{"id":31173,"date":"2019-10-31T21:39:53","date_gmt":"2019-10-31T18:39:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes\/"},"modified":"2019-10-31T21:39:53","modified_gmt":"2019-10-31T18:39:53","slug":"obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","title":{"rendered":"P\u00ebrmbledhje dhe krahasim i kontrollor\u00ebve Ingress p\u00ebr Kubernetes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"P\u00ebrmbledhje dhe krahasim i kontrollor\u00ebve Ingress p\u00ebr Kubernetes\" src=\"\/wp-content\/uploads\/2019\/04\/3e6d3882a8f5a96a257fab4daaa230f2.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKur filloni nj\u00eb klaster Kubernetes p\u00ebr nj\u00eb aplikacion specifik, duhet t\u00eb kuptoni cfar\u00eb k\u00ebrkesash ka ky burim, aplikacioni vet\u00eb, biznesi dhe zhvilluesit. Me k\u00ebt\u00eb informacion n\u00eb dor\u00eb, mund t\u00eb filloni t\u00eb merrni vendime p\u00ebr arkitektur\u00ebn dhe, n\u00eb ve\u00e7anti, t\u00eb zgjidhni nj\u00eb Ingress-controller specifik, t\u00eb cil\u00ebt tani jan\u00eb n\u00eb num\u00ebr t\u00eb madh. P\u00ebr t\u00eb krijuar nj\u00eb pasqyr\u00eb baz\u00eb p\u00ebr opsionet e disponueshme pa pasur nevoj\u00eb t\u00eb studioni shum\u00eb artikuj\/dokumentacion etj., ne p\u00ebrgatit\u00ebm k\u00ebt\u00eb p\u00ebrmbledhje, duke p\u00ebrfshir\u00eb Ingress-controller\u00ebt kryesor\u00eb (t\u00eb gatsh\u00ebm p\u00ebr prodhim).<\/p>\n<p>Shpresojm\u00eb se do t\u00eb ndihmoj\u00eb koleg\u00ebt n\u00eb zgjedhjen e vendimeve p\u00ebr arkitektur\u00ebn \u2014 t\u00eb pakt\u00ebn, do t\u00eb sh\u00ebrbej\u00eb si nj\u00eb pik\u00eb fillestare p\u00ebr t\u00eb marr\u00eb m\u00eb shum\u00eb informacion dhe eksperimente praktike. Fillimisht, kemi studiuar materiale t\u00eb tjera t\u00eb ngjashme online dhe, \u00e7udit\u00ebrisht, nuk gjet\u00ebm asnj\u00eb p\u00ebrmbledhje m\u00eb t\u00eb plot\u00eb, dhe m\u00eb kryesorja \u2014 t\u00eb strukturuar. Pra, le t\u00eb mbushim k\u00ebt\u00eb boshll\u00ebk!<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Kriteret<\/h2>\n<p>\nP\u00ebr t\u00eb b\u00ebr\u00eb krahasimin dhe t\u00eb merrni ndonj\u00eb rezultat t\u00eb dobish\u00ebm, duhet t\u00eb kuptoni jo vet\u00ebm fush\u00ebn p\u00ebrkat\u00ebse, por gjithashtu t\u00eb keni nj\u00eb list\u00eb t\u00eb ve\u00e7ant\u00eb kriteresh q\u00eb do t\u00eb ndihmojn\u00eb n\u00eb drejtp\u00ebrdrejtimin e k\u00ebrkimit. Pa pretenduar t\u00eb analizojm\u00eb t\u00eb gjitha rastet e mundshme t\u00eb p\u00ebrdorimit t\u00eb Ingress\/Kubernetes, ne u p\u00ebrpoq\u00ebm t\u00eb nxjerrim k\u00ebrkesat m\u00eb t\u00eb zakonshme p\u00ebr kontrolluesit \u2014 b\u00ebni mir\u00eb t\u00eb jeni t\u00eb gatsh\u00ebm se gjith\u00eb specifikat dhe detajet e ve\u00e7anta, n\u00eb \u00e7do rast, do t'ju duhet t'i studioni ve\u00e7 e ve\u00e7.<\/p>\n<p>Por, do t\u00eb filloj me karakteristikat q\u00eb jan\u00eb b\u00ebr\u00eb aq t\u00eb zakonshme q\u00eb jan\u00eb t\u00eb realizuara n\u00eb t\u00eb gjitha zgjidhjet dhe nuk shqyrtohen:<\/p>\n<ul>\n<li> zbulimi dinamik i sh\u00ebrbimeve (service discovery);<\/li>\n<li> terminimi i SSL;<\/li>\n<li> \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 websocket&#8217;\u0430\u043c\u0438.<\/li>\n<\/ul>\n<p>\nTani \u2014 p\u00ebr pikat e krahasimit:<\/p>\n<h3>Protokollet e mb\u00ebshtetura<\/h3>\n<p>\nNj\u00eb nga kriteret themelore p\u00ebr zgjedhjen. Software-i juaj mund t\u00eb mos funksionoj\u00eb sipas HTTP standard ose t\u00eb k\u00ebrkoj\u00eb t\u00eb punoj\u00eb me shum\u00eb protokolle nj\u00ebher\u00ebsh. N\u00ebse rasti juaj \u00ebsht\u00eb jo standard, sigurohuni q\u00eb t\u00eb merrni parasysh k\u00ebt\u00eb faktor, p\u00ebr t\u00eb mos pasur nevoj\u00eb ta rregulloni pastaj klasterin. Lista e protokolleve t\u00eb mb\u00ebshtetur ndryshon te t\u00eb gjith\u00eb kontrolluesit.