Contour: Envoy-Powered Ingress for Kubernetes

Shriira Press

Preface

The front door to your cluster. Route, secure, and manage external traffic with Contour — an Envoy-based Kubernetes ingress controller.

Welcome to Contour: Envoy-Powered Ingress for Kubernetes.

Contour is an ingress controller for Kubernetes — a control plane that programs the high-performance Envoy proxy to route external traffic to services inside your cluster. This free book teaches it from the ground up: the ingress problem and what Contour is, the Kubernetes Ingress resource and its limitations, Contour's architecture (the control-plane/data-plane split, Contour configuring Envoy via xDS), getting traffic in (load balancers, the request path), HTTPProxy (Contour's richer, validated, delegation-capable resource), routing and load balancing (host/path/header conditions, strategies, health checks), TLS and secure traffic (termination, cert-manager, mTLS), advanced traffic management (canary traffic splitting, timeouts, retries, rate limiting), the Gateway API and its role-oriented model, and operating Contour in practice. Ten focused chapters with clear diagrams that demystify how external traffic gets into a Kubernetes cluster — routed, secured, and managed — through an Envoy-powered ingress gateway.

This title is part of the ShriIra library and is free to read in full, right here — our small contribution to making world-class knowledge easy to reach.

A note on reading it: open the Contents menu at the top of the reader to jump between chapters, use the Aa menu to set a comfortable text size, theme (light, sepia, or night), and single- or two-page layout. Your place is saved automatically, so you can always pick up where you left off.

We hope it serves you well.

— Shriira Press

Contents

  1. Chapter 1 — What Contour Is
  2. Chapter 2 — The Ingress Problem and the Ingress Resource
  3. Chapter 3 — Contour's Architecture
  4. Chapter 4 — Getting Traffic In
  5. Chapter 5 — HTTPProxy: Contour's Richer Resource
  6. Chapter 6 — Routing and Load Balancing
  7. Chapter 7 — TLS and Secure Traffic
  8. Chapter 8 — Advanced Traffic Management
  9. Chapter 9 — The Gateway API and Roles
  10. Chapter 10 — Operating Contour in Practice
0%
1/1