Let me handle that for you... Why you need a reverse proxy in your architecture. Containers are the runtime for distributed apps - that's old .NET monoliths being broken down into multiple components, as well as new .NET Core microservices projects. Your orchestrator can connect containers together without making any of them publicly accessible, so you can make your entire app private with just a single, secure entrypoint to your application. That's a reverse proxy, a piece of software which receives all external network traffic and fetches the response from a private container, before sending it back to the client. You can offload a lot of concerns to your reverse proxy and keep your application code clean - the proxy handles SSL, compression, load-balancing, routing and healthchecks. In this session you'll see the popular open-source reverse proxy Traefik in action. I'll use Traefik as the front-end to distributed .NET applications running in a Docker cluster, and show you to add the features of a reverse proxy without any changes to application code.

1. Let me handle that for you…
Why you need a reverse proxy in your architecture
@EltonStoneman | elton@docker.com | #BuildStuffLT

2. • Understanding reverse proxies
• Proxying HTTP anywhere: Nginx
• Container-native proxies: Traefik

3. docker.com
blog.sixeyed.com
kubernetes.io

4. docker.com
blog.sixeyed.com
kubernetes.io
proxy
• Policies
• Auditing
• Caching

5. dak4.net
blog.sixeyed.com
eltonstoneman.com

6. dak4.net
blog.sixeyed.com
eltonstoneman.com
reverse-proxy
• Policies
• Auditing
• Caching
• Routing
• Load-balancing
• SSL, headers…

7. reverse-proxy
workshop
blog
website
• dak4.net
• blog.sixeyed.com
• eltonstoneman.com

8. reverse-proxy
website
api1
api2
• eshop.com
api3

9. reverse-proxy
website
api1
api2
• eshop.com
• eshop.com/api
api3

10. reverse-proxy
monolith
• monolith.com

11. reverse-proxy
monolith
• monolith.com
• monolith.com/new
new-feature

12. NGINX (pr. engine-x)
• Fast lightweight HTTP server
• Static configuration
• Easily containerized
• Open source & commercial

13. nginx
website
api1
api2
api3
• nginx.conf
• TCP/IP

15. • Routing
• Load-balancing
• Caching
• SSL
nginx
todo
pi
blog

16. • Routing
• Load-balancing
• Caching
• SSL
• High Availability
nginx
todo
pi
blog

17. • Routing
• Load-balancing
• Caching
• SSL
• High Availability
nginx.dmz
todo.internal
pi.internal
blog.internal

18. Traefik (pr. traffic … or tray-fik)
• Container-native reverse proxy
• Dynamic configuration
• Easy orchestrator integration
• Open source & commercial

19. traefik
website
api1
api2
api3
• Platform
integration

21. • Routing
• Load-balancing
• Caching
• SSL
traefik
todo
pi
blog

22. • Routing
• Load-balancing
• Caching
• SSL
• High Availability
traefik
todo
pi
blog

23. REVERSE PROXY BENEFITS
• Centralized infrastructure
• Improved performance & HA
• Native container ingress
• DMZ for app containers

24. REVERSE PROXY PATTERNS
• Multiple apps
• Microservices
• Monolith decomposition
• API gateway & WAF

25. NEXT STEPS
• Today’s demos | is.gd/95WQhY
• Docker and Kubernetes for .NET Devs | dak4.net
• Learn Docker in a Month of Lunches | is.gd/xZ8HiC
• Manning 40% code | ctwbuild19

26. THANK YOU :)
@EltonStoneman | elton@docker.com | #BuildStuffLT