<\/p>\n<h3>Software temel<\/h3>\n<p>\nKa jan\u00eb disa variante aplikacionesh n\u00eb t\u00eb cilat bazohet kontrolluesi. Popullore jan\u00eb nginx, traefik, haproxy, envoy. N\u00eb p\u00ebrgjith\u00ebsi, ndoshta nuk ka shum\u00eb ndikim n\u00eb m\u00ebnyr\u00ebn se si pranohet dhe transmetohet trafiku, megjithat\u00eb gjithmon\u00eb \u00ebsht\u00eb e dobishme t\u00eb dihet p\u00ebr nuancat dhe ve\u00e7orit\u00eb e asaj q\u00eb \"\u00ebsht\u00eb n\u00ebn kapak\".<\/p>\n<h3>Routimi i trafikut<\/h3>\n<p>\nN\u00eb baz\u00eb t\u00eb \u00e7far\u00eb mund t\u00eb merret nj\u00eb vendim p\u00ebr drejtimin e trafikut n\u00eb nj\u00eb sh\u00ebrbim t\u00eb caktuar? Zakonisht \u00ebsht\u00eb host dhe path, por ka edhe mund\u00ebsi t\u00eb tjera shtes\u00eb.<\/p>\n<h3>Hap\u00ebsira emri brenda klustrit<\/h3>\n<p>\nHap\u00ebsira e emrit (namespace) \u00ebsht\u00eb mund\u00ebsia p\u00ebr t\u00eb ndar\u00eb burimet n\u00eb Kubernetes n\u00eb m\u00ebnyr\u00eb logjike (p.sh. n\u00eb sken\u00eb, prodhim etj.). Ka Ingress-kontrollues q\u00eb duhet t\u00eb instalohen ve\u00e7mas n\u00eb \u00e7do namespace (dhe at\u00ebher\u00eb ai mund t\u00eb drejtoj\u00eb trafikun n\u00eb pod'\u00ebt e k\u00ebsaj hap\u00ebsire). Nd\u00ebrsa ka t\u00eb till\u00eb (dhe jan\u00eb nj\u00eb shumic\u00eb e qart\u00eb) q\u00eb punojn\u00eb globalisht p\u00ebr t\u00eb gjith\u00eb klustrin \u2014 n\u00eb to, trafiku drejtohet n\u00eb \u00e7do pod t\u00eb klustrit, pavar\u00ebsisht nga hap\u00ebsira emri. <i>t\u00eb<\/i> \u0432 pod&#8217;\u044b \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430). \u0410 \u0435\u0441\u0442\u044c \u0442\u0430\u043a\u0438\u0435 (\u0438 \u0438\u0445 \u044f\u0432\u043d\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e), \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u0432\u0435\u0441\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u2014 \u0432 \u043d\u0438\u0445 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u043b\u044e\u0431\u043e\u0439 pod \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0451\u043d.<\/p>\n<h3>\u041f\u0440\u043e\u0431\u044b \u0434\u043b\u044f upstream&#8217;\u043e\u0432<\/h3>\n<p>\nCila \u00ebsht\u00eb m\u00ebnyra p\u00ebr t\u00eb drejtuar trafikun n\u00eb instanca t\u00eb sh\u00ebndetshme t\u00eb aplikacionit, sh\u00ebrbimeve? Ekzistojn\u00eb mund\u00ebsi me kontrollime aktive dhe pasive, p\u00ebrpjekje t\u00eb p\u00ebrs\u00ebritura (retries), circuit breakers <i>(m\u00eb shum\u00eb rreth tyre shih, p\u00ebr shembull, n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/438426\/\">artikulli p\u00ebr Istio<\/a><\/noindex>)<\/i>, realizime t\u00eb veta t\u00eb kontrollimeve t\u00eb gjendjes (custom health checks) etj. Nj\u00eb parameter shum\u00eb i r\u00ebnd\u00ebsish\u00ebm, n\u00ebse keni k\u00ebrkesa t\u00eb larta p\u00ebr disponueshm\u00ebri dhe krijimin e shpejt\u00eb jasht\u00eb balansimit t\u00eb sh\u00ebrbimeve q\u00eb kan\u00eb d\u00ebshtuar.<\/p>\n<h3>Algoritmet e balansimit<\/h3>\n<p>\nK\u00ebtu ka shum\u00eb variante: nga ato tradicionale <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Round-robin_DNS\">round-robin<\/a><\/noindex> deri te ato ekzotike si <noindex><a rel=\"nofollow\" href=\"http:\/\/www.loadbalancer.org\/blog\/load-balancing-windows-terminal-server-haproxy-and-rdp-cookies\/\">rdp-cookie<\/a><\/noindex>, si dhe mund\u00ebsi t\u00eb ve\u00e7anta si <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/solutions\/900933\">seancat ngjit\u00ebse<\/a><\/noindex>.