Skupper container ingresses

fgiorgetti · Mar 25, 2024 · a93f269 · a93f269
1 parent 08f9caf
commit a93f269
Show file tree

Hide file tree

Showing 47 changed files with 2,406 additions and 71 deletions.
diff --git a/index.xml b/index.xml
@@ -6,13 +6,13 @@
         <generator>Hugo -- gohugo.io</generator>
         <language>en-us</language>
         <copyright>Fernando Giorgetti</copyright>
-        <lastBuildDate>Wed, 20 Mar 2024 09:14:27 -0300</lastBuildDate>
+        <lastBuildDate>Fri, 22 Mar 2024 16:19:33 -0300</lastBuildDate>
         <atom:link href="https://fgiorgetti.github.io/index.xml" rel="self" type="application/rss+xml" />
 
         <item>
             <title>Posts</title>
             <link>https://fgiorgetti.github.io/posts/</link>
-            <pubDate>Wed, 20 Mar 2024 09:14:27 -0300</pubDate>
+            <pubDate>Fri, 22 Mar 2024 16:19:33 -0300</pubDate>
 
             <guid>https://fgiorgetti.github.io/posts/</guid>
             <description></description>

diff --git a/posts/20240320-router-with-compose/index.html b/posts/20240320-router-with-compose/index.html
@@ -260,6 +260,13 @@ <h1 class="post-title">
 
         <div class="pagination__buttons">
 
+            <span class="button previous">
+                <a href="https://fgiorgetti.github.io/posts/20240322-skupper-podman-ingresses/">
+                    <span class="button__icon">←</span>
+                    <span class="button__text">Skupper service ingress through containers</span>
+                </a>
+            </span>
+
 
