Azure Application Gateway for Containers (with Gateway API)

Name: Azure Application Gateway for Containers (with Gateway API)
Rating: 4.7 (43 reviews)

A Comprehensive and Practical Course: Containers, K8s, AKS, Gateway API, Web Applications, Routing, Security, Monitoring

Created bycourscape.com by Andrei Barbu | Microsoft employee working daily with AKS, ARO, ACI, ACR

Last updated 6/2024

English

What you'll learn

Containerization, Kubernetes and AKS basics
What Gateway API and Ingress API are
What Application Gateway for Containers is, networking considerations, deployment methods
How to setup Application Gateway for Containers routing using both Gateway and Ingress APIs
How to expose applications via custom domain name
How to create multiple types of TLS/SSL certificates and expose applications via HTTPS, using TLS/SSL termination or mTLS
Gateway API security model and how to implement it in AKS
How to monitor and troubleshoot the Application Gateway for Containers and its traffic

Course content

12 sections • 67 lectures • 6h 20m total length

Meet the Instructor2:47
Understanding the Path Ahead: Course Curriculum Overview3:44
Good to know / Recommended background3:40
Connect with me

What is a container and how is it different from a VM?9:04
Compare containers and virtual machines, focusing on kernel sharing, namespaces, and cgroups. Explain isolation, portability, startup speed, and suitability for microservices.
Microservices architecture2:10
Install Docker and Azure CLI on an Ubuntu VM and other considerations7:24
What are Docker, Dockerfile, and Docker Hub?7:12
Creating a container app (web app), pushing it to Docker Hub and running it7:19

What are Kubernetes and Azure Kubernetes Service (AKS)?7:29
Create and explore an Azure Kubernetes Service (AKS)7:11
How and why to Stop/Start the AKS cluster4:14
Stop and start AKS cluster to save costs; stopping halts the control plane, may change IP, and deprovisions VMs, with only user node pools stoppable via portal or CLI.
Understand basic Kubernetes objects and CRDs17:26
Kubectl and Visual Studio Code tips and tricks3:08
How to connect to AKS nodes4:23
Quick clarification on terminology1:46
Clarify key terminologies around Ingress API and Gateway API in Kubernetes, distinguishing the Ingress API's ingress and ingress class from the gateway resource and other Gateway API resources.
Understand Ingress API9:29
Understand Gateway API11:44
Compare Ingress and Gateway APIs7:47
What is the Azure Application Gateway for Containers?6:59
Understand the deployment strategies5:26
Compare AGC and AGIC and understand why to consider migrating to AGC7:13
Networking considerations6:00
Explore networking considerations for the application gateway for containers, including /24 subnet associations and data plane proxies routing traffic to pods via CNI in Kubernetes.
Create AKS and deploy the ALB Controller8:55
Create and use AGC using bring your own (BYO) deployment strategy10:58
Create and expose an Azure application gateway for containers using a bring your own deployment strategy and gateway API, configuring subnets, front ends, associations, and Kubernetes driven http routes.
Create and use AGC using managed by ALB controller deployment strategy10:55
Let's have a practical look at AGC's components2:04
Explore the Backend Health and Metrics via CLI5:13
Learn and explore the modifications to the request performed by AGC7:04
Explain how the application gateway for containers adds three headers—x-forwarded-for, x-forwarded-proto, and x-request-id—to route requests to Kubernetes pods, while the end user never sees them.
Deploy AGC in a different VNET than AKS's and use VNET peering7:29
Now that we've used AGC, what are the reasons to use it over other solutions?2:06
Clarifications on how we are going to work further2:10
Starting with AKS and Application Gateway for Containers quiz

[Gateway API] Basic Example5:39
Demonstrate a Gateway API setup for containers by creating an http route to expose a web app through the application gateway for containers, using path prefix and exact path types.
[Gateway API] Setup Own Domain with a CNAME record3:12
[Gateway API] Host Multiple Sites - Option 1 (Multiple Frontends)6:30
[Gateway API] Host Multiple Sites - Option 2 (Single Frontend)4:37
Host multiple websites using a single frontend on the gateway api for containers, wiring distinct http routes and hostnames via dns records to the same fqdn.
[Gateway API] URL / Path Based Routing4:25
[Gateway API] Header Based Routing5:41
[Gateway API] Query String Based Routing4:21
[Gateway API] Traffic Splitting / Weighted Round Robin Routing5:54
[Gateway API] Cross-Namespace Routing - Gateway Setup (Selected Namespaces)9:12
[Gateway API] Cross-Namespace Routing - Gateway Setup (Any Namespaces)4:48
[Gateway API] Cross-Namespace Routing - Understand and Use ReferenceGrant7:31
[Gateway API] AGC routing and other configurations quiz

