You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "SalvaChiLlo (via GitHub)" <gi...@apache.org> on 2023/12/01 08:31:21 UTC
[I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
SalvaChiLlo opened a new issue, #10581:
URL: https://github.com/apache/apisix/issues/10581
### Description
Hello, I am reviewing APISIX as an Ingress alternative for our Kubernetes solution.
As I understood from the documentation, APISIX relies on an ETCD cluster for its operation.
Here, some questions come to my mind:
1. Knowing that I can use an external ETCD cluster, is it a good idea to use the one Kubernetes already uses under the hood? This question is more about APISIX's requirements on the ETCD cluster, as ETCD can only group up to a few gigabytes. What is the amount of data I can expect APISIX to produce? Do you have some concrete numbers?
2. Who uses this ETCD, and how?
** I'll not provide any environment details as I'm just evaluating/trying to understand how APISIX works
### Environment
- APISIX version (run `apisix version`):
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "shreemaan-abhishek (via GitHub)" <gi...@apache.org>.
shreemaan-abhishek commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1851364419
I will close this issue now, feel free to reopen if you have more questions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "SalvaChiLlo (via GitHub)" <gi...@apache.org>.
SalvaChiLlo commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1853771803
I have an extra question when using mTLS. From what I've seen, it gets configured for the whole domain(SNI).
```
'{
"sni": "test.com",
"cert": "<content of server.cer>",
"key": "<content of server.key>",
"client": {
"ca": "<content of ca.cer>"
}
}'
```
Is it possible to enable mTLS just in certain subpaths?
Let's say I have example.com, and I want:
- `https://example.com/public` -> to just have TLS
- `https://example.com/private` -> Authenticate via certificate (mTLS)
Is that possible? If so, how should that be configured?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "SalvaChiLlo (via GitHub)" <gi...@apache.org>.
SalvaChiLlo commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1849479004
Also, what differentiates Kubernetes configurations from APISIX ones? As far as I understand, the ingress controller should use the Kubernetes definitions to make everything work, isn't it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1838070481
1. ETCD is used to store Configurations only. Don't store everything inside ETCD. For example, if we have a lot of user information, we should store User information in databases (PG, Redis, or even an API to fetch), and use custom plugin to integrate with them.
2. We suggest using APISIX inside Kubernetes with APISIX Ingress Controller. However, in the previous design (before 1.7.0), it has to work with additional ETCD. After 1.7.0, we have supported to run APISIX without ETCD (in beta).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1851152559
> Do you have any documentation on how to run APISIX without ETCD?
APISIX supports `standalone` mode.
> As far as I understand, the ingress controller should use the Kubernetes definitions to make everything work, isn't it?
There has one project called `APISIX Ingress Controller`, after 1.7.0+, it supports running without ETCD anymore.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "SalvaChiLlo (via GitHub)" <gi...@apache.org>.
SalvaChiLlo commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1849475087
Do you have any documentation on how to run APISIX without ETCD?
By just not providing an ETCD connection it should work?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "shreemaan-abhishek (via GitHub)" <gi...@apache.org>.
shreemaan-abhishek commented on issue #10581:
URL: https://github.com/apache/apisix/issues/10581#issuecomment-1836178544
@juzhiyuan any insights here?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress [apisix]
Posted by "shreemaan-abhishek (via GitHub)" <gi...@apache.org>.
shreemaan-abhishek closed issue #10581: help request: Requirements of the ETCD cluster when using APISIX as Kubernetes Ingress
URL: https://github.com/apache/apisix/issues/10581
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org