ambassador 学习六 Module说明

ambassador 学习六 Module说明

模块允许给与特定的mapping 或者整体添加特定的行为，方便进行系统的控制。
当前的module 定义主要是系统级别的

当前系统主要的配置

---
apiVersion: ambassador/v0
kind:  Module
name:  ambassador
config:
  # If present, service_port will be the port Ambassador listens
  # on for microservice access. If not present, Ambassador will
  # use 443 if TLS is configured, 80 otherwise.
  # service_port: 80

  # diag_port is the port where Ambassador will listen for requests
  # to the diagnostic service.
  # diag_port: 8877

  # admin_port is the port where Ambassador's Envoy will listen for
  # low-level admin requests. You should almost never need to change
  # this.
  # admin_port: 8001

  # liveness probe defaults on, but you can disable it.
  # liveness_probe:
  #   enabled: false

  # readiness probe defaults on, but you can disable it.
  # readiness_probe:
  #   enabled: false

  # use_proxy_protocol controls whether Envoy will honor the PROXY
  # protocol on incoming requests.
  # use_proxy_proto: false

  # use_remote_address controls whether Envoy will trust the remote
  # address of incoming connections or rely exclusively on the 
  # X-Forwarded_For header. 
  #
  # The current default is not to include any use_remote_address setting,
  # but THAT IS LIKELY TO CHANGE SOON.
  # use_remote_address: false

几个配置的说明

• use_remote_address

用户请求的原地址的处理，当前为false，具体的可以参考envoy 的配置文档

• use_proxy_proto

proxy  协议的说明

• Probes

探针配置支持liveness  readiness 支持进行修改，可以支持prefix  rewite  service  和mapping 使用类似

• tls 模块
  参考配置

---
apiVersion: ambassador/v0
kind:  Module
name:  tls
config:
  server:
    enabled: True
    redirect_cleartext_from: 80

参考资料

http://localhost:8080/reference/modules.html

 

·