<\/p>\n<h3>Autentikimi<\/h3>\n<p>\n\u00c7far\u00eb skemash autorizimi mb\u00ebshtet kontrolluesi? Basic, digest, oauth, external-auth \u2014 mendoj se k\u00ebto mund\u00ebsi duhet t\u00eb jen\u00eb t\u00eb njohura. Ky \u00ebsht\u00eb nj\u00eb kriter i r\u00ebnd\u00ebsish\u00ebm, n\u00ebse p\u00ebrdoren shum\u00eb skema p\u00ebr zhvilluesit (dhe\/ose thjesht t\u00eb mbyllura), p\u00ebr t\u00eb cilat aksesi realizohet p\u00ebrmes Ingress. <\/p>\n<h3>Shp\u00ebrndarja e trafikut<\/h3>\n<p>\nA mb\u00ebshtet kontrolluesi mekanizmat e p\u00ebrdorur shpesh p\u00ebr shp\u00ebrndarjen e trafikut, si rrotullimet kanarin\u00eb (canary), testimi A\/B, ndri\u00e7imi i trafikut (mirroring\/shadowing)? Kjo \u00ebsht\u00eb me t\u00eb v\u00ebrtet\u00eb nj\u00eb tem\u00eb delikate p\u00ebr aplikacionet q\u00eb k\u00ebrkojn\u00eb menaxhim t\u00eb kujdessh\u00ebm dhe t\u00eb sakt\u00eb t\u00eb trafikut p\u00ebr testime produktive, zhgjidhjen e gabimeve t\u00eb produkteve jo n\u00eb prodhim (ose me humbje minimale), analiz\u00ebn e trafikut etj.<\/p>\n<h3>Abonimi i paguar<\/h3>\n<p>\nA ka ndonj\u00eb variant t\u00eb paguar p\u00ebr kontrolluesin, me funksionalitete t\u00eb zgjeruara dhe\/a ose mb\u00ebshtetje teknike?<\/p>\n<h3>Nd\u00ebrfaqja grafike (Web UI)<\/h3>\n<p>\nA ekziston ndonj\u00eb nd\u00ebrfaqe grafike p\u00ebr menaxhimin e konfigurimit t\u00eb kontrolluesit? Kryesisht p\u00ebr \"leht\u00ebsin\u00eb\" dhe\/a ose p\u00ebr ata q\u00eb nevojiten p\u00ebr t\u00eb b\u00ebr\u00eb ndonj\u00eb ndryshim n\u00eb konfigurimin e Ingress, por \u00ebsht\u00eb e padrejt\u00eb t\u00eb punosh me \"model\u00ebt e pap\u00ebrpunuar\". Mund t\u00eb jet\u00eb e dobishme n\u00eb rast se zhvilluesit duan t\u00eb eksperimentojn\u00eb me trafikun n\u00eb fluturim.<\/p>\n<h3>Validimi JWT<\/h3>\n<p>\nPrania e kontrollit t\u00eb integruar t\u00eb JSON web-ndihm\u00ebs p\u00ebr autorizimin dhe validimin e p\u00ebrdoruesve n\u00eb aplikacionin e fundit.<\/p>\n<h3>Mund\u00ebsi p\u00ebr personalizimin e konfigurimit<\/h3>\n<p>\nZgjerueshm\u00ebria e modeleve n\u00eb kuptimin e pranis\u00eb s\u00eb mekanizmave q\u00eb lejojn\u00eb q\u00eb t\u00eb shtohen n\u00eb modelet standarde t\u00eb konfigurimit udh\u00ebzime, flagje dhe t\u00eb tjera.<\/p>\n<h3>Mekanizmat baz\u00eb t\u00eb mbrojtjes nga DDOS<\/h3>\n<p>\nAlgoritme t\u00eb thjeshta t\u00eb kufizimit t\u00eb normave ose variante m\u00eb t\u00eb komplikuara t\u00eb filtrimit t\u00eb trafikut n\u00eb baz\u00eb t\u00eb adresave, listeve t\u00eb bardha, vendeve dhe t\u00eb tjera.<\/p>\n<h3>Ndjekja e k\u00ebrkesave<\/h3>\n<p>\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 Ingress&#8217;\u043e\u0432 \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\/pod&#8217;\u0430\u043c, \u0430 \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u2014 \u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438\/pod&#8217;\u0430\u043c\u0438 \u0442\u043e\u0436\u0435.<\/p>\n<h3>WAF<\/h3>\n<p>\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Web_application_firewall\">\u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e firewall&#8217;\u0430<\/a><\/noindex>.