Lightning Talk: Providing Service Access with Service Keys Using HAProxy and Floating IPs
summary
Service keys trigger the broker to create credentials and push the service’s internal IP into an HAProxy control pipeline using RabbitMQ and a Python HAProxy agent, which updates configs and returns a shared public endpoint (OpenStack Floating IP plus a path/port) so the instance becomes reachable without exposing the private network. The system supports ACLs tied to client IPs, HAProxy clusters for HA, multi-broker usage from one control plane, and reduces public IP consumption compared with one-IP-per-instance.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:38Problem
- 1:43Service Key
- 2:06Create Service Key
- 2:20Problems with Service Keys
- 3:20Solution Implementation
- 4:41Accessibility
- 5:17HAProxy Setup
- 6:52Outro
related talks
28mProxy Service: A New Network Traffic Abstraction in Kubernetes
34mProxying Rabbits For Stability & Reliability
30mHow to Scale Single-Node Service Brokers with Subway
30mNetwork Configurations for High-Performance Streaming Connectivity in K8s
11mLightning Talk: Building a Scalable Multi-Protocol API Gateway with Envoy
09mLightning Talk: High Availability for Cilium Egress Gateway
10mExtending Cloud Service Broker: How to Access Any IaaS Service from Cloud Foun...
15mHow We Solved the K8s Cluster Communication Challenge