#IstioCon Apache APISIX from Gateway to Full Traffic Proxy with Istio Jintao Zhang API7.ai #IstioCon About Me ● Apache APISIX PMC ● Kubernetes Ingress NGINX maintainer ● Microsoft MVP ● zhangjintao@apache Scenarios for Apache APISIX #IstioCon Usage Scenarios for Apache APISIX ● L4/L7 Gateway（weibo、WPS） ● Microservices API Gateway（iQIYI） ● Kubernetes Ingress controller（UPYUN） ● https://github.com/apache/a

overview Basic operations Guide to creating database connections Disconnecting from database Editing database connection Invalidating and reconnecting to database Local client configuration Connection SSM configuration Shell commands Changing current user password Authentication models overview Database native DBeaver profile Kerberos authentication Microsoft Entra ID Authentication MongoDB PostgreSQL databases configuration Cloud settings in DBeaver DBeaver Lite User Guide 24.2.ea. Page 4 of 1010. Database drivers How to add additional artifacts to the driver ODBC JDBC driver Deprecated legacy ODBC

overview Basic operations Guide to creating database connections Disconnecting from database Editing database connection Invalidating and reconnecting to database Local client configuration Connection SSM configuration Shell commands Changing current user password Authentication models overview Database native DBeaver profile Kerberos authentication Microsoft Entra ID Authentication MongoDB PostgreSQL SSO Working with Google Cloud Explorer SSO AWS credentials Google Cloud Explorer credentials Database drivers How to add additional artifacts to the driver ODBC JDBC driver Deprecated legacy ODBC

overview Basic operations Guide to creating database connections Disconnecting from database Editing database connection Invalidating and reconnecting to database Local client configuration Connection SSM configuration Shell commands Changing current user password Authentication models overview Database native DBeaver profile Kerberos authentication Microsoft Entra ID Authentication MongoDB PostgreSQL SSO Working with Google Cloud Explorer SSO AWS credentials Google Cloud Explorer credentials Database drivers How to add additional artifacts to the driver ODBC JDBC driver Deprecated legacy ODBC

groups, which facilitates routing of data. d. Type the IP address of your ISP in the Gateway address box. Note: A gateway is a device that connects a user to the Internet. It is provided by the ISP. Using Base Base is a database programme used to store contact and account information, create and modify tables, forms, queries and reports. Accessing data stored in a wide variety of database file formats is letters, labels, envelopes, faxes and e-mail messages by using a form letter template and an address database. Designing and Structuring. OpenOffice.org enables you to design and structure your text document

leveraged in a Knative based platform - Istio as an Ingress Gateway • By default, Knative does not enable service mesh, it uses Istio as an Ingress Gateway. • Enable Secret Discovery Service (SDS) to monitor istio-system to ingress gateway which contains credentials for https support of multi tenants. • Knative has knative-ingress-gateway for external access and knative-local-gateway for cluster local access access. They use Istio gateway service istio-ingressgateway as its underlying service. Knative Activator or Application Front door design #IstioCon - Traffic Splitting, blue/green deployment How Istio

Istio control plane through a Gateway ○ WorkloadEntry created ■ VM sidecar is made aware of all services in the cluster ○ DNS name resolved ■ gets routed through the gateway to the service ● The data ■ Single network ● direct communication w/o requiring intermediate Gateway ■ Multiple networks ● all goes though the Gateway ● via L3 networking (if enhanced performance is desired) #IstioCon Demo packet inspection (DPI) ○ DDoS defense ○ Firewall ● Lack dedicated gateway support (architectural changes) ○ No separating out the gateway used for untrusted user traffic from the internal mesh traffic

Capture Traffic Management & Routing intent as “Access Point” Specs ○ Leverage Istio object model: Gateway, VirtualService, DestinationRules, etc. apiVersion: apps.cloud.io/v1 kind: AccessPoint metadata: AvailabilityZone traffic: gateways: - apiVersion: networking.istio.io/v1beta1 kind: Gateway spec: ... virtualServices: - apiVersion: networking.istio.io/v1beta1 Controllers Istiod Network Load Balancer (NLB) Network Load Balancer (NLB) Ingress Gateway Ingress Gateway Pods Request Traffic Response Traffic Specs synced from Federated Access Point

DB AMF App B AMF App A SMF Frontend SMF Ingress Gateway Redis DB SMF App X AMF Identity SMF Identity SMF Identity 10 ©2021 Aspen Mesh. All rights the Mesh UDM Virtual Machine Namespace SMF SMF Frontend UDM Egress Gateway Redis DB SMF App X Control Plane UDM Identity 11 ©2021 Aspen Mesh. All rights reserved Namespace SMF SQL DB AMF App B AMF App A SMF Frontend SMF Ingress Gateway Redis DB SMF App X https://aspenmesh.io/how-to-capture-packets-that-dont-exist/ Optical Tap

contain keys • Key – A file stored in the system 21 © 2022 Cloudera, Inc. All rights reserved. S3 GATEWAY Allows S3 clients to talk to Ozone • Stateless server • Translates S3 REST API calls to Ozone