<\/p>\n<h2>Kontroller\u00ebt Ingress<\/h2>\n<p>\nLista e kontroller\u00ebve \u00ebsht\u00eb formuar mbi baz\u00ebn e <noindex><a rel=\"nofollow\" href=\"https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/ingress-controllers\/#additional-controllers\">dokumentacionit zyrtar t\u00eb Kubernetes<\/a><\/noindex> \u0438 <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/spreadsheets\/d\/16bxRgpO1H_Bn-5xVZ1WrR_I-0A-GOI6egmhvqqLMOmg\/edit\">k\u00ebsaj tabele<\/a><\/noindex>. Disa prej tyre i kemi p\u00ebrjashtuar nga shqyrtimi p\u00ebr shkak t\u00eb specifikave ose p\u00ebrhapjes s\u00eb ul\u00ebt (faz\u00ebs s\u00eb hershme t\u00eb zhvillimit). T\u00eb tjer\u00ebt jan\u00eb shqyrtuar m\u00eb posht\u00eb. Le t\u00eb fillojm\u00eb me nj\u00eb p\u00ebrshkrim t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb zgjidhjeve dhe t\u00eb vazhdojm\u00eb me nj\u00eb tabel\u00eb p\u00ebrmbledh\u00ebse.<\/p>\n<h3>Ingress nga Kubernetes<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kubernetes\/ingress-nginx\">github.com\/kubernetes\/ingress-nginx<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Ky \u00ebsht\u00eb kontrolluesi zyrtar p\u00ebr Kubernetes, i cili zhvillohet nga komuniteti. Si\u00e7 tregohet nga emri, ai \u00ebsht\u00eb i bazuar n\u00eb nginx dhe \u00ebsht\u00eb plot\u00ebsuar me nj\u00eb s\u00ebr\u00eb plug-in-esh Lua, t\u00eb p\u00ebrdorura p\u00ebr realizimin e mund\u00ebsive shtes\u00eb. Fal\u00eb popullaritetit t\u00eb vet\u00eb nginx dhe modifikimeve minimale mbi t\u00eb gjat\u00eb p\u00ebrdorimit si kontrollues, kjo mund t\u00eb jet\u00eb opsioni m\u00eb i thjesht\u00eb dhe m\u00eb i qart\u00eb p\u00ebr konfigurimin nga nj\u00eb inxhinier mesatar (me p\u00ebrvoj\u00eb n\u00eb web).<\/p>\n<h3>Ingress nga NGINX Inc<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nginxinc\/kubernetes-ingress\">github.com\/nginxinc\/kubernetes-ingress<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Produkti zyrtar i zhvilluesve t\u00eb nginx. Ka nj\u00eb version t\u00eb paguar, t\u00eb bazuar n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.nginx.com\/products\/nginx\/\">NGINX Plus<\/a><\/noindex>. Ideja kryesore \u00ebsht\u00eb nj\u00eb nivel i lart\u00eb stabiliteti, p\u00ebrputhje e vazhdueshme, mungesa e moduleve t\u00eb jashtme dhe shpejt\u00ebsia e deklaruar e rritur (krahasuar me kontrolluesin zyrtar), arritur fal\u00eb braktisjes s\u00eb Lua. <\/p>\n<p>Versioni falas \u00ebsht\u00eb n\u00eb mas\u00eb t\u00eb madhe i kufizuar, p\u00ebrfshir\u00eb madje edhe n\u00eb krahasim me kontrolluesin zyrtar (p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb moduleve t\u00eb nj\u00ebjt\u00eb Lua). Nd\u00ebrsa versioni me pages\u00eb ka nj\u00eb funksionalitet shtes\u00eb t\u00eb gjer\u00eb: metrika n\u00eb koh\u00eb reale, validimi JWT, kontroll aktiv t\u00eb sh\u00ebndetit dhe m\u00eb shum\u00eb. Nj\u00ebavantazh i r\u00ebnd\u00ebsish\u00ebm n\u00eb krahasim me NGINX Ingress \u2014 mb\u00ebshtetje e plot\u00eb p\u00ebr trafik TCP\/UDP (edhe n\u00eb versionin community!). Disavantazhi \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/nginxinc\/kubernetes-ingress\/issues\/464\">mungesa<\/a><\/noindex> e funksioneve p\u00ebr shp\u00ebrndarjen e trafik, q\u00eb, megjithat\u00eb, \"ka prioritetin maksimal p\u00ebr zhvilluesit\", por k\u00ebrkon koh\u00eb p\u00ebr t\u00eb realizuar.<\/p>\n<h3>Kong Ingress<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Kong\/kubernetes-ingress-controller\">github.com\/Kong\/kubernetes-ingress-controller<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Produkti, i zhvilluar nga kompanija Kong Inc. n\u00eb dy variante: komercial dhe falas. Bazohet n\u00eb nginx, mund\u00ebsit\u00eb e t\u00eb cilit jan\u00eb zgjeruar me shum\u00eb module n\u00eb Lua.