As organizations deploy production-grade Kubernetes across hybrid, multi-cloud environments, they recognize the need to streamline the processes used by their diverse development and operations teams to establish and manage connectivity to Kubernetes services and applications for external clients and within clusters. In this session, Brian Ehlert, Director of Product Management for NGINX, discusses the history of Kubernetes networking along with the latest developments and trends, and offers a glimpse into the future around providing client access to the applications in a shared, multi-tenant Kubernetes environment. Speakers: Brian Ehlert

1. The Future of Kubernetes
Connectivity
Brian Ehlert
Director, Product Management, NGINX Kubernetes Solutions

2. ©2022 F5
2
Ingress Controller
Authentication/
SSO/OIDC
SSL/TLS
termination
A/B testing
Blue-green
deployments
Backend pod
health checks
Rate limiting
Monitoring
and visibility
Custom error
handling
Request / response
manipulation
Path-based
routing
Traffic
management
Load balancing
API Gateway

3. ©2022 F5
3
Ingress API and Custom Resources
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: webapp
spec:
ingressClassName: nginx
rules:
- host: webapp.example.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: webappp
port:
number: 80
apiVersion: k8s.nginx.org/v1
kind: VirtualServer
metadata:
name: webapp
spec:
host: webapp.example.com
tls:
secret: webapp-secret
upstreams:
- name: webapp
service: webapp
port: 80
routes:
- path: /
action:
pass: webapp
Ingress API:
Limited capabilities and extensibility
(Community NGINX Ingress Controller)
Custom Resources:
Vendor-specific extensions of capabilities
(NGINX Ingress Controller by F5)

4. ©2022 F5
4
NGINX Ingress Custom Resources
Host
TLS
Upstreams
Routes
- Path
Action
Split
Match
Route
ErrorPage
pass
redirect
return
proxy
delegation
optional
Host
TLS
Upstreams
Routes
- Path
Action
Split
Match
Route
ErrorPage
pass
redirect
return
proxy
delegation
optional
Host
TLS
Policies
Upstreams
Routes
- Path
Policies
Action
Split
Match
Route
ErrorPage
pass
redirect
return
proxy
delegation
VirtualServer
pass
redirect
return
proxy
pass
redirect
return
proxy
Host
Upstreams
Subroutes
- Path
Policies
Action
Split
Match
ErrorPage
pass
redirect
return
proxy
VirtualServerRoute
NGINX server configuration
NGINX http configuration
Server and HTTP snippets
NGINX location configuration
Location snippets
Policies
Access Control
Rate Limiting
Auth (JWT, OIDC)
MTLS (Ingress/Egress)
App Protect WAF
Security
team
Development
team
Platform
Operations
team

5. ©2022 F5
5
NGINX Kubernetes Gateway – Role-oriented API

6. ©2022 F5
6
ü Gateway API Beta released
ü NGINX Kubernetes Gateway Beta released
Ø Let’s shape and build the future of Kubernetes
connectivity together!
Ø Contribute to the project
Ø Try the implementation in your lab
Ø Test and provide feedback
Gateway API Journey
Continues…
https://github.com/nginxinc/nginx-kubernetes-gateway

7. Thank you!

8. The Future of Kubernetes
Connectivity
Brian Ehlert
Director, Product Management, NGINX Kubernetes Solutions

9. ©2022 F5
9
NGINX Ingress Custom Resources – Role-oriented
NetOps DevOps-FE
DevOps-NG
Identity
DevSecOps