What API Gateway do you use for your cluster and why?
I´m currently looking for a easy to use API Gateway with JWT authentication that is easy to use and has a low memory footprint.
Which one do you use and why can you recommend it?
I´m currently looking for a easy to use API Gateway with JWT authentication that is easy to use and has a low memory footprint.
Which one do you use and why can you recommend it?
Do you mean a cloud service or a framework ?
I´m talking about something like Kong that can run as an ingress controller
You'd be best to separate the ingress controller from the api gateway. You don't want panics on upgrading a behemot monolith service and take your hole infrastructure down.
ahhh .. im primarily on AWS and not really sure about source options on the same . NGINX ingress looks good.
NGINX ingress has no auth as far as I know. You´d still need some external service to handle that
Express Gateway if you want to handle yourself and get hands really dirty.
Most of the others try to do way to much then an API Gateway must be responsible for, which for easier maintenance are idially separate services.
I started with it my project and as I progressed allowed me to search and bring better other components in place that I fully trust they do their thing better.
For JWT auth, you probably don't need a hosted API Gateway service.
Depending on the language you're coding in, there should be a library that can both encode and decode JWT tokens.
You could then choose to store the JWT token in a cookie (web only) or pass it manually using the Authorization header. The latter would work for web or mobile apps.
I´m on Digital Ocean and they don´t provide any hosted API gateway, which is why I wanted to deploy my own inside my cluster. I don´t want to do auth on all of my services
Ah sounds like you're running a microservice architecture. In that case, the options are:
Disclaimer: My current project, Lightfront, is a somewhat related competitor to all of these. Though my product focuses on authentication via API keys rather than JWT.