2. Traefik2.0使用

1. 创建IngressRoute

IngressRoute 是traefik2.0新增的Kubernetes，自定义资源（CRD），如果想使用ingress资源请查看 3. ingress使用

1.1 简单ingressRoute

1.1.1 创建域名的ingressRoute

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: http-redirect-ingressroute
spec:
  entryPoints:
    - web
  routes:
    - match: Host(`test.persagy.com`) && PathPrefix(`/data-platform-3`)
      kind: Rule
      services:
        - name: data-platform-3
          port: 8080
    # 多个依次如下
    - match: Host(`test.persagy.com`) && PathPrefix(`/workorder`)
      kind: Rule
      services:
        - name: nginx
          port: 9909

1.1.2 使用中间件的ingressRoute

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: http-redirect-ingressroute
spec:
  entryPoints:
    - web
  routes:
    - match: PathPrefix(`/data-platform-3`)
      kind: Rule
      services:
        - name: data-platform-3
          port: 8080
      middlewares:
        - name: admin-stripprefix
    - match: PathPrefix(`/workorder`)
      kind: Rule
      services:
        - name: nginx
          port: 9909
      middlewares:
        # - name: request-cors
        - name: path-replacepath
        - name: request-cors

2. 中间件

2.1 去除前缀或指定路径

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: admin-stripprefix
spec:
  stripPrefix:
    prefixes:
      - /data-platform-3
      - /image-service

2.2 替换路径中间件

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: path-replacepath
spec:
  replacePathRegex:
    regex: ^/workorder/(.*)
    replacement: /report-manager/$1

2.3 解决跨域问题

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: request-cors
spec:
  headers:
    accessControlAllowMethods:
      - "GET"
      - "POST"
      - "OPTIONS"
      - "PUT"
    accessControlAllowOriginList:
      - "*"
    accessControlMaxAge: 1000
    addVaryHeader: true
    accessControlAllowHeaders: 
      - "*"
    accessControlAllowCredentials: true

2.4 增加请求大小设置

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: limit
spec:
  buffering:
    maxRequestBodyBytes: 10485760
    memRequestBodyBytes: 2097152
    maxResponseBodyBytes: 10485760
    memResponseBodyBytes: 2097152
    retryExpression: "IsNetworkError() && Attempts() < 2"

2.5 压缩请求内容

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: compress
spec:
  compress: {}

2.6 请求并发数

限制同时请求数，为了主动防止服务因高负载而不堪重负，可以限制允许的同时进行中的请求数。

apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: test-inflightreq
spec:
  inFlightReq:
    amount: 100

2.7 请求速率

限制通话频率, 为了主动防止服务因高负载而不堪重负，可以限制允许的同时进行中的请求数。

# Here, an average of 100 requests per second is allowed.
# In addition, a burst of 50 requests is allowed.
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: test-ratelimit
spec:
  rateLimit:
    average: 100
    burst: 200
    period: 10s

2.8 重试（重新连接）

如果后端服务器没有回复，重试中间件向后端服务器重新发出给定次数的请求。 服务器一响应，中间件就会停止重试，无论响应状态如何。 Retry 中间件有一个可选配置来启用指数退避。

# Retry 4 times with exponential backoff
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: retry
spec:
  retry:
    attempts: 4
    initialInterval: 100ms

2.9 重定向

将客户端重定向到不同的方案/端口

RedirectScheme 将请求从一个方案/端口重定向到另一个。

# Redirect to https
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: test-redirectscheme
spec:
  redirectScheme:
    scheme: https
    permanent: true
    port: "443"

3. 使用Ingress

3.1 使用中间件进行请求过滤的ingress

kind: Ingress
apiVersion: networking.k8s.io/v1beta1
metadata:
  name: myingress
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: web
    # middleware创建的名称空间-middleware名称@kubernetescrd
    # wd-path-replacepath@kubernetescrd
    traefik.ingress.kubernetes.io/router.middlewares: wd-path-replacepath@kubernetescrd,wd-request-cors@kubernetescrd
    traefik.ingress.kubernetes.io/router.middlewares: test-stripprefixregex@file
spec:
  rules:
    - host:
      http:
        paths:
          - path: /workorder
            backend:
              serviceName: nginx
              servicePort: 9909