Painless NGINX Ingress

Re:Painless NGINX Ingress by fulafel on Wednesday September 13, 2017 @11:59PM (#15244907)

I think your viewpoint might be somewhat inflexible if routing logic in the client & server looks like "faking a reverse proxy" to you. That's where the rest of the logic is, after all, and when designing systems we generally prefer to have the logic in fewer places.

It's a proven design rule (the end-to-end principle) to prefer the smarts at the edges of your system, and the problems stemming from the reverse proxy described in the article, in my book, counts as further evidence for this idea.

[ Parent | on HN ]

Re:Painless NGINX Ingress by manigandham on Thursday September 14, 2017 @01:04AM (#15245138)

> prefer the smarts at the edges of your system

That's exactly what reverse proxies do - leaving the internal apps free to just serve requests instead of worrying about the perimeter.

The problems described in this article have nothing to do with reverse proxies but rather the ingress controller and config settings.

[ Parent | on HN ]

Re:Painless NGINX Ingress by fulafel on Thursday September 14, 2017 @09:42AM (#15247888)

Reverse proxies making routing decisions based on request content and making server load balancing decisions is putting policy in the middle.

[ Parent | on HN ]