Higress
Next-generation Cloud Native Gateway | 下一代云原生网关
Stars
1.93K
Forks
325
Open issues
166
Closed issues
136
Last release
6 months ago
Last commit
5 months ago
Watchers
1.93K
Total releases
18
Total commits
394
Open PRs
13
Closed PRs
296
- Project Website
- https://higress.io
- Platform
- License
- apache-2.0
- Category
- Technology
- MongoDB javascript Shell c++ Dockerfile Smarty Makefile Starlark
- Offers premium version?
- NO
- Proprietary?
- NO
- About
-
<a href="https://camo.githubusercontent.com/81ca53fa080aea2c3075e188df2a4675b45398eb0c8ca7a4f2d2738c48fad35a/68747470733a2f2f696d672e616c6963646e2e636f6d2f696d6765787472612f69322f4f31434e30314e77784c446432306e786647426a786d5a5f2121363030303030303030363839352d322d7470732d3936302d3239302e706e67" rel="nofollow"></a>
Next-generation Cloud Native Gateway官网 | 文档 | 博客 | 开发指引 | Higress 企业版
English | 中文
Higress 是基于阿里内部两年多的 Envoy Gateway 实践沉淀，以开源 Istio 与 Envoy 为核心构建的下一代云原生网关。Higress 实现了安全防护网关、流量网关、微服务网关三层网关合一，可以显著降低网关的部署和运维成本。
Summary
- 功能展示
- 使用场景
- 核心优势
- Quick Start
- 社区
使用场景
-
Kubernetes Ingress 网关:
Higress 可以作为 K8s 集群的 Ingress 入口网关, 并且兼容了大量 K8s Nginx Ingress 的注解，可以从 K8s Nginx Ingress 快速平滑迁移到 Higress。
支持 Gateway API 标准，支持用户从 Ingress API 平滑迁移到 Gateway API。
-
微服务网关:
Higress 可以作为微服务网关, 能够对接多种类型的注册中心发现服务配置路由，例如 Nacos, ZooKeeper, Consul, Eureka 等。
并且深度集成了 Dubbo, Nacos, Sentinel 等微服务技术栈，基于 Envoy C++ 网关内核的出色性能，相比传统 Java 类微服务网关，可以显著降低资源使用率，减少成本。
-
安全防护网关:
Higress 可以作为安全防护网关， 提供 WAF 的能力，并且支持多种认证鉴权策略，例如 key-auth, hmac-auth, jwt-auth, basic-auth, oidc 等。
核心优势
-
生产等级
脱胎于阿里巴巴2年多生产验证的内部产品，支持每秒请求量达数十万级的大规模场景。
彻底摆脱 reload 引起的流量抖动，配置变更毫秒级生效且业务无感。
-
平滑演进
支持 Nacos/Zookeeper/Eureka 等多种注册中心，可以不依赖 K8s Service 进行服务发现，支持非容器架构平滑演进到云原生架构。
支持从 Nginx Ingress Controller 平滑迁移，支持平滑过渡到 Gateway API，支持业务架构平滑演进到 ServiceMesh。
-
兼收并蓄
兼容 Nginx Ingress Annotation 80%+ 的使用场景，且提供功能更丰富的 Higress Annotation 注解。
兼容 Ingress API/Gateway API/Istio API，可以组合多种 CRD 实现流量精细化管理。
-
便于扩展
提供 Wasm、Lua、进程外三种插件扩展机制，支持多语言编写插件，生效粒度支持全局级、域名级，路由级。
插件支持热更新，变更插件逻辑和配置都对流量无损。
功能展示
-
丰富的可观测
提供开箱即用的可观测，Grafana&Prometheus 可以使用内置的也可对接自建的
-
插件扩展机制
官方提供了多种插件，用户也可以开发自己的插件，构建成 docker/oci 镜像后在控制台配置，可以实时变更插件逻辑，对流量完全无损。
-
多种服务发现
默认提供 K8s Service 服务发现，通过配置可以对接 Nacos/ZooKeeper 等注册中心实现服务发现，也可以基于静态 IP 或者 DNS 来发现
-
域名和证书
可以创建管理 TLS 证书，并配置域名的 HTTP/HTTPS 行为，域名策略里支持对特定域名生效插件
-
丰富的路由能力
通过上面定义的服务发现机制，发现的服务会出现在服务列表中；创建路由时，选择域名，定义路由匹配机制，再选择目标服务进行路由；路由策略里支持对特定路由生效插件
社区 感谢
如果没有 Envoy 和 Istio 的开源工作，Higress 就不可能实现，在这里向这两个项目献上最诚挚的敬意。
联系我们
- Mailing list: higress@googlegroups.com
社区交流群:
开发者群：
Alternative Projects
-
Cloud Native API Gateway under the Apache Software Foundation13K
-
Amazon Elastic Container Service (Amazon ECS) is a highly scalable, high-performance container orchestration service that supports Docker containers and allows you to easily run and scale containerized applications on AWS.
-
A multi-cluster batch queuing system for high-throughput workloads on Kubernetes.374
-
Service Fabric is a distributed systems platform for packaging, deploying, and managing stateless and stateful distributed applications and containers at large scale.3K
-
Multi-tenancy and policy-based framework for Kubernetes.1.33K
-
[CNCF Sandbox Project] Managing your Kubernetes clusters (including public, private, edge, etc.) as easily as visiting the Internet ⎈1.26K
-
Clusterpedia is used for complex resources search across multiple clusters, support simultaneous search of a single kind of resource or multiple kinds of resources existing in multiple clusters.682
-
Cloud Native Control Planes7.86K
-
A toolkit for orchestrating distributed systems at any scale. It includes primitives for node discovery, raft-based consensus, task scheduling and more.3.14K
-
Apache DolphinScheduler is the modern data workflow orchestration platform with powerful user interface, dedicated to solving complex task dependencies in the data pipeline and providing various types of jobs available `out of the box`11.4K
-
Fluid is an orchestration platform for elastic data abstraction and acceleration in cloud native environment.1.46K
-
iSoftStone Multi-cloud Management System is an enterprise-level cloud management platform applied in multiple public clouds and public-private hybrid cloud scenarios. It provides consistent self-service and operation management capabilities on heterogeneous resources which include centralized resource management and control, automated resource delivery, intelligent operation analysis and O&M management to reduce the costs of hybrid cloud management.
-
Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration3.67K
-
QoS based scheduling system for hybrid orchestration workloads on Kubernetes, bringing workloads the best layout and status.1.05K
-
kube-green is a simple k8s addon that automatically shuts down (some of) your resources when you don't need them.772
-
kube-rs is the core Rust ecosystem for building applications against Kubernetes2.44K
-
Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications104K
-
Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS1.98K
-
Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.14.1K
-
Contains useful documentation on the OCM project. Report here if you found any issues in OCM.638
-
The open source Cloud & Edge Computing Platform bringing real freedom to your Enterprise Cloud 🚀1.07K
-
The easiest way to orchestrate and observe your data pipelines13.5K
-
StackStorm (aka "IFTTT for Ops") is event-driven automation for auto-remediation, incident responses, troubleshooting, deployments, and more for DevOps and SREs. Includes rules engine, workflow, 160 integration packs with 6000+ actions (see https://exchange.stackstorm.org) and ChatOps. Installer at https://docs.stackstorm.com/install/index.html5.77K
-
A Cloud Native Batch System (Project under CNCF)3.47K
-
Project homepage. wasmCloud allows for simple, secure, distributed application development using WebAssembly actors and capability providers.1.09K
-
Apache ZooKeeper11.7K
-
AWS Cloud Map is a cloud resource discovery service. With Cloud Map, you can define custom names for your application resources, and it maintains the updated location of these dynamically changing resources. This increases your application availability because your web service always discovers the most up-to-date locations of its resources.
-
CoreDNS is a DNS server that chains plugins11.3K
-
Distributed reliable key-value store for the most critical data of a distributed system45.1K
-
A cloud native Kubernetes Global Balancer680
-
A High Performance Metadata System for Kubernetes693
-
an easy-to-use dynamic service discovery, configuration and service management platform for building cloud native applications.28K
-
AWS Service registry for resilient mid-tier load balancing and failover.12.1K
-
Apache Avro is a data serialization system.2.64K
-
CloudWeGo is ByteDance's open source Golang-centric middleware that can be used to quickly build enterprise-class cloud native architectures.6.4K
-
Apache Dubbo is a high-performance, java based, open source RPC framework.39.6K
-
go-zero is a web and rpc framework written in Go. It's born to ensure the stability of the busy sites with resilient design. Builtin goctl greatly improves the development productivity.26.5K
-
The C based gRPC (C++, Python, Ruby, Objective-C, PHP, C#)39.6K
-
Kratos is a microservice-oriented governance framework implements by golang, which offers convenient capabilities to help you quickly build a bulletproof application from scratch.21.8K
-
SOFARPC is a high-performance, high-extensibility, production-level Java RPC framework.3.76K
-
High performance, low latency, lightweight enterprise-level RPC system, which supports Baidu bRPC, Tencent tRPC, thrift protocols.1.77K
-
TARS is a high-performance RPC framework that provides an integrated solution of microservice governance.9.71K
-
Avi Networks drives automation and intelligence across multi-cloud environments with intent-based application services, including LB and WAF
-
Open-source layer 7 load balancer derived from proprietary Baidu FrontEnd5.99K
-
Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go50.9K
-
Citrix ADC is an application delivery and load balancing solution that provides a high-quality user experience for your web, traditional, and cloud-native applications regardless of where they are hosted.