 
             <span class="button next">

diff --git a/posts/20240322-skupper-podman-ingresses/images/scenario.png b/posts/20240322-skupper-podman-ingresses/images/scenario.png
diff --git a/posts/20240322-skupper-podman-ingresses/index.html b/posts/20240322-skupper-podman-ingresses/index.html
diff --git a/posts/20240322-skupper-podman-ingresses/resources/edgerouter.tar.gz b/posts/20240322-skupper-podman-ingresses/resources/edgerouter.tar.gz
diff --git a/posts/20240322-skupper-podman-ingresses/resources/edgerouter/compose.yaml b/posts/20240322-skupper-podman-ingresses/resources/edgerouter/compose.yaml
@@ -0,0 +1,30 @@
+name: sample
+services:
+  skupper-router:
+    image: quay.io/skupper/skupper-router:main
+    volumes:
+      - ./config:/etc/skupper-router/config:z
+    environment:
+      QDROUTERD_CONF: "/etc/skupper-router/config/skrouterd.json"
+      QDROUTERD_CONF_TYPE: "json"
+    extra_hosts:
+      - host.docker.internal:host-gateway
+    network_mode: host
+  my-service:
+    container_name: my-service
+    image: quay.io/skupper/skupper-router:main
+    volumes:
+      - ./config-proxy:/etc/skupper-router/config:z
+    environment:
+      QDROUTERD_CONF: "/etc/skupper-router/config/skrouterd.json"
+      QDROUTERD_CONF_TYPE: "json"
+    extra_hosts:
+      - host.docker.internal:host-gateway
+    networks:
+      - sample1
+  my-service-workload:
+    image: nginxinc/nginx-unprivileged:stable-alpine
+    ports:
+      - 8888:8080
+networks:
+  sample1:
diff --git a/posts/20240322-skupper-podman-ingresses/resources/edgerouter/config-proxy/skrouterd.json b/posts/20240322-skupper-podman-ingresses/resources/edgerouter/config-proxy/skrouterd.json
@@ -0,0 +1,41 @@
+[
+    [
+        "router",
+        {
+            "id": "my-service",
+            "mode": "edge",
+            "helloMaxAgeSeconds": "3"
+        }
+    ],
+    [
+        "connector",
+        {
+            "host": "host.docker.internal",
+            "port": 45671,
+            "role": "edge"
+        }
+    ],
+    [
+        "tcpListener",
+        {
+            "name": "my-service:8080",
+            "port": 8080,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "address",
+        {
+            "prefix": "mc",
+            "distribution": "multicast"
+        }
+    ],
+    [
+        "log",
+        {
+            "module": "ROUTER_CORE",
+            "enable": "error+"
+        }
+    ]
+]
+
diff --git a/posts/20240322-skupper-podman-ingresses/resources/edgerouter/config/skrouterd.json b/posts/20240322-skupper-podman-ingresses/resources/edgerouter/config/skrouterd.json
@@ -0,0 +1,61 @@
+[
+    [
+        "router",
+        {
+            "id": "east",
+            "mode": "interior",
+            "helloMaxAgeSeconds": "3"
+        }
+    ],
+    [
+        "listener",
+        {
+            "name": "edges",
+            "host": "0.0.0.0",
+            "port": 45671,
+            "role": "edge"
+        }
+    ],
+    [
+        "listener",
+        {
+            "name": "mesh-of-edges",
+            "host": "0.0.0.0",
+            "port": 35671,
+            "role": "inter-edge"
+        }
+    ],
+    [
+        "tcpListener",
+        {
+            "name": "my-service:8080@0.0.0.0:8080",
+            "host": "0.0.0.0",
+            "port": 8080,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "tcpConnector",
+        {
+            "name": "my-service:8080-to-localhost:8888",
+            "host": "localhost",
+            "port": 8888,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "address",
+        {
+            "prefix": "mc",
+            "distribution": "multicast"
+        }
+    ],
+    [
+        "log",
+        {
+            "module": "ROUTER_CORE",
+            "enable": "error+"
+        }
+    ]
+]
+
diff --git a/posts/20240322-skupper-podman-ingresses/resources/haproxy.tar.gz b/posts/20240322-skupper-podman-ingresses/resources/haproxy.tar.gz
diff --git a/posts/20240322-skupper-podman-ingresses/resources/haproxy/compose.yaml b/posts/20240322-skupper-podman-ingresses/resources/haproxy/compose.yaml
@@ -0,0 +1,24 @@
+name: sample
+services:
+  skupper-router:
+    image: quay.io/skupper/skupper-router:main
+    volumes:
+      - ./config:/etc/skupper-router/config:z
+    environment:
+      QDROUTERD_CONF: "/etc/skupper-router/config/skrouterd.json"
+      QDROUTERD_CONF_TYPE: "json"
+    network_mode: host
+  my-service:
+    image: quay.io/fgiorgetti/skupper-service-proxy
+    environment:
+      PORT_MAPPING: "8080:host.docker.internal:8080"
+    networks:
+      - sample1
+    extra_hosts:
+      - host.docker.internal:host-gateway
+  my-service-workload:
+    image: nginxinc/nginx-unprivileged:stable-alpine
+    ports:
+      - 8888:8080
+networks:
+  sample1:
diff --git a/posts/20240322-skupper-podman-ingresses/resources/haproxy/config/skrouterd.json b/posts/20240322-skupper-podman-ingresses/resources/haproxy/config/skrouterd.json