<\/p>\n<p>Fillimisht ishte orientuar n\u00eb p\u00ebrpunimin dhe p\u00ebrshkrimin e k\u00ebrkesave API, pra si nj\u00eb API Gateway, por tani \u00ebsht\u00eb b\u00ebr\u00eb nj\u00eb kontrollues Ingress i plot\u00eb. Avantazhet kryesore: shum\u00eb module shtes\u00eb (p\u00ebrfshir\u00eb edhe nga zhvillues t\u00eb tret\u00eb), t\u00eb cilat jan\u00eb t\u00eb lehta p\u00ebr t'u instaluar dhe konfiguruar dhe me an\u00eb t\u00eb t\u00eb cilave ofrohen nj\u00eb gam\u00eb e gjer\u00eb mund\u00ebsish shtes\u00eb. Megjithat\u00eb, funksionet e nd\u00ebrtuara ofrojn\u00eb tashm\u00eb shum\u00eb mund\u00ebsi. Konfigurohet puna p\u00ebrmes burimeve CRD.<\/p>\n<p>Nj\u00eb tipar i r\u00ebnd\u00ebsish\u00ebm i produktit \u2014 puna brenda nj\u00eb konturi (n\u00eb vend t\u00eb cross-namespaced) \u00ebsht\u00eb nj\u00eb tem\u00eb e diskutueshme: dikujt do t'i duket si nj\u00eb mang\u00ebsi (duhet t\u00eb krijosh entitete p\u00ebr \u00e7do kontur), ndersa p\u00ebr dik\u00eb tjet\u00ebr \u2014 nj\u00eb tipar (b<i>o<\/i>niveli m\u00eb i lart\u00eb i izolimit, pasi, n\u00ebse d\u00ebshton nj\u00eb kontrollues, problemi \u00ebsht\u00eb i kufizuar n\u00eb nj\u00eb kontur t\u00eb vet\u00ebm).<\/p>\n<h3>Traefik<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/containous\/traefik\">github.com\/containous\/traefik<\/a><\/noindex><\/i><br \/>\n<i>Licenca: MIT<\/i><\/p>\n<p>\u041f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043b\u044f \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u0438\u0445 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0440\u0435\u0434\u044b. \u041e\u0442\u0441\u044e\u0434\u0430 \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u0441\u0435\u043c \u0431\u0435\u0437 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438, \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043f\u0440\u043e\u0431\u0440\u043e\u0441 \u043c\u0435\u0442\u0440\u0438\u043a, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, REST API, \u043a\u0430\u043d\u0430\u0440\u0435\u0435\u0447\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435. \u041f\u0440\u0438\u044f\u0442\u043d\u043e\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#8217;s Encrypt \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u2014 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA) \u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 KV-\u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435.<\/p>\n<h3>HAProxy<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jcmoraisjr\/haproxy-ingress\">github.com\/jcmoraisjr\/haproxy-ingress<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>HAProxy \u0434\u0430\u0432\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0441 \u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u00ab\u043c\u044f\u0433\u043a\u043e\u0435\u00bb \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (\u0431\u0435\u0437 \u043f\u043e\u0442\u0435\u0440\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430), service discovery \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 DNS, \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e API. \u041f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u0430\u044f \u043a\u0430\u0441\u0442\u043e\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043c\u0435\u043d\u044b CM&#8217;\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u0451\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Sprig. \u0412 \u0446\u0435\u043b\u043e\u043c \u0436\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0430\u043a\u0446\u0435\u043d\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b, \u0435\u0433\u043e \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u043c\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u0445. \u041f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u2014 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438.