Apache APISIX: How to implement plugin orchestration in API Gateway wenming@apache.org Apache APISIX VP Ming Wen 温铭 • Co-founder @ api7.ai • VP and PMC member, Apache APISIX • committer, Apache TARS Foundation • More than 40 security patents Agenda • Introduction to Apache APISIX • Custom plugin development in API Gateway • Generate APISIX plugins automatically • The future of API Gateway services • k8s ingress controller • Use MQTT plugin as IoT gateway • Use IdP plugin as Zero-Trust gateway Technology Architecture Custom plugin development in API Gateway Difficulties of gateway

storing strong keys, etc). 1.3 Kubernetes Functionalities At bare minimum, any container orchestration platform needs the ability to run and schedule containers. But to manage containers effectively Kubernetes provides cluster management for containerized workloads and simplifies container orchestration at scale. In this chapter, we looked at Kubernetes terminologies, and how Kubernetes can help includes commercially-supported distributions of Kubernetes, Mesos, and Docker Swarm for container orchestration, and allows teams to transparently view and manage the infrastructure and containers supporting

can use containers with the departments that are focused on software development. Kubernetes orchestration provides capabilities such as auto scaling, security, and management of containerized applications SUSE Rancher Kubernetes Engine and managing the cluster using SUSE Rancher as the container orchestration layer on Dell EMC PowerFlex platform to meet the performance, scalability, resiliency, and availability storage services. The software components help to simplify the infrastructure management and orchestration with comprehensive IT Operations Management (ITOM) and life cycle management (LCM) capabilities

data plane components. This centralized architecture facilitates virtual network abstraction, orchestration, and automation. Network configuration plane The network configuration plane interacts with the workloads reside in the worker nodes in the distributed workload clusters. The Contrail CNI plugin and vRouter sit in the worker nodes of the workload clusters. The Kubernetes control plane in the manage custom Kubernetes clusters with a wide range of features that simplify the deployment, orchestration, and scaling of containerized applications. With Rancher, users can easily manage multiple Kubernetes

rest of the boat? Upcoming Talks: Aperture - Load Management Meshery - WASM plugin management Argo - Multi-cluster orchestration JP Morgan SLO Generation Reflecting on the Value of Community Housekeeping

(CSI) is a standard API allowing a storage provider to write just one plugin that will work for all major container orchestration systems: Kubernetes, Mesos, Docker and Cloud Foundry. Cluster API provider

solution for Spark l Future works Why Spark on Kubernetes Kubernetes extends beyond container orchestration, it has been expanded to support for data-intensive and stateful apps. Benefit: l Autoscaling task-topology to improve the spark workload efficiency. Summary p Queue priority p Queue reclaim p Queue plugin p Hierarchical queue p Dynamic resource allocation p External shuffle service p Resource reservation

定期轮询数据库，一般需要 5 秒才能获取到最新配置 • 只有 Apache APISIX 开放了自定义负载均衡的挂载点，其他网关都不支持 独创的插件编排/低代码 API 网关 Plugin Orchestration • Kong：支持 Go 编写的插件 • Envoy：支持 Lua、WASM 编写的 filter • Apache APISIX：为什么要“写”插件？ops、PM 也可以直接创造一个插件

support in clusters cellar-webconsole | 3.0.3 | | karaf-cellar-3.0.3 | Cellar plugin for Karaf WebConsole karaf@root()> feature:install cellar karaf@root()> la|grep -i cellar 80 | updated and the instance restarted. 11.1.3. Kubernetes & docker.io Kubernetes is an open source orchestration system for docker.io containers. It handles scheduling onto nodes in a compute cluster and actively

components (Medium) DAP-01-011 WP2: HTTP Parameter Pollution in Hashicorp secret vault (Low) Orchestration Hardening Network Policy Zero-Trust Concepts RBAC Secrets Management Conclusions Cure53 configuration and deployment choices of the developers - and eventually the operators, a section on Orchestration Hardening was included, detailing some general approaches to improving the security of a Dapr Bielefelder Str. 14 D 10709 Berlin cure53.de · mario@cure53.de Orchestration Hardening Network Policy In order to widen the usage of defense-in-depth concepts, it is recommended