Skip to content

Commit bc2a7aa

Browse files
root30mlavacca
andauthored
conformance: Add Airlock Microgateway report for v1.1.0 (#3408)
* conformance: Add Airlock Microgateway report for v1.1.0 * conformance: Add Airlock Microgateway report for v1.1.0 * Update site-src/implementations.md Co-authored-by: Mattia Lavacca <[email protected]> --------- Co-authored-by: Mattia Lavacca <[email protected]>
1 parent b5d0dc9 commit bc2a7aa

File tree

3 files changed

+94
-0
lines changed

3 files changed

+94
-0
lines changed
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# Airlock Microgateway
2+
3+
## Table of contents
4+
5+
| API channel | Implementation version | Mode | Report |
6+
|--------------|----------------------------------------------------------------------|---------|--------------------------------------------------|
7+
| experimental | [v4.4.0](https://github.com/airlock/microgateway/releases/tag/4.4.0) | default | [link](./experimental-4.4.0-default-report.yaml) |
8+
9+
## Reproduce
10+
11+
The Airlock Microgateway conformance report can be reproduced by following the steps in the [Gateway API conformance guide](https://github.com/airlock/microgateway/tree/main/examples/gateway-api/conformance/conformance.md) on GitHub.
12+
13+
> [!NOTE]
14+
> The `HTTPRouteWeight` test fires 10 concurrent request to 3 backends totaling in 500 requests to assert a distribution that matches the configured weight.
15+
> Please be aware that this test exceeds the [5 req/sec rate-limit](https://docs.airlock.com/microgateway/latest/#data/1675772882054.html) enforced in the <!-- markdown-link-check-disable --> [community edition](https://www.airlock.com/en/secure-access-hub/components/microgateway/community-edition) <!-- markdown-link-check-enable -->, causing the test to fail.
16+
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
apiVersion: gateway.networking.k8s.io/v1alpha1
2+
date: "2024-10-24T11:45:25Z"
3+
gatewayAPIChannel: experimental
4+
gatewayAPIVersion: v1.1.0
5+
implementation:
6+
contact:
7+
- https://www.airlock.com/en/contact
8+
organization: airlock
9+
project: microgateway
10+
url: https://github.com/airlock/microgateway
11+
version: v4.4.0
12+
kind: ConformanceReport
13+
mode: default
14+
profiles:
15+
- core:
16+
result: success
17+
statistics:
18+
Failed: 0
19+
Passed: 33
20+
Skipped: 0
21+
extended:
22+
result: success
23+
statistics:
24+
Failed: 0
25+
Passed: 5
26+
Skipped: 0
27+
supportedFeatures:
28+
- GatewayPort8080
29+
- HTTPRouteMethodMatching
30+
- HTTPRouteParentRefPort
31+
- HTTPRouteQueryParamMatching
32+
unsupportedFeatures:
33+
- GatewayHTTPListenerIsolation
34+
- GatewayStaticAddresses
35+
- HTTPRouteBackendRequestHeaderModification
36+
- HTTPRouteBackendTimeout
37+
- HTTPRouteHostRewrite
38+
- HTTPRoutePathRedirect
39+
- HTTPRoutePathRewrite
40+
- HTTPRoutePortRedirect
41+
- HTTPRouteRequestMirror
42+
- HTTPRouteRequestMultipleMirrors
43+
- HTTPRouteRequestTimeout
44+
- HTTPRouteResponseHeaderModification
45+
- HTTPRouteSchemeRedirect
46+
name: GATEWAY-HTTP
47+
summary: Core tests succeeded. Extended tests succeeded.

site-src/implementations.md

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@ cover, and documentation to help users get started.
1515
## Gateway Controller Implementation Status <a name="gateways"></a>
1616

1717
- [Acnodal EPIC][1]
18+
- [Airlock Microgateway][34]
1819
- [Amazon Elastic Kubernetes Service][23] (alpha)
1920
- [Apache APISIX][2] (beta)
2021
- [Avi Kubernetes Operator][31] (tech preview)
@@ -87,6 +88,7 @@ cover, and documentation to help users get started.
8788
[31]:#avi-kubernetes-operator
8889
[32]:#haproxy-kubernetes-ingress-controller
8990
[33]:#ngrok-kubernetes-operator
91+
[34]:#airlock-microgateway
9092

9193
[gamma]:/concepts/gamma/
9294

@@ -105,6 +107,35 @@ In this section you will find specific links to blog posts, documentation and ot
105107
[epicdocs]:https://www.epic-gateway.org/
106108
[epicsource]:https://github.com/epic-gateway
107109

110+
### Airlock Microgateway
111+
[![Conformance](https://img.shields.io/badge/Gateway%20API%20Conformance%20v1.1.0-Airlock%20Microgateway-green)](https://github.com/kubernetes-sigs/gateway-api/blob/main/conformance/reports/v1.1.0/airlock-microgateway)
112+
113+
[Airlock Microgateway][airlock-microgateway] is a Kubernetes native WAAP (Web Application and API Protection) solution to protect microservices.
114+
Modern application security is embedded in the development workflow and follows DevSecOps paradigms.
115+
Airlock Microgateway protects your applications and microservices with the tried-and-tested Airlock security features against attacks, while also providing a high degree of scalability.
116+
117+
With [Airlock Microgateway 4.4][airlock-microgateway-v4.4], Airlock Microgateway introduces a sidecarless data plane mode
118+
based on Gateway API to avoid the operational complexity of sidecars.
119+
120+
#### Features
121+
- Kubernetes native integration with sidecar injection and Gateway API support
122+
- Reverse proxy functionality with request routing rules, TLS termination and remote IP extraction
123+
- Using native Envoy HTTP filters like Lua scripting, RBAC, ext_authz, JWT authentication
124+
- Content security filters for protecting against known attacks (OWASP Top 10)
125+
- API security features like JSON parsing, OpenAPI specification enforcement or GraphQL schema validation
126+
127+
#### Documentation and links
128+
- [Product documentation][airlock-microgateway-documentation]
129+
- [Gateway specific documentation][airlock-microgateway-guide]
130+
- Check our [Airlock community forum][airlock-microgateway-community-support] and [support process][airlock-microgateway-premium-support] for support.
131+
132+
[airlock-microgateway]:https://www.airlock.com/en/secure-access-hub/components/microgateway
133+
[airlock-microgateway-v4.4]:https://docs.airlock.com/microgateway/4.4/#data/1725073468781.html
134+
[airlock-microgateway-documentation]:https://docs.airlock.com/microgateway/latest
135+
[airlock-microgateway-guide]:https://docs.airlock.com/microgateway/4.4/#data/1726159368351.html
136+
[airlock-microgateway-community-support]:https://forum.airlock.com/
137+
[airlock-microgateway-premium-support]:https://techzone.ergon.ch/support-process
138+
108139
### Amazon Elastic Kubernetes Service
109140

110141
[Amazon Elastic Kubernetes Service (EKS)][eks] is a managed service that you can use to run Kubernetes on AWS without needing to install, operate, and maintain your own Kubernetes control plane or nodes. EKS's implementation of the Gateway API is through [AWS Gateway API Controller][eks-gateway] which provisions [Amazon VPC Lattice][vpc-lattice] Resources for gateway(s), HTTPRoute(s) in EKS clusters.

0 commit comments

Comments
 (0)