044b\u0431\u043e\u0440\u0443 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e Ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430, \u043a\u043e\u0438\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0436\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Ingress \u0434\u043b\u044f Kubernetes | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441\u0430\u043c\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0431\u0438\u0437\u043d\u0435\u0441 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u044d\u0442\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u043a \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a \u0432\u044b\u0431\u043e\u0440\u0443 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e Ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430, \u043a\u043e\u0438\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0436\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Overviews ja v\u00f5rdlus Kubernetes'e Ingress-kontrollerite kohta | ProHoster","description":"Kubernetes klastrite k\u00e4ivitamisel konkreetse rakenduse jaoks on oluline m\u00f5ista, millised n\u00f5uded sellele ressursile rakendusele, \u00e4rile ja arendajatele esitatakse. Kui see teave on olemas, saab alustada arhitektuuriliste otsuste tegemist ning eelk\u00f5ige valida konkreetse Ingress-kontrolleri, mida on t\u00e4naseks juba palju. Et anda p\u00f5hjalik \u00fclevaade saadaval olevatest variantidest ilma paljusid uurimata.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Ingress \u0434\u043b\u044f Kubernetes | ProHoster","og:description":"\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441\u0430\u043c\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0431\u0438\u0437\u043d\u0435\u0441 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u044d\u0442\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u043a \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a \u0432\u044b\u0431\u043e\u0440\u0443 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e Ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430, \u043a\u043e\u0438\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0436\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:53+00:00","article:modified_time":"2019-10-31T18:39:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 04:53:04","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:21:32","updated":"2026-01-21 04:53:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31173"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23140"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}