ไม่สามารถเล่นวิดีโอนี้
ขออภัยในความไม่สะดวก
Build an API Gateway with Envoy and use with .NET Core APIs
ฝัง
- เผยแพร่เมื่อ 26 ก.ค. 2024
- In this step by step tutorial I take you through how to set up Envoy as an API Gateway and run it in Docker Compose with two .NET Core APIs. Specifically, the 2 API Gateway use cases we’ll cover are:
• HTTP Routing
• TLS / HTTPS Termination
Level: Intermediate
📕 My Book: www.apress.com/gp/book/978148...
🤩 Patreon Site (Exclusive Member Benefits!): / binarythistle
💻 GitHub Repo: github.com/binarythistle/S03E...
🔗 WSL Install: docs.microsoft.com/en-us/wind...
🔗 Installing Docker in WSL: docs.docker.com/docker-for-wi...
🔗 Envoy Documentation: www.envoyproxy.io/docs/envoy/...
💻 Microsoft eShopOnContainers Project: github.com/dotnet-architectur...
🔗 Dockerize a .NET Core App : docs.docker.com/engine/exampl...
🔗 Envoy Reporting with Prometheus: • Setting up Prometheus ...
Recommended Videos
📽️ Full API Tutorial: • .NET Core 3.1 MVC REST...
📽️ Running .NET Core apps with HTTPS: • Run ASP.NET Core 3.1 A...
📽️ Deploy .NET Core API with Docker: • Deploy a .NET Core API...
⏲️ Time Codes ⏲️
PART 1 - INTRODUCTION
- 2:25 Course Overview
- 6:00 Architecture
- 8:02 Demo
PART 2 - THEORY
- 11:00 Ingredients
- 11:47 What is an API Gateway?
- 18:10 What is Envoy?
- 19:47 How Envoy works?
PART 3 - API / SERVICE SETUP
- 20:47 API Set Up
- 27:54 Dockerize our APIs
- 30:35 Configure for HTTPS - Certificates
- 35:30 Configure for HTTPS - User Secrets
- 42:07 Docker Compose Setup
PART 4 - ENVOY HTTP ROUTING
- 53:38 Get started with Envoy (Default Config)
- 1:06:48 Run Envoy in Docker Compose
- 1:11:37 HTTP Routing & Envoy.yaml
- 1:16:12 Docker Compose Networking
PART 5 - ENVOY & HTTPS/TLS TERMINATION
- 1:23:27 HTTPS/TLS Termination Overview
- 1:26:25 Remove HTTPS Redirection (from 1 API)
- 1:27:14 Generate Certificates for Envoy using OpenSSL
- 1:33:34 Configure HTTPS/TLS Terminaiton in Envoy
- 1:41:06 Configure end to end HTTPS in Envoy
PART 6 - WRAP UP
- 1:47:05 Final Thoughts
- 1:48:47 Supporter Credits
Just starting to watch but the initial explanation itself requires a thumbs up. Happy to be here.
Thank you so much Les Jackson. It's good to find someone like you who explains almost everything, if not everything, in a tutorial. I learned a lot.
Great as usual!!! Went through it and now its time for some practice. 👏👏
Very well laid out tutorial. Actually looking for this kinda tutorial. Thanks. Very informative.
Thank you, Les. Another great video. Greetings from Serbia.
Thanks Less , your tutorials are amazing , I just enjoy and love to watching them till the end. I loved it.
I would like to ask you if it is possible make another tutorial for your next videos and secure these two microservices with a single Auth service and maybe I ask too much but if you also include roles and permissions in it , then it would be great.
looking forward to it
yeah - looking forward to it as well!
waiting for this.
gooby plz
Just stumbled across this walk-through! Now I need to check out your other ones to see what I missed! Thanks!
Salute to you Les Jackson for such a great effort to contribute to IT, I'm loving it going to implement at work place :)
Great tutorial. Really taking your time to explain and very hands-on. I certainly will check out your other videos. Definitely keep it up
Thank you so much Mr. Les , you are simply great, I love the way you explain very smoothly,
Before I keep watching, just gotta say, I loved that intro lol
Thanks a lot Les !! Your videos are excellent!!
Really helped me a lot on Envoy and API Gateway with .Net Core
Thanks Les for this amazing tutorial
Nicely done, Wes!
Thank you so much for taking time to create these amazing tutorials! A+mazing Channel!
Awesome man....watching this video at midnight and completed...:)
in love with the channel, keep up the good work! :)
Great course , Thank you so much Mr. Jackson
Thank you Les for another amazing tutorial during our lockdown in Melbourne. I'm currently investigating Ocelot for the API gateway and you have given me another option to think about it.
Hi Ray, yeah the Microsoft eShopOnContainers reference architecture that I mention in the video originally used Ocelot, (I've not personally used it), but they then switched to Envoy, (not sure why but it does seem to be gaining ground). Anyway thanks for the feedback and I hope your lock-down is going ok! Cheers, Les
@@binarythistle From what I know envoy supports grpc which was needed for eShopOnContainers. Ocelot does not support grpc natively
Thanks boss, I've fallen in love with your wonderful tutorials....
