Skip to content

Latest commit

 

History

History
84 lines (50 loc) · 4.11 KB

README_EN.md

File metadata and controls

84 lines (50 loc) · 4.11 KB
Raw

Higress
Next-generation Cloud Native Gateway

Build Status license

Official Site   |   Docs   |   Blog   |   Developer   |   Higress in Cloud  

English | 中文

Higress is a next-generation cloud-native gateway based on Alibaba's internal gateway practices.

Powered by Istio and Envoy, Higress realizes the integration of the triple gateway architecture of traffic gateway, microservice gateway and security gateway, thereby greatly reducing the costs of deployment, operation and maintenance.

Higress Architecture

Summary

Use Cases

  • Kubernetes ingress controller:

    Higress can function as a feature-rich ingress controller, which is compatible with many annotations of K8s' nginx ingress controller.

    Gateway API support is coming soon and will support smooth migration from Ingress API to Gateway API.

  • Microservice gateway:

    Higress can function as a microservice gateway, which can discovery microservices from various service registries, such as Nacos, ZooKeeper, Consul, Eureka, etc.

    It deeply integrates of Dubbo, Nacos, Sentinel and other microservice technology stacks.

  • Security gateway:

    Higress can be used as a security gateway, supporting WAF and various authentication strategies, such as key-auth, hmac-auth, jwt-auth, basic-auth, oidc, etc.

Higress Features

  • Easy to use

    Provide one-stop gateway solutions for traffic scheduling, service management, and security protection, support Console, K8s Ingress, and Gateway API configuration methods, and also support HTTP to Dubbo protocol conversion, and easily complete protocol mapping configuration.

  • Easy to expand

    Provides Wasm, Lua, and out-of-process plug-in extension mechanisms, so that multi-language plug-in writing is no longer an obstacle. The granularity of plug-in effectiveness supports not only the global level, domain name level, but also fine-grained routing level

  • Dynamic hot update

    Get rid of the traffic jitter caused by reload at the bottom, the configuration change takes effect in milliseconds and the business is not affected, the Wasm plug-in is hot updated and the traffic is not damaged

  • Smooth upgrade

    Compatible with 80%+ usage scenarios of Nginx Ingress Annotation, and provides more feature-rich annotations, easy to handle Nginx Ingress migration in one step

  • Security

    Provides JWT, OIDC, custom authentication and authentication, deeply integrates open source web application firewall.

Community

Slack: to get invited go here.

Thanks

Higress would not be possible without the valuable open-source work of projects in the community. We would like to extend a special thank-you to Envoy and Istio.