@@ -0,0 +1,43 @@
+[
+    [
+        "router",
+        {
+            "id": "east",
+            "mode": "interior",
+            "helloMaxAgeSeconds": "3"
+        }
+    ],
+    [
+        "tcpListener",
+        {
+            "name": "my-service:8080@0.0.0.0:8080",
+            "host": "0.0.0.0",
+            "port": 8080,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "tcpConnector",
+        {
+            "name": "my-service:8080-to-localhost:8888",
+            "host": "localhost",
+            "port": 8888,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "address",
+        {
+            "prefix": "mc",
+            "distribution": "multicast"
+        }
+    ],
+    [
+        "log",
+        {
+            "module": "ROUTER_CORE",
+            "enable": "error+"
+        }
+    ]
+]
+
diff --git a/posts/20240322-skupper-podman-ingresses/resources/netfilter.tar.gz b/posts/20240322-skupper-podman-ingresses/resources/netfilter.tar.gz
diff --git a/posts/20240322-skupper-podman-ingresses/resources/netfilter/compose.yaml b/posts/20240322-skupper-podman-ingresses/resources/netfilter/compose.yaml
@@ -0,0 +1,27 @@
+name: sample
+services:
+  skupper-router:
+    image: quay.io/skupper/skupper-router:main
+    volumes:
+      - ./config:/etc/skupper-router/config:z
+    environment:
+      QDROUTERD_CONF: "/etc/skupper-router/config/skrouterd.json"
+      QDROUTERD_CONF_TYPE: "json"
+    network_mode: host
+  my-service:
+    image: quay.io/fgiorgetti/skupper-firewall-proxy
+    environment:
+      PORT_MAPPING: "8080:host.docker.internal:8080"
+    networks:
+      - sample1
+    cap_add:
+      - NET_ADMIN
+      - NET_RAW
+    extra_hosts:
+      - host.docker.internal:host-gateway
+  my-service-workload:
+    image: nginxinc/nginx-unprivileged:stable-alpine
+    ports:
+      - 8888:8080
+networks:
+  sample1:
diff --git a/posts/20240322-skupper-podman-ingresses/resources/netfilter/config/skrouterd.json b/posts/20240322-skupper-podman-ingresses/resources/netfilter/config/skrouterd.json
@@ -0,0 +1,43 @@
+[
+    [
+        "router",
+        {
+            "id": "east",
+            "mode": "interior",
+            "helloMaxAgeSeconds": "3"
+        }
+    ],
+    [
+        "tcpListener",
+        {
+            "name": "my-service:8080@0.0.0.0:8080",
+            "host": "0.0.0.0",
+            "port": 8080,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "tcpConnector",
+        {
+            "name": "my-service:8080-to-localhost:8888",
+            "host": "localhost",
+            "port": 8888,
+            "address": "my-service:8080"
+        }
+    ],
+    [
+        "address",
+        {
+            "prefix": "mc",
+            "distribution": "multicast"
+        }
+    ],
+    [
+        "log",
+        {
+            "module": "ROUTER_CORE",
+            "enable": "error+"
+        }
+    ]
+]
+
diff --git a/posts/20240322-skupper-podman-ingresses/resources/scenario.drawio b/posts/20240322-skupper-podman-ingresses/resources/scenario.drawio
@@ -0,0 +1,64 @@
+<mxfile host="app.diagrams.net" modified="2024-03-25T14:55:09.054Z" agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" etag="8fIlOPkyyxCm-wkH5HAG" version="24.0.8" type="device">
+  <diagram name="Page-1" id="fqjJIMyGEyLriEQkknpv">
+    <mxGraphModel dx="700" dy="350" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="850" pageHeight="1100" math="0" shadow="0">
+      <root>
+        <mxCell id="0" />
+        <mxCell id="1" parent="0" />
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-2" value="my-service:8080" style="sketch=0;pointerEvents=1;shadow=0;dashed=0;html=1;strokeColor=none;labelPosition=center;verticalLabelPosition=bottom;verticalAlign=top;outlineConnect=0;align=center;shape=mxgraph.office.servers.physical_host;fillColor=#2072B8;" vertex="1" parent="1">
+          <mxGeometry x="130" y="116.5" width="27" height="52" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-14" value="Podman host" style="points=[[0,0],[0.25,0],[0.5,0],[0.75,0],[1,0],[1,0.25],[1,0.5],[1,0.75],[1,1],[0.75,1],[0.5,1],[0.25,1],[0,1],[0,0.75],[0,0.5],[0,0.25]];outlineConnect=0;gradientColor=none;html=1;whiteSpace=wrap;fontSize=12;fontStyle=0;container=1;pointerEvents=0;collapsible=0;recursiveResize=0;shape=mxgraph.aws4.group;grIcon=mxgraph.aws4.group_on_premise;strokeColor=#7D8998;fillColor=none;verticalAlign=top;align=left;spacingLeft=30;fontColor=#5A6C86;dashed=0;" vertex="1" parent="1">
+          <mxGeometry x="305" y="50" width="445" height="230" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-31" value="" style="rounded=0;whiteSpace=wrap;html=1;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-14">
+          <mxGeometry x="15" y="165" width="195" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-20" value="Port 8080" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-14">