<\/p>\n<h3>Voyager<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/appscode\/voyager\">github.com\/appscode\/voyager<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Nj\u00eb kontrollues i bazuar n\u00eb HAproxy, i cili pozicionohet si nj\u00eb zgjidhje universale q\u00eb mb\u00ebshtet mund\u00ebsi t\u00eb gjera n\u00eb nj\u00eb num\u00ebr t\u00eb madh ofruesish. Ofron mund\u00ebsin\u00eb p\u00ebr balancimin e trafikut n\u00eb L7 dhe L4, nd\u00ebrsa balancimi i trafikut TCP L4 mund t\u00eb p\u00ebrmendet si nj\u00eb nga karakteristikat kryesore t\u00eb zgjidhjes.<\/p>\n<h3>Contour<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/heptio\/contour\">github.com\/heptio\/contour<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Ky zgjidhje \u00ebsht\u00eb zhvilluar jo vet\u00ebm leht\u00eb nga Envoy: <i>bashk\u00eb<\/i> me autor\u00ebt e k\u00ebtij proksi t\u00eb njohur. Nj\u00eb ve\u00e7ori e r\u00ebnd\u00ebsishme \u00ebsht\u00eb mund\u00ebsia e ndarjes s\u00eb menaxhimit t\u00eb burimeve Ingress p\u00ebrmes burimeve CRD IngressRoute. P\u00ebr organizatat me shum\u00eb ekipe zhvillimi q\u00eb p\u00ebrdorin nj\u00eb klaster t\u00eb vet\u00ebm, kjo ndihmon p\u00ebr t\u00eb siguruar maksimalisht pun\u00ebn me trafikun n\u00eb kontura fqinj dhe p\u00ebr t'i mbrojtur ata nga gabimet gjat\u00eb ndryshimit t\u00eb burimeve Ingress.<\/p>\n<p>\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 (\u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0435\u0440\u043a\u0430\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430\u0432\u0442\u043e\u043f\u043e\u0432\u0442\u043e\u0440\u044b, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043f\u043e rate&#8217;\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435), \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u043f\u043e\u0442\u043e\u043a\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0441\u0431\u043e\u0435\u0432. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0434\u043b\u044f \u043a\u043e\u0433\u043e-\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 sticky sessions (\u0445\u043e\u0442\u044f \u0440\u0430\u0431\u043e\u0442\u044b <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/heptio\/contour\/issues\/361\">tashm\u00eb jan\u00eb duke u zhvilluar<\/a><\/noindex>).<\/p>\n<h3>Istio Ingress<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/istio.io\/docs\/tasks\/traffic-management\/ingress\/\">istio.io\/docs\/tasks\/traffic-management\/ingress<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Nj\u00eb zgjidhje e plot\u00eb e service mesh, e cila nuk \u00ebsht\u00eb vet\u00ebm nj\u00eb kontrollues Ingress q\u00eb menaxhon trafikun e pranuar nga jasht\u00eb, por gjithashtu kontrollon t\u00eb gjith\u00eb trafikun brenda klasterit. \"N\u00ebn kapak\", si proxy an\u00ebsor p\u00ebr \u00e7do sh\u00ebrbim, p\u00ebrdoret Envoy. N\u00eb thelb, kjo \u00ebsht\u00eb nj\u00eb makin\u00eb e madhe q\u00eb \"mund gjith\u00e7ka\", dhe ideja e saj kryesore \u00ebsht\u00eb menaxhueshm\u00ebria maksimale, zgjerueshm\u00ebria, siguria dhe transparenca. Me t\u00eb, mund t\u00eb konfiguroni me detaje rrug\u00ebtimin e trafikut, autorizimin e aksesit mes sh\u00ebrbimeve, balancimin, monitorimin, l\u00ebshimet e kanarin\u00ebs dhe shum\u00eb t\u00eb tjera. M\u00eb shum\u00eb rreth Istio lexoni n\u00eb serin\u00eb e artikujve \"<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/438426\/\">Kthehu n\u00eb mikrosh\u00ebrbimet me Istio<\/a><\/noindex>\u00bb.