使用Rancher API部署Citrix API网关（基于Rancher Citrix博客）

rancher api

The Citrix API gateway provides a single entry point for APIs by ensuring secure and reliable access to APIs and microservices on your system. Citrix provides an enterprise-grade API gateway for north-south API traffic for Kubernetes clusters. The Citrix API gateway integrates with Kubernetes through the Citrix Ingress Controller and Citrix ADC (MPX, VPX, or CPX) deployed as the ingress gateway for on-premises and cloud deployments.

Citrix API网关通过确保对系统上的API和微服务的安全可靠访问来提供API的单个入口点。 Citrix为Kubernetes集群提供了南北API流量的企业级API网关。 Citrix API网关通过部署为本地和云部署的入口网关的Citrix Ingress Controller和Citrix ADC (MPX，VPX或CPX)与Kubernetes集成。

Rancher provides a catalog of application templates that help you to deploy the Citrix API gateway. In this blog post, I’ll look at how you can deploy the API gateway using Rancher.

Rancher提供了应用程序模板目录，可帮助您部署Citrix API网关。 在此博客文章中，我将介绍如何使用Rancher部署API网关。

The Citrix API gateway catalog installs the custom resource definitions (CRDs) required for the API gateway functionality. Because this catalog leverages the Citrix Ingress Controller, you need to create an instance of the API gateway CRD, which is the Citrix Ingress Controller. If you already have a Citrix Ingress Controller instance in the cluster, you will need to install it again.

Citrix API网关目录将安装API网关功能所需的自定义资源定义(CRD)。 由于此目录利用思杰入口控制器，你需要创建API网关CRD，这是思杰入口控制器的一个实例。 如果群集中已经有一个Citrix Ingress Controller实例，则需要再次安装它。

API gateway supports the following CRDs:

API网关支持以下CRD：

• Auth CRD (authpolicies.citrix.com) — Authentication policies are used to enforce access restrictions to resources hosted by an application or an API server. 身份验证CRD(authpolicies.citrix.com)—身份验证策略用于强制实施对由应用程序或API服务器托管的资源的访问限制。
• Content routing CRDs (httproutes.citrix.com and listeners.citrix.com) — Kubernetes-native ingress supports only basic host and path-based routing. Using content routing CRDs, you can expose the advanced content routing abilities provided by Citrix ADC like routing based on header values or query strings. 内容路由CRD(httproutes.citrix.com和listeners.citrix.com) -Kubernetes本地入口仅支持基本的主机和基于路径的路由。 使用内容路由CRD，您可以公开Citrix ADC提供的高级内容路由功能，例如基于标头值或查询字符串的路由。
• Rate limit CRD (ratelimits.citrix.com) — In a Kubernetes deployment, you can rate limit the requests to the resources on the back-end server or services using the rate limiting feature provided by the ingress Citrix ADC. 速率限制CRD( ratelimits.citrix.com )—在Kubernetes部署中，您可以使用入口Citrix ADC提供的速率限制功能对对后端服务器或服务上的资源的请求进行速率限制。
• Rewrite and responder CRD (rewritepolicies.citrix.com) — In a Kubernetes environment, to deploy specific Layer 7 policies (such as redirecting HTTP traffic to a specific URL) requires you to add appropriate libraries within the microservices and manually configure the policies. Instead, you can use the Rewrite and Responder features provided by the ingress Citrix ADC device to deploy these policies. 重写和响应者CRD(rewritepolicies.citrix.com)—在Kubernetes环境中，要部署特定的第7层策略(例如将HTTP流量重定向到特定的URL)，需要在微服务中添加适当的库并手动配置策略。 相反，您可以使用入口Citrix ADC设备提供的“重写和响应程序”功能来部署这些策略。
• VIP CRD (vips.citrix.com) — Citrix provides a VIP CRD for asynchronous communication between the IPAM controller and the Citrix Ingress Controller. The IPAM controller is provided by Citrix for IP address management. VIP CRD(vips.citrix.com) — Citrix为IPAM控制器和Citrix Ingress Controller之间的异步通信提供了VIP CRD。 Citrix为IP地址管理提供了IPAM控制器。

Citrix provides a VIP CRD for asynchronous communication between the IPAM controller and the Citrix Ingress Controller. The IPAM controller is provided by Citrix for IP address management.

