Azure Application Gateway For Containers (With Gateway Api)

A Comprehensive and Practical Course: Containers, K8s, AKS, Gateway API, Web Applications, Routing, Security, Monitoring

What you'll learn

Containerization, Kubernetes and AKS basics

What Gateway API and Ingress API are

What Application Gateway for Containers is, networking considerations, deployment methods

How to setup Application Gateway for Containers routing using both Gateway and Ingress APIs

How to expose applications via custom domain name

How to create multiple types of TLS/SSL certificates and expose applications via HTTPS, using TLS/SSL termination or mTLS

Gateway API security model and how to implement it in AKS

How to monitor and troubleshoot the Application Gateway for Containers and its traffic

Requirements

It is good to have basic knowledge of Containerization, Linux, Networking, Kubernetes, Azure, Application Gateway, and Azure Kubernetes Service (AKS) but I am explaining most of the concepts at specific points in the course

Description

Application Gateway for Containers is Application Gateway Ingress Controller (AGIC)'s successor.This comprehensive course on Application Gateway for Containers provides in-depth knowledge and hands-on experience to effectively deploy and manage web applications in Azure. You will learn the fundamentals of containers, Kubernetes, Azure Kubernetes Service (AKS), and the Azure Application Gateway for Containers, and then dive into the intricacies of Application Gateway for Containers setup, configuration, and advanced usage scenarios.Starting with an introduction to containers and microservices architecture, you will explore Docker, Docker Hub, and container app deployment. You will gain understanding of the Application Gateway for Containers and Azure Kubernetes Service (AKS), including basic Kubernetes objects as well as Gateway API and Ingress API.You will learn Application Gateway for Containers components, how to use both deployment strategies (bring your own - BYO and managed by the ALB controller), how it routes the requests to the backend AKS pods, and more.With a focus on routing and configuration, you will discover how to host multiple sites, implement URL/path- , header- or query string-based routing, as well as cross namespace routing, including using ReferenceGrant. The course also covers SSL/TLS certificate creation and implementation of SSL Offloading/Termination and mutual TLS (mTLS). Additionally, because the Gateway API is role-oriented, we will implement a Security Model in AKS.Monitoring and troubleshooting are also covered in detail.By the end of this course, you will have the knowledge and skills to confidently deploy and manage web applications using Application Gateway for Containers, leverage advanced configuration options, ensure reliability and high availability, and effectively monitor and troubleshoot your deployments.Join this course and unlock the power of Application Gateway for Containers to streamline your web application delivery!

Overview

Section 1: Introduction

Lecture 1 Meet the Instructor

Lecture 2 Understanding the Path Ahead: Course Curriculum Overview

Lecture 3 Good to know / Recommended background

Lecture 4 Connect with me

Section 2: Understanding containers

Lecture 5 What is a container and how is it different from a VM?

Lecture 6 Microservices architecture

Lecture 7 Install Docker and Azure CLI on an Ubuntu VM and other considerations

Lecture 8 What are Docker, Dockerfile, and Docker Hub?

Lecture 9 Creating a container app (web app), pushing it to Docker Hub and running it

Section 3: Starting with AKS and Application Gateway for Containers

Lecture 10 What are Kubernetes and Azure Kubernetes Service (AKS)?

Lecture 11 Create and explore an Azure Kubernetes Service (AKS)

Lecture 12 How and why to Stop/Start the AKS cluster

Lecture 13 Understand basic Kubernetes objects and CRDs

Lecture 14 Kubectl and Visual Studio Code tips and tricks

Lecture 15 How to connect to AKS nodes

Lecture 16 Quick clarification on terminology

Lecture 17 Understand Ingress API

Lecture 18 Understand Gateway API

Lecture 19 Compare Ingress and Gateway APIs

Lecture 20 What is the Azure Application Gateway for Containers?