Wow thank you so much my friend! 😊😊😊😊
Thank you for all you work!
Great Video!!
I agree that the Envoy documentation looks pretty thorough but I find that I often get lost, bump into dead ends and/or get frustrated with the final definitions.
So your video went a long way towards helping me understand a envoy.ymal file that I have to modify!
Looking forward to implementing what I’ve learned!!
Thank you for your tutorials.
You're on a roll!
Thanks Les for this tutorial
Really helpful video - thank you. If you ever get chance, it would be great to compare how to use Envoy as a sidecar proxy, rather than as a front proxy. A lot of the available resources on the web are pretty impenetrable, so it's a topic that would really benefit from your clear presentations!
Fantastic video, THANKS A LOT.
Les, thanks so much to shrare your cotent we us. I really learn a lot with you. Thanks .
Very good video. Thank you very much!
Gracias Mister jackson.....maravillosa información....saludos de Perú
Hey Les Jackson, explanation is awesome, gr8t brother
Amazing content!
Awesome 😎 Thanks Les, in future can you do one on MicroService architecture with .net core
Helped a lot. Thanks :)
Thank you for the great tutorial. It was very helpful. It would be really appreciated if you could make a detailed video about ENVOY.
Awesome video. And Talisker 18 is a great choice.
great video Les, hope to see you on collins street soon :)
Yes me too mate!
Thank you Les !!
Wonderful video your explanations are perfect please keep the wonderful contact coming
You are my mentor from the beginning. 😎 I really appreciate your work . Can I get ML.Net based some tutorials too from you.. as they way you make things so easy it's just amazing.
Thanks for everything.. ⛱️ Take care
Great talk ... thanks
The best Thank you so much
Great tutorial Les..... would be great if you show how to deploy this as production environment in any cloud platform. That would complete any full stack development. Thanks again.
Yes PLease. Will be very helpful to show how to deploy Envoy services with this https support on Azure
@@sayedsaad8426 z kdodhfv5 mm
enjoy api gateway......i like you mention it
Thanks a lot
Thank you so much for your content! I've been transitioning from the Java ecosystem to .NET and your videos have been incredibly helpful!
Love these vids. I'd like to see one on how to have a single authenticate/authorise for multiple apis like this.
Les, Thank you very much for a fantastic content.I was looking for this for quite sometime, my tea cluster is showing 'no healthy upstream' i am not sure why, need to investigate, what i have done wrong! YAML is giving tough time!
“And the other ones gonna return.. Can you guess? A random typeof”. I see what you did there
1 thumb up just to cover this topic, just found you, 1 thumb up for this detail and this intro, 1 thumb up for all your videos, 1 thumb up for your nice manner, 1 thumb up for the lenght of the video, 1 thumb up for your time codes , i have more thumbs all for you!!
Wow - a load of thumbs! Awesome thanks!
Hi Les, Thanks for these tutorial videos, egarly waiting for Kubernetes video.
please make a video on gRPC(c#) webservice with container.
Thanks.
Very good explanation.
A bit difficult to follow especially when come to the point of constructing the envoy.yaml file. Lucky you have provide all the repo files on the GitHub. We must very careful the space in the envoy.yaml file. Most of the error happened due to the spacing.
Well, thank you very much. Really appreciate it.
By the way, I hope you can have a session for NGINX.
Absolutely fantastic tutorial (along with all your other tutorials!). I love the way you present the content, very informative and descriptive. In this tutorial, I think things have changed with the Envoy documentation as I was unable to find the original envoy.yaml file you used. Of course, I was able to grab a copy from your GitHub page, however it was the 'final' version. I had to go through the yaml file section of the video several times to clean out all the upcoming content. As a recommendation, it may be helpful in future videos if you could include some of the 'starting point' code in cases where you are cutting and pasting. Even after I stripped out and reverted your 'final code' back to 'original code' as best I could, I ran into an 'Invalid path: /etc/ssl/certs/https.crt' error when trying to start up the Envoy container (so I am guessing I still missed something). Otherwise, I absolutely loved the tutorial, and look forward to learning much more from your channel. Thank you!
Hah, so what I missed in fact was just rebuilding the container after reverting back to the original yaml. Works fine now.
Hello Sir really happy to see the videos, thanks for all your efforts. I have a request can you make video on best practices /architecture/design patterns if possible?
Hi Saurabh, my focus over the coming months will be more on microservices, so will hopefully cover this off for you!
@@binarythistle ❤️❤️❤️❤️
It would be great if you could create another video about smth. from front-end freamwork - for example Angular. I saw in one of your video that you have extension for that, so maybe couse you're familiar with that. I mean not big deal, just simple communication between api and webpage with security stuff etc. Consider that :) and like always very good material, thank you for your job.