-
Contour is a Kubernetes ingress controller using Envoy proxy.3.54K
-
Cloud-native high-performance edge/middle/service proxy23.1K
-
F5 Networks provides application security and delivery tools.
-
Gimbal is an ingress load balancing platform capable of routing traffic to multiple Kubernetes and OpenStack clusters. Built by Heptio in partnership with Actapio.664
-
HAProxy Load Balancer's development branch (mirror of git.haproxy.org)4.15K
-
A network load-balancer implementation for Kubernetes using standard routing protocols6.29K
-
The Cloud-Native Network Proxy Platform4.29K
-
Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.13K
-
An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html19.5K
-
Load Balancer Implementation for Kubernetes in Bare-Metal, Edge, and Virtualization1.46K
-
High Performance Web Platform Based on Nginx and LuaJIT11.8K
-
Pipy is a programmable proxy for the cloud, edge and IoT. It's written in C++, which makes it extremely lightweight and fast. It's also fully programmable by using PipyJS, a tailored version from the standard JavaScript language.654
-
Sangfor CNAD is a cloud native application proxy, that provides layer7&layer4 load balance service, high performance TLS encryption and decryption resource pool, and Ingress&Loadbalancer for kubernetes.
-
A powerful flow control component enabling reliability, resilience and monitoring for microservices. (面向云原生微服务的高可用流控防护组件)21.6K
-
An HTTP router and reverse proxy for service composition, including use cases like Kubernetes Ingress2.96K
-
Snapt provides future-proof load balancing and security solutions that are cloud-neutral and platform-agnostic.
-
A Kubernetes media gateway for WebRTC. Contact: info@l7mp.io579
-
A distribution of Nginx with some advanced features12.4K
-
Akana is a full lifecycle API management platform that supports multicloud deployments with industry-leading security.
-
Azure API Management is a hybrid, multi-cloud API, full lifecycle management platform for APIs across all environments. It allows customers to self-host API gateways as containers on Kubernetes.113
-
A Cloud Native traffic orchestration system5.58K
-
open source Kubernetes-native API gateway for microservices built on the Envoy Proxy4.19K
-
EnRoute Ingress API Gateway - Connectivity and Security for your Microservice at Kubernetes Ingress using one helm command. Built on Envoy Proxy.188
-
The Feature-rich, Kubernetes-native, Next-Generation API Gateway Built on Envoy3.91K
-
Gravitee.io - OpenSource API Management94
-
Hango API Gateway, build on Envoy & Istio.442
-
Ultra performant API Gateway with middlewares. A project hosted at The Linux Foundation5.83K
-
Specific Layer7 Gateway for kube-apiserver414
-
Kusk Gateway is a self-service API gateway powered by OpenAPI and Envoy. Kusk Gateway is built and maintained by Kubeshop.242
-
Create low-latency, interactive user experiences for stateless microservices.571
-
Tyk Open Source API Gateway written in Go, supporting REST, GraphQL, TCP and gRPC protocols8.96K
-
Choreo Connect is a cloud-native, open-source, and developer-centric API gateway.276
-
Aeraki Mesh allows you to manage any layer-7 traffic in a service mesh703
-
AWS App Mesh is a service mesh that provides application-level networking to make it easy for your services to communicate with each other across multiple types of compute infrastructure. App Mesh standardizes how your services communicate, giving you end-to-end visibility and ensuring high-availability for your applications.
-
Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.27.4K
-
A service mesh implementation for connecting, control, and observe services in spring-cloud.496
-
Glasnostic makes modern cloud applications resilient by shaping how systems interact, automatically and in real-time.
-
The Service Mesh Orchestration Platform1.01K
-
greymatter.io uses the service mesh ecosystem to create connected intelligence and intervention for next-gen modern infrastructure.
-
Simplify observability, traffic management, security, and policy with the Istio.34K
-
🐻 The multi-zone service mesh for containers, Kubernetes and VMs. Built with Envoy. CNCF Sandbox Project.3.35K
-
Ultra light, ultra simple, ultra powerful. Linkerd adds security, observability, and reliability to Kubernetes, without the complexity.10K
-
Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.696
-
Open Service Mesh (OSM) is a lightweight, extensible, cloud native service mesh that allows users to uniformly manage, secure, and get out-of-the-box observability features for highly dynamic microservice environments.2.59K
-
Universal cloud-native microservice governance specification (微服务治理标准)688
-
Sermant a proxyless service mesh solution based on Javaagent.807
-
Service Mesh Interface1.05K
-
Standardizing Service Mesh Value Measurement263
-
An intelligent ServiceMesh manager based on Istio406
-
Application connectivity platform.
-
Traefik Mesh - Simpler Service Mesh1.94K
Subscribe to Open Source Businees Newsletter
Twice a month we will interview people behind open source businesses. We will talk about how they are building a business on top of open source projects.
We'll never share your email with anyone else.