Lecture 21 Understand the deployment strategies

Lecture 22 Compare AGfC and AGIC and understand why to consider migrating to AGfC

Lecture 23 Networking considerations

Lecture 24 Create AKS and deploy the ALB Controller

Lecture 25 Create and use AGfC using bring your own (BYO) deployment strategy

Lecture 26 Create and use AGfC using managed by ALB controller deployment strategy

Lecture 27 Let's have a practical look at AGfC's components

Lecture 28 Explore the Backend Health and Metrics via CLI

Lecture 29 Learn and explore the modifications to the request performed by AGfC

Lecture 30 Deploy AGfC in a different VNET than AKS's and use VNET peering

Lecture 31 Now that we've used AGfC, what are the reasons to use it over other solutions?

Lecture 32 Clarifications on how we are going to work further

Section 4: Custom Domain Configuration

Lecture 33 Configure a custom domain with the help of an Azure Public DNS zone

Lecture 34 How to use your own domain in AGfC

Section 5: [Gateway API] AGfC routing and other configurations

Lecture 35 [Gateway API] Basic Example

Lecture 36 [Gateway API] Setup Own Domain with a CNAME record

Lecture 37 [Gateway API] Host Multiple Sites - Option 1 (Multiple Frontends)

Lecture 38 [Gateway API] Host Multiple Sites - Option 2 (Single Frontend)

Lecture 39 [Gateway API] URL / Path Based Routing

Lecture 40 [Gateway API] Header Based Routing

Lecture 41 [Gateway API] Query String Based Routing

Lecture 42 [Gateway API] Traffic Splitting / Weighted Round Robin Routing

Lecture 43 [Gateway API] Cross-Namespace Routing - Gateway Setup (Selected Namespaces)

Lecture 44 [Gateway API] Cross-Namespace Routing - Gateway Setup (Any Namespaces)

Lecture 45 [Gateway API] Cross-Namespace Routing - Understand and Use ReferenceGrant

Section 6: [Ingress API] AGfC routing and other configurations

Lecture 46 [Ingress API] Basic Example

Lecture 47 [Ingress API] Setup Own Domain with a CNAME record

Lecture 48 [Ingress API] Host Multiple Sites using a Single Frontend

Lecture 49 [Ingress API] URL / Path Based Routing

Section 7: TLS Certificate Setup and Key Concepts

Lecture 50 Understand SSL Termination/Offloading in AGfC

Lecture 51 Understand Mutual TLS (mTLS) in AGfC

Lecture 52 Create a Self-Signed Certificate

Lecture 53 Setup a Bought/Paid Trusted TLS Certificate

Lecture 54 Create a Let's Encrypt TLS Certificate (manually)

Section 8: [Gateway API] Implement Certificates and Security in AGfC

Lecture 55 [Gateway API] Setup SSL Termination/Offloading

Lecture 56 [Gateway API] Setup mTLS

Lecture 57 [Gateway API] Use Multiple Certs in the Same Gateway to Expose Multiple Apps

Lecture 58 [Gateway API] Understand Security Model

Lecture 59 [Gateway API] Prepare the environment for Kubernetes RBAC

Lecture 60 [Gateway API] Implement a Security Model with Kubernetes RBAC in AKS

Section 9: [Ingress API] Implement Certificates and Security in AGfC

Lecture 61 [Ingress API] Setup SSL Termination/Offloading

Section 10: Monitor and troubleshoot AGfC

Lecture 62 Troubleshooting Basics (controller logs, backend health, errors, K8s resources)

Lecture 63 Activity Logs in AGfC

Lecture 64 Diagnose and Solve Problems in AGfC

Lecture 65 Metrics Explorer in AGfC

Section 11: Course Wrap-Up: Gratitude and Resource Management

Lecture 66 Course Wrap-Up: Gratitude and Resource Management

Section 12: Continue Your Learning Journey: Special Offer Inside

Lecture 67 Continue Your Learning Journey: Special Offer Inside

Anyone that would like to expose containerized web application running in Azure,Anyone looking for a solution that supports Gateway API,Developers and architects interested in learning how to deploy and manage applications using Application Gateway for Containers,AKS/Kubernetes administrators or operators who want to understand how to integrate Application Gateway for Containers with their AKS/Kubernetes clusters for advanced layer 7 routing capabilities,DevOps engineers responsible for managing and optimizing application delivery in Azure Kubernetes Service (AKS) using Application Gateway for Containers,Anyone who is looking to learn a new skill