Citrix为IPAM控制器和Citrix Ingress Controller之间的异步通信提供了VIP CRD。 Citrix为IP地址管理提供了IPAM控制器。

Prerequisites 先决条件

You must import to the Rancher platform the cluster in which you want to deploy the API gateway.

您必须将要在其中部署API网关的群集导入Rancher平台。

Importing the Cluster to the Rancher Platform 将集群导入Rancher平台

Follow these steps to import your cluster to the Rancher platform:

请按照以下步骤将群集导入Rancher平台：

1. Log in to the Rancher platform.
            登录到Rancher平台。
2. In the Clusters page, click Add Cluster. 在“群集”页面中，单击添加群集 。

3. In the Add Cluster, select Cluster Type page and choose Import an existing cluster

3.在“添加集群”中，选择“集群类型”页面，然后选择“ 导入现有集群”

4. Specify the Cluster Name.

4.指定集群名称 。

5. Specify Member Roles, Labels, and Annotations.

5.指定成员角色 ， 标签和注释 。

6. Click Create.

6.点击创建 。

Deploying Citrix API Gateway Using Rancher 使用Rancher部署Citrix API Gateway

Perform the following steps to deploy the API gateway on the cluster using the Rancher platform:

执行以下步骤，以使用Rancher平台在群集上部署API网关：

1. Log in to the Rancher platform.
            登录到Rancher平台。
2. From the global drop-down list, select the cluster that you have imported.
            从全局下拉列表中，选择已导入的集群。
3. Select the Apps tab and click Launch. 选择应用程序选项卡，然后单击启动 。

4. From the Catalog page, choose the citrix-api-gateway.

4.从目录页面，选择citrix-api-gateway 。

        Catalog library
       
        目录库
       

5. Specify the mandatory and required fields in Deployment settings, ADC settings, CIC Image settings, and Exporter settings. The mandatory fields include:

5.在“部署设置”，“ ADC设置”，“ CIC映像”设置和“导出器”设置中指定必填字段和必填字段。 必填字段包括：

• Namespace: Specify the namespace where you want to create the CIC. You can also use Edit as YAML option to specify the same in the YAML file. 命名空间：指定要在其中创建CIC的命名空间。 您还可以使用“ 另存为YAML”选项在YAML文件中指定相同的内容。
• Accept License: Select Yes to accept the terms and conditions of Citrix license. 接受许可证：选择是 ，接受Citrix许可证的条款和条件。
• Login File Name: Specify the name of the secret. The secret file is used for Citrix ADC login. 登录文件名：指定密码的名称。 该机密文件用于Citrix ADC登录。
• Citrix ADC IP: The NSIP or SNIP of the Citrix ADC device. For HA, specify the SNIP as the IP address. Citrix ADC IP： Citrix ADC设备的NSIP或SNIP。 对于高可用性，将SNIP指定为IP地址。

6. Click Preview to verify the information, then click Launch.

6.单击预览以验证信息，然后单击启动 。

Conclusion 结论

The Rancher catalog will ease the installation process for Citrix API gateway and enable all the required features to be configured on the go. Learn more about Citrix ADC and Citrix API gateway.

Rancher目录将简化Citrix API网关的安装过程，并允许在旅途中配置所有必需的功能。 了解有关Citrix ADC和Citrix API网关的更多信息。

Originally published at https://www.citrix.com on September 3, 2020.

最初于 2020年9月3日 在 https://www.citrix.com 上 发布 。

翻译自: https://medium.com/@tejaskonduri/deploying-citrix-api-gateway-using-rancher-citrix-blogs-8336103e9d19

rancher api

免责声明：本文系网络转载或改编，未找到原创作者，版权归原作者所有。如涉及版权，请联系删