DDoS Detection, Mitigation, Orchestration, and Threat Intelligence
Consolidated Security & CGNAT
TLS/SSL Inspection
Web Application Firewall
Application Security & Load Balancing
Analytics & Management
CGNAT & IPv6 Migration
Azure Kubernetes Service (AKS) helps users to deploy a managed Kubernetes cluster in Azure. AKS is available as a hosted Kubernetes free service. Users will need to pay for the agent nodes within the clusters.
A multi-container web application runs on the cluster for the users to access over the Internet.
The A10 Lightning ADCs daemon-set can be deployed in Kubernetes cluster to manage containerized application traffic in the cluster. The Lightning ADC management capabilities, include load balancing and application security. The A10 Harmony Controller provides centralized management for ADCs and analytics for the applications.
A10 Networks also provides an Ingress Controller for Kubernetes to its container-native load balancing and Application Delivery Controller platform. This allows load balancing of running Kubernetes services and a platform to extract performance metrics.
The Ingress Controller works with Ingress resources to automatically provision application delivery configuration and policies for a container. It can also dynamically update A10’s Lightning ADC load balancer as application services scale within a Kubernetes cluster. It also provides application analytics by collecting metrics that can be used to troubleshoot issues, manage capacity planning, and detect performance or security problems. This analytical data is available through the A10 Harmony portal or a set of APIs.
Optionally you can use the Azure CLI to create the cluster. However, once you have a cluster created you can install Kubernetes and Azure CLI installed on local system.
# az aks get-credentials --resource-group myResourceGroup --name myAKSCluster
If you are using Azure Cloud Shell, kubectl is already installed. If you want to install it locally. Once you have Kubernetes Cluster of nodes ready then you can create Lightning ADC daemon-set by generating Cluster-ID and API server URL parameters by using A10 Harmony Portal.
LADC_demon_Set.yaml file and input the ladc_cluster_id and API server URL details into the file and save the changes to the file.
# kubectl create -f /path_to_file/LADC_demon_Set.yaml
# kubectl create -f /path_to_file/secret.yaml
# kubectl create -f /path_to_file/deploy_ingress_controller.yaml
# kubectl create -f /path_to_file/ingress_resource.yaml
The A10 Harmony Controller portal, Analytics Dashboard shows the real-time application user traffic stats like, current traffic Throughput, Response time, connection details along with several metrics for different categories like Client summary, ADC performance, Application response time and Server Health etc.
The image below shows information summary about Client's Geo Location, Client Requests and Server Response codes, no of Client requests received by Lightning ADC. This helps admin to identify and control user traffic.
The image below shows the round-trip HTTP request-response time chart measured at different break-points. This helps the admin to visualize the network latency at each break-points providing a quick summary to quickly figure out if there are any issue and one needs to investigate.
The Azure AKS is a hosted service that is simple to deploy a managed Kubernetes node clusters in Azure it reduces the complexity and operational overhead of managing Kubernetes by offloading much of that responsibilities to Azure in addition the A10 Lightning ADC daemon-set load balance, monitors the application traffic and provides application security and granular analytics. The Ingress controller communicates the configuration specified in Ingress Resources to A10 Harmony Controller via Harmony APIs and creates required application configuration.