<\/p>\n<h3>Ambassador<\/h3>\n<p>\n<i>Faqja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/datawire\/ambassador\">github.com\/datawire\/ambassador<\/a><\/noindex><\/i><br \/>\n<i>Licenca: Apache 2.0<\/i><\/p>\n<p>Nj\u00eb tjet\u00ebr zgjidhje e bazuar n\u00eb Envoy. Ka nj\u00eb version falas dhe nj\u00eb version komerciale. Pozicionohet si \"plot\u00ebsisht nativo p\u00ebr Kubernetes\", q\u00eb sjell p\u00ebrfitime p\u00ebrkat\u00ebse (integrim i ngusht\u00eb me metodat dhe entitetet e klasterit K8s).<\/p>\n<h2>Tabela krahasuese<\/h2>\n<p>\nPra, kulminimi i artikullit \u00ebsht\u00eb kjo tabel\u00eb e madhe:<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ss\/wh\/lj\/sswhljo-rjkms7nadtyewqkxrdi.png\"><img decoding=\"async\" alt=\"P\u00ebrmbledhje dhe krahasim i kontrollor\u00ebve Ingress p\u00ebr Kubernetes\" src=\"\/wp-content\/uploads\/2019\/04\/3a6c552df6b8b7b6a88517046fa7a275.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p>Ajo \u00ebsht\u00eb klikueshme p\u00ebr mund\u00ebsi shikimi m\u00eb t\u00eb detajuar, si dhe e disponueshme n\u00eb formatin <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.google.com\/spreadsheets\/d\/1xjff2AMS6QXSdh8E8ay_uNMoUa2OLIanCallvkDvAy0\/edit#gid=0\">Google Sheets<\/a><\/noindex>.<\/p>\n<h2>T\u00eb t\u00ebrheqim p\u00ebrfundimet<\/h2>\n<p>\nQ\u00ebllimi i artikullit \u00ebsht\u00eb t\u00eb ofroj\u00eb nj\u00eb kuptim m\u00eb t\u00eb plot\u00eb (me t\u00eb v\u00ebrtet\u00eb, jo plot\u00ebsisht t\u00eb gjer\u00eb!) se \u00e7far\u00eb zgjedhje t\u00eb b\u00ebni n\u00eb rastin tuaj t\u00eb ve\u00e7ant\u00eb. Si zakonisht, \u00e7do kontrollues ka p\u00ebrfitimet dhe mang\u00ebsit\u00eb e tij...<\/p>\n<p>Ingress-i klasifikuesit nga Kubernetes \u00ebsht\u00eb i njohur p\u00ebr disponueshm\u00ebrin\u00eb dhe provueshm\u00ebrin\u00eb e tij, si dhe p\u00ebr mund\u00ebsit\u00eb e tij relativisht t\u00eb pasura - n\u00eb shumic\u00ebn e rasteve, duhet t\u00eb jet\u00eb \"mjaft\". Sidoqoft\u00eb, n\u00ebse keni k\u00ebrkesa t\u00eb larta p\u00ebr stabilitet, nivelin e ve\u00e7orive dhe zhvillimin, duhet t\u00eb shqyrtoni Ingress me NGINX Plus dhe nj\u00eb abonim t\u00eb paguar. Kong ka nj\u00eb set t\u00eb pasur plugins (dhe, p\u00ebr pasoj\u00eb, mund\u00ebsish q\u00eb i ofron), dhe versioni i paguar ka ende m\u00eb shum\u00eb. Ai ka mund\u00ebsi t\u00eb gjera p\u00ebr t'u p\u00ebrdorur si API Gateway, konfigurim dinamik mbi baz\u00ebn e burimeve CRD, si dhe sh\u00ebrbime baz\u00eb t\u00eb Kubernetes.<\/p>\n<p>N\u00ebse keni k\u00ebrkesa t\u00eb larta p\u00ebr balancimin dhe metodat e autorizimit, shqyrtoni Traefik dhe HAProxy. K\u00ebto jan\u00eb projekte me burim t\u00eb hapur, t\u00eb provuara p\u00ebr vite, shum\u00eb stabile dhe q\u00eb po zhvillohen aktivisht. Contour u shfaq disa vite m\u00eb par\u00eb, por ende duket tep\u00ebr i ri dhe ka vet\u00ebm mund\u00ebsi themelore, t\u00eb shtuara mbi Envoy. N\u00ebse ka k\u00ebrkesa p\u00ebr pranin\u00eb\/integrimin e WAF para aplikacionit, vlen t\u00eb shqyrtoni Ingress nga Kubernetes ose HAProxy.<\/p>\n<p>Produktet m\u00eb t\u00eb pasura me funksione jan\u00eb ato t\u00eb nd\u00ebrtuara mbi baz\u00ebn e Envoy, ve\u00e7an\u00ebrisht Istio. Ai paraqitet si nj\u00eb zgjidhje komplekse, q\u00eb \"mund gjith\u00e7ka\", q\u00eb, megjithat\u00eb, do t\u00eb thot\u00eb gjithashtu nj\u00eb prag shum\u00eb m\u00eb t\u00eb lart\u00eb p\u00ebr konfigurimin\/lansimin\/administrimin sesa zgjidhjet e tjera.