Easy HTTPS for your Microservice Architectures - Julien Salleyron, Containous

Traefik's Logo

Open Source Summit Europe - Lyon 2019

Whoami

Julien Salleyron

juliens

Containous

https://containo.us

  • We Believe in Open Source

  • We Deliver Traefik and Traefik Enterprise Edition

  • Commercial Support

  • 30 people distributed, 90% tech

Containous Logo

Evolution of Software Design

Evolution of Software Design

The Premise of Microservices…​

Asterix - Premise

…​and What Happens

Asterix - Fighting

Where’s My Service?

Where os Charlie?

Tools of the Trade

docker
rancher os
docker swarm
kubernetes
marathon
ec2
mesos
dynamodb
ecs
service fabric
consul
netflix oss
etcd
zookeeper
yaml
Source: https://twitter.com/Caged/status/1039937162769096704

Why Traefik?

Why, Mr Anderson?

Why, Mr Anderson?

What If I Told You?

What If I Told You

That You Don’t Have to Write This Configuration File…​?

Here Comes Traefik!

Traefik's Architecture

Traefik Project

Traefik 2.0 Quick Overview

  • Revamped Documentation

  • Clarified Concepts

  • Expressive Routing Rule Syntax

  • Middlewares

  • TCP Support

  • Canary / Mirroring

  • And so Much More…​

Learn more on the blog post

Traefik (v2.0) Core Concepts

Bored Minion

Traefik is an Edge Router

Traefik Edge Router

Dynamically Discovers Services

Traefik Automatic Config

Architecture (v2.0) at a Glance

Traefik Architecture At A Glance

Entrypoints

Traefik's Entrypoints

Routers

Traefik's Frontends

Middlewares

Traefik Middlewares

Services

Traefik's Services

Architecture (again) at a Glance

Traefik Architecture At A Glance

Static & Dynamic Configuration

Static and Dynamic Configuration

HTTPS & Let’s encrypt

Lets encrypt

Let’s encrypt DNS Challenge

Lets encrypt DNS Challenge

Let’s encrypt HTTP Challenge

Lets encrypt HTTP Challenge

Let’s encrypt TLS Challenge

Lets encrypt TLS Challenge

Demo

demo

Demo Menu

  1. Deploying Traefik and configure a service

  2. Configure a dashboard

  3. Configure the load balancing for scaled service

  4. Configure a service on a specific path

  5. Configure Let’s encrypt in Traefik

  6. Generate certificates for our services

Deploying Traefik and configure a service

Configure a dashboard

Configure the load balancing for scaled service

Configure a service on a specific path

Configure Let’s encrypt in Traefik

Generate certificates for our services

Traefik also comes in Herd

cluster traefikee

As Simple As Traefik

  • Install it:

# Cluster Installation
traefikeectl install \
    --licensekey="SuperSecretLicence" \
    --dashboard \
    --kubernetes # Or --swarm

  • Configure it:

# Routing Configuration, same as Traefik's
traefikeectl deploy \
    --acme.email=ssl-admin@mycompany.org
    --acme.tlsChallenge
    ...

Free Trial

https://containo.us/traefikee

We Also Missed Talking About …​

word cloud

What’s Next

  • KV Store

  • UDP

  • And More…​

More info

Thank you!

QRCode to this presentation