Thanks a ton for the video, i was trying to use Envoy but the doc is really round n round all over the place.
Les, it's not just you on the Envoy documentation ... ;-)
Great video! Does you book cover the parent/child relationships?
envoy... onvoy... dayta.... darta.... meh. I interchange and I haven't worked out why... AND - just watching flights land in Sydney from Melbourne - I'm a little more emotional about it than I thought I would be! Welcome back! Hope you survived the last few months ok.
Thanks for excellent videos. I have a query related to the architecture at 7:50 timeline. If I want to add load balancer to scale microservices then do I have to add load balancer between api gateway and microservices. So api gateway would route request to load balancer and load balancer would distribute the request to microservice api.
Hey Les, how do you get communications between services?
Great tutorial, I have learned so much today. I have a question, If I have two services running on / how would one configure envoy to mount these on different path prefixes like /service1 and /service2 ?
Noob question here, is Envoy really a must go instead of Ocelot?
Does envoy support to show swagger documentation (with swagger UI) for all the backend APIs?
Thank you very much Les for this great tutorial and explanation of API gateways! I really would be interested in using free automatically refreshing letsencrypt certificates with Envoy. But it seams that this is not an easy task. Maybe its possible with "SDS". What do you think?
Hi Les, Thanks for this amazing video, I have question or I would say confusion as at last of the video you told about envoy service mesh, I can understand service mesh is for internal traffic and API gateway is for external but my question is can we use both together , what is best practices for this? My another question is for Authentication part, if I can configure authentication on envoy? if yes again whether it should be at service mesh or at gateway?
Thanks for all your handwork, I enjoyed watching your video. whenever you get a chance please clarify my doubt. Thanks
Hi Les,
Thanks for Nice and amazing Tutorials.
At this lesion , use of envoyproxy as API-Gateway is wonderful.
I am thinking on can we replacing "envoyproxy " by "Azure-API mgmt " services and do the same task(URL base routing) ?
Thanks,
How do you access the mounted data within the dockerfile? I haven't been able to see the data in the volume and access the data there.
I want a demo about .NET Core3.1 & EF with Oracle，It would be appreciated if you could post one on Git
I have small change in api gateway is my services like Flights api so i have to consume all apis in same time then entry point of access flight is api gateway so how can achieve this with api gateway? Thanks for video
How do authentication and authorization in the Envoy API gateway in microservice?
Can you use Envoy when your API is GraphQL? probably not since there's only one endpoint and you need to route it according to what's in the body. Is there an alternative? or do you just create your own gateway with stiching\merging?
Why do you use Openssl for Envoy but dotnet certmanager for the services?
Would mind doing a microservice course
i will save this to my FW collection
Hi Les, request you to re-make or update the video with latest version of .Net Core and envoy. I have been trying since days but unable to configure project on SSL (localhost)
Not wanting to rain on the party, great tutorial, etc BUT I still have no idea why would anyone want to use Envoy, as opposed to, for example, just nginx or IIS as a reverse proxy ?
Please explain what is the benefit / use case ?
Hi, Any chance of doing a video using Azure API management over Envoy ?
Can i use nodejs service when i use Envoy?
Why do we need setup certificates for apps when we have one on envoy?
I have a question on how you figured out the names for the secrets? How did you know that the key was "Kestrel:Development:Certificates:Password"? People often brush over the small things, but this is an area that I find difficult. All these magic strings that you have to know in order to get things working ...
Somebody please help me, Does this API Gateway support JAVA Spring Boot API???
Hi Les! When I go to localhost:10000/c I get redirected to envoyproxy.io/c which has a 404 error on the page. Why?
lmao how do you expect anyone to explain that
Can we use envoy without Docker?
What if you don't want to use docker ?
In the end still `localhost:10000/c` redirects to `localhost:xxxx/coffee` and expose the internal service addresses...
I get an error when trusting the dev-cert. Can't trust it. I get no prompt at all. Only "There was an error trusting HTTPS developer certificate."
you may need to clean it up...use the command below.
dotnet dev-certs --clean
@@zulhishamtan4308 I've done that and no luck. Manage to get it working by manually installing the cert using this commands:
dotnet dev-certs https -ep %USERPROFILE%\.aspnet\https\aspnetapp.pfx -p { password here }
dotnet dev-certs https --trust
Then importing it to the correct certs folder
Imagine being so liked that you video gets negative dislikes
Super video, just the stack that I have been trying to learn.
Question:
At 45:23 your docker-compose file, has the ports mapped for the Coffee API
ports:
- "8080:80"
- "8081:443"
However internally, the Coffee Api has the following launch settings in
launchSettings.json :
{
...
"applicationUrl": "localhost:5001;localhost:5000",
...
}
I was just wondering why the the docker compose file did not reference the 5001 and 5000 ports - if these are internal?
Thanks
Craig
Thanks for the tutorial, it's very helpful. How come it's not possible to route towards one's localhost ? And is there a way to solve this aside from using Docker compose ?