Kubernetes Proxy: Envoy vs NGINX vs HA Proxy


Having spent quite some time with Linux and Kubernetes admins, I've come to realize that networking isn't one of their strong sides. Being a network guy myself, I feel obliged to share my views on topics as important as this one. So, which proxy should you use in your Kubernetes cluster?

Lets start with some facts:
  • All three of these proxies are highly reliable, L7, proven proxies, with Envoy being the newest kid on the block.
  • All these proxies do an outstanding job of routing traffic L7 reliably and efficiently, with a minimum of fuss.
  • There is no full parity of features, but you can implement any critical missing features in the proxy itself… the power of open source!





To keep the post structure, just a few lines about each of these 3 Proxies:
  • HA Proxy is the default Load Balancer when it comes to Kubernetes. It was initially released in 2006, when the Internet operated very differently than today, ergo… there's an issue of slow adoption of new features. This is very serious when you consider SECURITY, like support for last SSL/TLS versions.
  • NGINX is a high-performance web server, FASTER and more modern then HA Proxy Load Balancer, WAF and so many other things… and if you check out the SDN integrations (Cisco ACI, VMware NSX, Nokia Nuage), these are all based on open source version of NGINX. NGINX open source has a number of limitations, including limited observability and health checks, so it comes down to what you're looking for. If you want an enterprise product, depending on your company environment - go with NGINX Plus, ACI or NSX (be sure to ask for -T).
  • Envoy Proxy is new… so not very mature, BUT - most modern, and used in production in Apple, Google among others. Envoy was designed from the ground up for microservices, with features such as hitless reloads, resilience, and advanced load balancing, plus - and exposing dynamic APIs for configuration. THIS is a big deal, in the world where proxies have been configured using static configuration files (Envoy also supports static config, of course). And lets not forget that Istio Service Mesh, which I'm a big fan and contributor of, uses an extended version of the Envoy proxy.

7 comments:

  1. I think a lot of people may think of hiring an agency that provides web hosting services but it is advisable if they at least know the first thing about web hosting so it will be easier. Thanks for the info.

    ReplyDelete
  2. Very informative and impressive post you have written, this is quite interesting and i have went through it completely, an upgraded information is shared, keep sharing such valuable information.
    Learn Computer Networking

    ReplyDelete
  3. Having an assignment due tomorrow and understand you can’t do it yourself? But you’re afraid of delegating your paper to some scam services as well? Why not check https://scamfighter.net/review/essaypro.com on Scamfighter.net

    ReplyDelete
  4. Thank you for this post. This is very interesting information for me. If you are looking for an academic writing assistance, check this review https://www.writingpapersucks.com/paperhelp-org-review/ and choose the best service for you.

    ReplyDelete
  5. Such a great blog – bright and informative. Thank you for your opinion and helpful articles. https://speedypaper.com/discounts

    ReplyDelete
  6. This is one of the great benefits of installing cameras that we can't help but mention. Security camera devices will help you capture all business activities and contribute to creating a safe environment. This has been proven through many trials and people are less inclined to do something reckless when around being equipped with security. In particular, your employees know that they are in a protected area and also feel safer.

    Provide security footage

    Think about it, your work is too busy, you hurry to leave the car under the agency, running up to the office to get the papers. However, when running down, I didn't see the car. And luckily, a nearby surveillance camera determined that your car was alerted to another position. In addition, stored security footage will help you solve many problems that you cannot predict.
    Lắp đặt camera quan sát tại quận gò vấp

    ReplyDelete

Most Popular Posts