Contour, a High Performance Multitenant Ingress Controller for Kubernetes
summary
Contour runs as a control plane for Envoy, deployed with an Envoy daemonset and a two‑replica control plane, and it pushes dynamic xDS config over gRPC. It enforces global and local rate limiting (demo: 5 req/hour per client IP, 2 req/hour when X‑Contour‑Rate‑Limit header present) via an external rate‑limit service, supports multi‑tenant ingress delegation, and adds gateway API alpha support (introduced in v1.13) plus an operator (alpha), xDS performance work, Windows/IPv6, and FIPS considerations. Community: ~2.7k stars, 450 forks.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:03What is Contour
- 4:50Architecture overview
- 6:33New features
- 7:52Gateway API
- 10:46Rate Limiting
- 13:46Rate Limiting Architecture
- 15:34Rate Limiting Demo
- 20:21Roadmap
- 24:30Wrapup
related talks
25mContour, A High Performance Multitenant Ingress Controller for Kubernetes
35mContour, a High Performance Multitenant Ingress Controller for Kubernetes
38mContour Ingress Intro and Deep Dive
12mTalk Deep Dive
36mIngressRoute: A Path Towards a Better Ingress Object for Kubernetes
36mIngressRoute: A Path Towards a Better Ingress Object for Kubernetes
46mMicroservices and containers networking
22mUnlock Kubernetes & Envoy: Master Your API Ecosystem!