<\/p>\n<p>P\u00ebr standardin ton\u00eb t\u00eb kontrolluesit, ne zgjodh\u00ebm dhe ende p\u00ebrdorim Ingress nga Kubernetes, i cili mbulon 80-90% t\u00eb nevojave. Ai \u00ebsht\u00eb mjaft i besuesh\u00ebm, leht\u00ebsisht i konfiguruesh\u00ebm dhe i zgjeruesh\u00ebm. N\u00eb p\u00ebrgjith\u00ebsi, n\u00eb munges\u00eb t\u00eb k\u00ebrkesave specifike, ai duhet t\u00eb jet\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr shumic\u00ebn e grupeve\/aplikacioneve. Midis produkteve t\u00eb tjera universale dhe relativisht t\u00eb thjeshta, mund t\u00eb rekomandojm\u00eb Traefik dhe HAProxy.<\/p>\n<h2>P.S.<\/h2>\n<p>\nLexoni gjithashtu n\u00eb blogun ton\u00eb:<\/p>\n<ul>\n<li> \"Kthehu n\u00eb mikrosh\u00ebrbime me Istio\": <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/438426\/\">pjesa 1 (takimi me mund\u00ebsit\u00eb kryesore)<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/440378\/\">pjesa 2 (ruk\u00ebtim, menaxhimi i trafikut)<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/443668\/\">pjesa 3 (autentifikimi dhe autorizimi)<\/a><\/noindex>;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/445596\/\">K\u00ebshilla dhe truket Kubernetes: faqet e personalizuara t\u00eb gabimeve n\u00eb NGINX Ingress<\/a><\/noindex>\u00bb;<\/li>\n<li> \u00ab<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/427745\/\">K\u00ebshilla dhe truk p\u00ebr Kubernetes: akses n\u00eb platformat dev<\/a><\/noindex>\u00bb.<\/li>\n<\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/flant\/blog\/447180\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c, \u043a\u0430\u043a\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u044d\u0442\u043e\u043c\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441\u0430\u043c\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0431\u0438\u0437\u043d\u0435\u0441 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u044d\u0442\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u043a \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044e \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043a \u0432\u044b\u0431\u043e\u0440\u0443 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e Ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430, \u043a\u043e\u0438\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0436\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23140,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Ingress \u0434\u043b\u044f Kubernetes | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrmbledhje dhe krahasim i kontrolluesve Ingress p\u00ebr Kubernetes | ProHoster","description":"Kur filloni nj\u00eb grup Kubernetes p\u00ebr.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Ingress \u0434\u043b\u044f Kubernetes | ProHoster","og:description":"\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Kubernetes \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/obzor-i-sravnenie-kontrollerov-ingress-dlya-kubernetes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:53+00:00","article:modified_time":"2019-10-31T18:39:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 04:53:04","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:21:32","updated":"2026-01-21 04:53:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31173"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/23140"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}