Gloo is a Envoy Proxy based API Gateway that connects, secures and controls the traffic across legacy monoliths, microservices and serverless applications. Attend this session for: - An overview of Gloo's control plane architecture - The latest enhancements - Use cases for modern API Gateways Learn More: * About Gloo - https://solo.io/products/gloo * Join the Community - https://slack.solo.io * Docs - https://docs.solo.io/gloo/latest/ * Watch the Replay - https://www.youtube.com/playlist?list=PLBOtlFtGznBgy9f1fc9MTh48jq-uR0dA2

1. 1 | Copyright © 20191 | Copyright © 2019
Gloo 1.0 - Production Ready API Gateway
Overview and Demo
Dec 5, 2019
Betty Junod
VP Marketing
@bettyjunod
Rick Ducott
Director Engineering
@ducott

2. 2 | Copyright © 2019
The IT Transformation Journey
MODERNIZE TO
MICROSERVICES
SERVICE MESH
MANAGEMENT
ADAPTIVE
SERVICE MESH

3. 3 | Copyright © 2019
The Problem with Microservices

4. 4 | Copyright © 2019
Cloud-native API Gateway and
Ingress Controller
• Built with Envoy Proxy
• Kubernetes-native
• Pluggable and extensible
Connect, Secure, and Control any
application traffic

5. 5 | Copyright © 2019
Gloo Architecture
High Performance, Scalable, Extensible
Gloo architecture decouples
the control plane and data
plane
Gloo configures and enforces Envoy
Proxy behavior with filters
Envoy Proxy filters and routes incoming
traffic requests to the service and
presents the response
Envoy Proxy gathers data and sends to
Gloo for observability and monitoring
1 1
2
2
3
3

6. 6 | Copyright © 2019
Manage traffic to any application CONNECT
CACHES
DATABASES
MESSAGE QUEUES
• Automatic Service Discovery
• HTTP and TCP Routing
• gRPC Web
• CORS
• Kubernetes Services
• HashiCorp Consul Services
• Configuration Validation
• Request Transformation
• Service Mesh Integration

7. 7 | Copyright © 2019
Security first design for safer applications SECURE
AUTHN / AUTHZ
POLICY
ENCRYPTION
DDOS PROTECTION
Bring your own
Basic Auth
Custom Auth
API
Key
DEX
JWT
LDAP
OIDC
CORS
Delegation
KeyCloak
Open Policy Agent
RBAC
Circuit Breaking
Rate Limiting
Web Application Firewall
TLS
mTLS
Let’s Encrypt

8. 8 | Copyright © 2019
Web Application Firewall (WAF)
Prevent harmful traffic from entering
your environment
• Implements Modsecurity open source WAF
and Core Rule Set (CRS)
• Inspects, monitors and blocks traffic
• Applies to all inbound and outbound traffic
SECURE

9. 9 | Copyright © 2019
DIY, Basic, Custom Auth and out of the box
integrations to leading Auth systems
Authentication
Identify and verify before granting access
API Key Auth Plugin
SECURE

10. 10 | Copyright © 2019
Traffic Shaping and Management CONTROL
Circuit Breaking
Retries
Timeouts
Traffic Shifting
Traffic Shadowing
Rate Limiting Improve application resilience, ensure
smoother and safer deployments and
protect application services

11. 11 | Copyright © 2019
Route Delegation CONTROL
• Delegate ownership of specific routes for a
domain to a route table
• Protect root level access to a domain with
RBAC on the virtual service
• Simplify setting and sharing configurations
across teams and individuals
ORG
TEAM 2
GROUP A GROUP B
TEAM 1

12. 12 | Copyright © 2019
Management UI CONTROL
Quickly view and share system
status and health
• Admin dashboard
• Access logging
• Tracing
• Prometheus and Grafana
• Usage Statistics

13. 13 | Copyright © 2019
Integrate to Any System CONTROL

14. 14 | Copyright © 2019
Demo

15. 15 | Copyright © 2019
Use Cases - How can you use Gloo
API GATEWAY KUBERNETES
INGRESS
SERVICE MESH
INTEGRATION
KNATIVE
SERVING

16. 16 | Copyright © 2019
Available in Open Source and Enterprise

17. 17 | Copyright © 2019
Thank You -- Community and Ecosystem
March 2018
Gloo Open Sourced
December 2018
Gloo Enterprise Announced
November 2019
Gloo 1.0 Released
● 1900+ GitHub Stars
● 1700+ Pull Requests
● 1100+ Issues Filed

18. 18 | Copyright © 2019
LEARN MORE
solo.io/gloo
GLOO ENTERPRISE TRIAL
solo.io/gloo-trial
SOLO COMMUNITY
slack.solo.io
Thank You!