mirror of
https://github.com/alibaba/higress.git
synced 2026-02-28 14:40:50 +08:00
85 lines
2.8 KiB
Markdown
85 lines
2.8 KiB
Markdown
<h1 align="center">
|
||
<img src="https://img.alicdn.com/imgextra/i2/O1CN01NwxLDd20nxfGBjxmZ_!!6000000006895-2-tps-960-290.png" alt="Higress" width="240" height="72.5">
|
||
<br>
|
||
Next-generation Cloud Native Gateway
|
||
</h1>
|
||
|
||
Higress is a next-generation cloud-native gateway based on Alibaba's internal gateway practices.
|
||
|
||
Powered by [Istio](https://github.com/istio/istio) and [Envoy](https://github.com/envoyproxy/envoy), Higress realizes the integration of the triple gateway architecture of traffic gateway, microservice gateway and security gateway, thereby greatly reducing the costs of deployment, operation and maintenance.
|
||
|
||
<BR><center><img src="https://img.alicdn.com/imgextra/i4/O1CN01dqXHDi27RhjAtZyNp_!!6000000007794-0-tps-1794-1446.jpg" alt="Higress Architecture"></center>
|
||
|
||
## Summary
|
||
|
||
- [**Use Cases**](#use-cases)
|
||
- [**Higress Features**](#higress-features)
|
||
- [**Quick Start**](#quick-start)
|
||
|
||
## Use Cases
|
||
|
||
- **Kubernetes ingress controller**:
|
||
|
||
Higress can function as a feature-rich ingress controller, which is compatible with many annotations of K8s' nginx ingress controller.
|
||
|
||
[Gateway API](https://gateway-api.sigs.k8s.io/) support is in progress and will support smooth migration from Ingress API to Gateway API.
|
||
|
||
- **Microservice gateway**:
|
||
|
||
Higress can function as a microservice gateway, which can discovery microservices from various service registries, such as Nacos, ZooKeeper, Consul, etc.
|
||
|
||
It deeply integrates of [Dubbo](https://github.com/apache/dubbo), [Nacos](https://github.com/alibaba/nacos), [Sentinel](https://github.com/alibaba/Sentinel) and other microservice technology stacks.
|
||
|
||
- **Security gateway**:
|
||
|
||
Higress can be used as a security gateway, supporting WAF and various authentication strategies, such as key-auth, hmac-auth, jwt-auth, basic-auth, oidc, etc.
|
||
|
||
|
||
## Higress Features
|
||
|
||
（TODO）
|
||
|
||
## Quick Start
|
||
|
||
### step 1. install istio
|
||
|
||
select higress istio:
|
||
```bash
|
||
helm install istio -n istio-system oci://higress-registry.cn-hangzhou.cr.aliyuncs.com/charts/istio
|
||
```
|
||
|
||
or select official istio (lose some abilities, such as using annotation to limit request rate):
|
||
https://istio.io/latest/docs/setup/install
|
||
|
||
### step 2. install higress
|
||
|
||
```bash
|
||
helm install higress -n higress-system oci://higress-registry.cn-hangzhou.cr.aliyuncs.com/charts/higress
|
||
```
|
||
|
||
### step 3. create an ingress and test it
|
||
|
||
```yaml
|
||
apiVersion: networking.k8s.io/v1
|
||
kind: Ingress
|
||
metadata:
|
||
name: simple-example
|
||
spec:
|
||
rules:
|
||
- host: foo.bar.com
|
||
http:
|
||
paths:
|
||
- path: /foo
|
||
pathType: Prefix
|
||
backend:
|
||
service:
|
||
name: test
|
||
port:
|
||
number: 80
|
||
```
|
||
|
||
```bash
|
||
curl "$(k get svc -n higress-system higress-gateway -o jsonpath='{.status.loadBalancer.ingress[0].ip}')"/foo -H 'host: foo.bar.com'
|
||
```
|
||
|