[Ingress API] Basic Example2:31
[Ingress API] Setup Own Domain with a CNAME record3:14
[Ingress API] Host Multiple Sites using a Single Frontend3:47
Host multiple sites using a single application gateway for containers frontend with the gateway API, configuring two routing rules for distinct hosts that share the same fqdn.
[Ingress API] URL / Path Based Routing2:31
[Ingress API] AGC routing and other configurations quiz

Understand SSL Termination/Offloading in AGC3:04
Understand Mutual TLS (mTLS) in AGC10:02
Create a Self-Signed Certificate2:37
Learn how to create a self-signed certificate for testing and internal use, generating a 365-day RSA 2048 certificate with a wildcard common name and inspecting its details.
Setup a Bought/Paid Trusted TLS Certificate8:45
Setup and activate a bought single-domain ssl certificate for the LearnDash Azure domain, generate a csr with OpenSSL, complete domain validation, and download the crt and bundle files.
Create a Let's Encrypt TLS Certificate (manually)8:19
TLS Certificate Setup and Key Concepts quiz

[Gateway API] Setup SSL Termination/Offloading7:03
[Gateway API] Setup mTLS12:26
Learn to set up mTLS in the application gateway for containers with Gateway API, configuring front-end and back-end TLS using secrets, certificates, and a back-end policy for secure 443/8443 traffic.
[Gateway API] Use Multiple Certs in the Same Gateway to Expose Multiple Apps4:30
[Gateway API] Understand Security Model2:29
[Gateway API] Prepare the environment for Kubernetes RBAC6:00
[Gateway API] Implement a Security Model with Kubernetes RBAC in AKS14:47
[Gateway API] Implement Certificates and Security in AGfC quiz

Requirements

It is good to have basic knowledge of Containerization, Linux, Networking, Kubernetes, Azure, Application Gateway, and Azure Kubernetes Service (AKS) but I am explaining most of the concepts at specific points in the course

Description

Application Gateway for Containers is Application Gateway Ingress Controller (AGIC)'s successor.

This comprehensive course on Application Gateway for Containers provides in-depth knowledge and hands-on experience to effectively deploy and manage web applications in Azure. You will learn the fundamentals of containers, Kubernetes, Azure Kubernetes Service (AKS), and the Azure Application Gateway for Containers, and then dive into the intricacies of Application Gateway for Containers setup, configuration, and advanced usage scenarios.

Starting with an introduction to containers and microservices architecture, you will explore Docker, Docker Hub, and container app deployment. You will gain understanding of the Application Gateway for Containers and Azure Kubernetes Service (AKS), including basic Kubernetes objects as well as Gateway API and Ingress API.

You will learn Application Gateway for Containers components, how to use both deployment strategies (bring your own - BYO and managed by the ALB controller), how it routes the requests to the backend AKS pods, and more.

With a focus on routing and configuration, you will discover how to host multiple sites, implement URL/path- , header- or query string-based routing, as well as cross namespace routing, including using ReferenceGrant.

The course also covers SSL/TLS certificate creation and implementation of SSL Offloading/Termination and mutual TLS (mTLS). Additionally, because the Gateway API is role-oriented, we will implement a Security Model in AKS.

Monitoring and troubleshooting are also covered in detail.

By the end of this course, you will have the knowledge and skills to confidently deploy and manage web applications using Application Gateway for Containers, leverage advanced configuration options, ensure reliability and high availability, and effectively monitor and troubleshoot your deployments.

Join this course and unlock the power of Application Gateway for Containers to streamline your web application delivery!

Who this course is for:

Anyone that would like to expose containerized web application running in Azure
Anyone looking for a solution that supports Gateway API
Developers and architects interested in learning how to deploy and manage applications using Application Gateway for Containers
AKS/Kubernetes administrators or operators who want to understand how to integrate Application Gateway for Containers with their AKS/Kubernetes clusters for advanced layer 7 routing capabilities
DevOps engineers responsible for managing and optimizing application delivery in Azure Kubernetes Service (AKS) using Application Gateway for Containers
Anyone who is looking to learn a new skill

Azure Application Gateway for Containers (with Gateway API)

What you'll learn

Explore related topics

Course content

Introduction4 lectures • 10min

Understanding containers5 lectures • 33min

Starting with AKS and Application Gateway for Containers23 lectures • 2hr 37min

Custom Domain Configuration2 lectures • 6min

[Gateway API] AGC routing and other configurations11 lectures • 1hr 2min

[Ingress API] AGC routing and other configurations4 lectures • 12min

TLS Certificate Setup and Key Concepts5 lectures • 33min

[Gateway API] Implement Certificates and Security in AGC6 lectures • 47min

[Ingress API] Implement Certificates and Security in AGC1 lecture • 2min

Monitor and troubleshoot AGC4 lectures • 16min

Requirements

Description

Who this course is for: