Tengine-Ingress

Visit tengine.taobao.org for the full documentation, examples and guides.

Overview

Tengine-Ingress is an Ingress controller for Kubernetes using Tengine as a reverse proxy and load balancer. Tengine-Ingress supports the standard Ingress specification based on kubernetes/ingress-nginx repo.

Features

• Ingress specification support.
• Dynamically configure the servers, locations and upstreams for Ingress, Secret, Service and Endpoint changes, without reloading or restarting worker processes.
• HTTP/3 support (QUIC v1 and draft-29).
• Dynamically configure different TLS protocols for different ingress.
• Dynamically configure multiple default TLS certificates for client-hello without SNI.
• Support for hybrid ECC and RSA certificates for the same ingress/path.
• Dynamically configure certificates and keys.
• Dynamically configure canary routing based on multiple values of a specific header, cookie or query parameter.
• Dynamically configure canary routing based on multiple upstream according to weight.
• Dynamically configure canary routing based on modulo operation for a specific header, cookie or query parameter.
• Dynamically configure timeout setting, SSL Redirects, CORS and enabling/disabling robots for the ingress/path.
• Dynamically configure canary routing to add/append custom headers or add query parameter to the HTTP request.
• Dynamically configure canary routing to add custom headers to the HTTP response.
• Supports watching Ingress and Secrets in a dedicated storage k8s cluster via kubeconfig.
• Watch changes in Ingress and Secrets and do rolling upgrades for associated StatefulSet of Tengine-Ingress, without tengine reload.
• New CRD IngressCheckSum and SecretCheckSum to verify the integrity of Ingress and Secret in the cluster.

Installation

Docker images

Supported linux distributions:

• Anolis
• Alpine

Supported tags:

• 1.1.0 : based on image Anolis
• 1.1.0-alpine : based on image Alpine

Supported architectures:

• AMD64, ARM64

Pull image command:

docker pull tengine-ingress-registry.cn-hangzhou.cr.aliyuncs.com/tengine/tengine-ingress:1.1.0

Building from source

The tengine-ingress image is based on the tengine image.

Supported Linux distributions:

• Anolis : build arg BASE_IMAGE="docker.io/openanolis/anolisos:latest", LINUX_RELEASE="anolisos"
• Alpine : build arg BASE_IMAGE="alpine:latest", LINUX_RELEASE="alpine"

Build image command:

# First: build tengine image
docker build --no-cache --build-arg BASE_IMAGE="docker.io/openanolis/anolisos:latest" --build-arg LINUX_RELEASE="anolisos" -t tengine:3.1.0 images/tengine/rootfs/

# Second: build tengine-ingress image
docker build --no-cache --build-arg BASE_IMAGE="tengine:3.1.0" --build-arg VERSION="1.1.0" -f build/Dockerfile -t tengine-ingress:1.1.0 .

Changelog

See the list of releases to find out about feature changes. For detailed changes for each release; please check the Changelog.tengine.md file.

Supported Versions table

Documentation

The homepage of Tengine-Ingress is at https://tengine.taobao.org.

Contact

https://github.com/alibaba/tengine-ingress/issues

Dingtalk user group: 23394285

License

Apache License 2.0