Kubernetes Proxy: Envoy vs NGINX vs HA Proxy


Having spent quite some time with Linux and Kubernetes admins, I've come to realize that networking isn't one of their strong sides. Being a network guy myself, I feel obliged to share my views on topics as important as this one. So, which proxy should you use in your Kubernetes cluster?

Lets start with some facts:
  • All three of these proxies are highly reliable, L7, proven proxies, with Envoy being the newest kid on the block.
  • All these proxies do an outstanding job of routing traffic L7 reliably and efficiently, with a minimum of fuss.
  • There is no full parity of features, but you can implement any critical missing features in the proxy itself… the power of open source!





To keep the post structure, just a few lines about each of these 3 Proxies:
  • HA Proxy is the default Load Balancer when it comes to Kubernetes. It was initially released in 2006, when the Internet operated very differently than today, ergo… there's an issue of slow adoption of new features. This is very serious when you consider SECURITY, like support for last SSL/TLS versions.
  • NGINX is a high-performance web server, FASTER and more modern then HA Proxy Load Balancer, WAF and so many other things… and if you check out the SDN integrations (Cisco ACI, VMware NSX, Nokia Nuage), these are all based on open source version of NGINX. NGINX open source has a number of limitations, including limited observability and health checks, so it comes down to what you're looking for. If you want an enterprise product, depending on your company environment - go with NGINX Plus, ACI or NSX (be sure to ask for -T).
  • Envoy Proxy is new… so not very mature, BUT - most modern, and used in production in Apple, Google among others. Envoy was designed from the ground up for microservices, with features such as hitless reloads, resilience, and advanced load balancing, plus - and exposing dynamic APIs for configuration. THIS is a big deal, in the world where proxies have been configured using static configuration files (Envoy also supports static config, of course). And lets not forget that Istio Service Mesh, which I'm a big fan and contributor of, uses an extended version of the Envoy proxy.

16 comments:

  1. I think a lot of people may think of hiring an agency that provides web hosting services but it is advisable if they at least know the first thing about web hosting so it will be easier. Thanks for the info.

    ReplyDelete
  2. Very informative and impressive post you have written, this is quite interesting and i have went through it completely, an upgraded information is shared, keep sharing such valuable information.
    Learn Computer Networking

    ReplyDelete
  3. Having an assignment due tomorrow and understand you can’t do it yourself? But you’re afraid of delegating your paper to some scam services as well? Why not check https://scamfighter.net/review/essaypro.com on Scamfighter.net

    ReplyDelete
  4. Thank you for this post. This is very interesting information for me. If you are looking for an academic writing assistance, check this review https://www.writingpapersucks.com/paperhelp-org-review/ and choose the best service for you.

    ReplyDelete
  5. Such a great blog – bright and informative. Thank you for your opinion and helpful articles. https://speedypaper.com/discounts

    ReplyDelete
  6. This is one of the great benefits of installing cameras that we can't help but mention. Security camera devices will help you capture all business activities and contribute to creating a safe environment. This has been proven through many trials and people are less inclined to do something reckless when around being equipped with security. In particular, your employees know that they are in a protected area and also feel safer.

    Provide security footage

    Think about it, your work is too busy, you hurry to leave the car under the agency, running up to the office to get the papers. However, when running down, I didn't see the car. And luckily, a nearby surveillance camera determined that your car was alerted to another position. In addition, stored security footage will help you solve many problems that you cannot predict.
    Lắp đặt camera quan sát tại quận gò vấp

    ReplyDelete
  7. If you're looking for a date but not sure whether the dating site is a safe place, check our https://wizzlove.com/reviews/asiame-review review.

    ReplyDelete
  8. Thank you for the informative post about Security challenges in AWS , Found it useful . cloud migration services have now become secured and with no-risk

    Cloud Migration services

    Aws Cloud Migration services

    Azure Cloud Migration services

    ReplyDelete
  9. I have gone through your post and I found it very helpfull. Looking forward to see more post from you.

    Vmware Cloud Migration services

    Database Migration services

    ReplyDelete
  10. I am really impressed with the way of writing of this blog. The author has shared the info in a crisp and short way.

    Lia Infraservices

    ReplyDelete
  11. We are a part of the success story for many of our customer's successful cloud Migrations.

    Cloud Migration services


    Best Cloud Migration Tool

    ReplyDelete
  12. Thank you for your own hard work on this web site. Gloria take interest in managing investigation and it is obvious why. We know all regarding the compelling method you deliver simple tips and tricks on the website and in addition cause response from the others about this content then my simple princess is really learning a lot of things. Take advantage of the remaining portion of the new year. You're the one doing a fabulous job. web design Sydney

    ReplyDelete

Most Popular Posts