Azure AKS App Gateway Ingress and Istio Ingress Gateway

3/5/2020

Is anyone tried to use this bundle? Main question if it's really make sense as long main advantage of App Gateway as K8S Ingress Controller is ability to connect directly to pods, avoiding NodePort schema. And in case of Istio Ingress Gateway we still have additional hop to pods, so L3 Azure ILB should be also fine?

-- abovesun
azure
azure-aks
istio
kubernetes
kubernetes-ingress

1 Answer

3/7/2020

I'd say that the main advantage of AGIC is not necessarily the ability to connect directly to pods but to be able to use the WAF functionality of the Application Gateway and have Microsoft support, which is sometime needed for big corpo. If you are not planning to use the WAF functionality of the Application Gateway, it don't really make sense to use AGIC instead of a L4 load balancer in front of the Istio Ingress Gateway.

-- Jean-Philippe Bond
Source: StackOverflow