+          <mxGeometry x="95" y="170" width="50" height="50" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-24" value="" style="group" vertex="1" connectable="0" parent="u_xR3J-K0KoO75LIoVnP-14">
+          <mxGeometry x="235" y="50" width="180" height="160" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-25" value="&lt;blockquote style=&quot;margin: 0 0 0 40px; border: none; padding: 0px;&quot;&gt;my-service&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;br&gt;&lt;br&gt;&lt;br&gt;&lt;br&gt;&lt;br&gt;&amp;nbsp;&lt;br&gt;&lt;br&gt;&lt;/blockquote&gt;" style="rounded=1;whiteSpace=wrap;html=1;align=right;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-24">
+          <mxGeometry width="180" height="160" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-26" value="" style="shape=image;verticalLabelPosition=bottom;labelBackgroundColor=default;verticalAlign=top;aspect=fixed;imageAspect=0;image=https://www.justinleegrant.com/assets/img/2021/podman.png;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-24">
+          <mxGeometry x="20" y="16" width="56.25" height="56" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-27" value="&lt;font style=&quot;font-size: 8px;&quot;&gt;8080&lt;/font&gt;" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-24">
+          <mxGeometry x="108" y="50.00327731092436" width="30" height="30" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-28" value="Bridge networks:&lt;span style=&quot;background-color: initial; white-space: pre;&quot;&gt;&#x9;&lt;/span&gt;&lt;span style=&quot;background-color: initial; white-space: pre;&quot;&gt;&#x9;&lt;/span&gt;&lt;br&gt;- network1&lt;br&gt;- networkN" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-24">
+          <mxGeometry x="20" y="90" width="150" height="50" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-30" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=1;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="u_xR3J-K0KoO75LIoVnP-14" source="u_xR3J-K0KoO75LIoVnP-27" target="u_xR3J-K0KoO75LIoVnP-20">
+          <mxGeometry relative="1" as="geometry">
+            <Array as="points">
+              <mxPoint x="358" y="140" />
+              <mxPoint x="225" y="140" />
+              <mxPoint x="225" y="195" />
+            </Array>
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-32" value="Host network" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-14">
+          <mxGeometry x="25" y="180" width="60" height="30" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-15" value="" style="group" vertex="1" connectable="0" parent="1">
+          <mxGeometry x="335" y="100" width="180" height="85" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-3" value="&lt;blockquote style=&quot;margin: 0 0 0 40px; border: none; padding: 0px;&quot;&gt;skupper-router&amp;nbsp; &amp;nbsp;&lt;br&gt;&lt;br&gt;&lt;/blockquote&gt;" style="rounded=1;whiteSpace=wrap;html=1;align=right;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-15">
+          <mxGeometry width="180" height="85" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-9" value="" style="shape=image;verticalLabelPosition=bottom;labelBackgroundColor=default;verticalAlign=top;aspect=fixed;imageAspect=0;image=https://www.justinleegrant.com/assets/img/2021/podman.png;" vertex="1" parent="u_xR3J-K0KoO75LIoVnP-15">
+          <mxGeometry x="20" y="8.5" width="56.25" height="56" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-19" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;" edge="1" parent="1" source="u_xR3J-K0KoO75LIoVnP-3" target="u_xR3J-K0KoO75LIoVnP-2">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="u_xR3J-K0KoO75LIoVnP-22" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="u_xR3J-K0KoO75LIoVnP-20" target="u_xR3J-K0KoO75LIoVnP-3">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+      </root>
+    </mxGraphModel>
+  </diagram>
+</mxfile>
diff --git a/posts/index.html b/posts/index.html
@@ -127,6 +127,17 @@ <h1>Posts</h1>
 
                 <ul class="posts-list">
 
+                        <li class="post-item">
+                            <a href="https://fgiorgetti.github.io/posts/20240322-skupper-podman-ingresses/">
+                                <span class="post-title">Skupper service ingress through containers</span>
+                                <span class="post-day">
+
+                                        Mar 22
+
+                                </span>
+                            </a>
+                        </li>
+
                         <li class="post-item">
                             <a href="https://fgiorgetti.github.io/posts/20240320-router-with-compose/">
                                 <span class="post-title">Running skupper-router containers with compose</span>