Gateway【服务网关】 - 容器相关

---
#istio-ingressgateway【入口网关】
---
###入口网关HTTP
	apiVersion: networking.istio.io/v1alpha3
    kind: Gateway
    metadata:
      name: bookinfo-gateway
    spec:
      selector:
        istio: ingressgateway 
      servers:
      - port:
          number: 80
          name: http
          protocol: HTTP
        hosts:
        - "*"
		
---
###入口网关TLS直通
	apiVersion: networking.istio.io/v1alpha3
    kind: Gateway
    metadata:
      name: bookinfo-gateway
    spec:
      selector:
        istio: ingressgateway 
      servers:
      - port:
          number: 80
          name: https
          protocol: HTTPS     #TLS协议
        hosts:
        - wistio.cc
		tls:
		  mode: PASSTHROUGH    #TLS直通
---
###入口网关TLS终结【常用】
---
####作用：将服务网络内部的一个HTTP的服务通过Gateway发布为HTTPS外部访问
	apiVersion: networking.istio.io/v1alpha3
    kind: Gateway
    metadata:
      name: bookinfo-gateway
    spec:
      selector:
        istio: ingressgateway 
      servers:
      - port:
          number: 80
          name: https
          protocol: HTTPS     #TLS协议
        hosts:
        - wistio.cc
		tls:
		  mode: SIMPLE    #单向TLS
		  serverCertificate: /etc/istio/certs/server.pem
		  privateKey: /etc/istio/certs/server.key
---
	apiVersion: networking.istio.io/v1alpha3
    kind: Gateway
    metadata:
      name: bookinfo-gateway
    spec:
      selector:
        istio: ingressgateway 
      servers:
      - port:
          number: 80
          name: https
          protocol: HTTPS     #TLS协议
        hosts:
        - wistio.cc
		tls:
		  mode: MUTUAL    #双向TLS
		  serverCertificate: /etc/istio/certs/server.pem
		  privateKey: /etc/istio/certs/server.key
		  caCertificates: /etc/istio/certs/kehu_server.pem   #客户端证书

---
#istio-egressgateway【出口网关】
---
###出口网关HTTP
    apiVersion: networking.istio.io/v1alpha3
      kind: Gateway
      metadata:
        name: egressgateway-http
      spec:
        selector:
          istio: egressgateway
        servers:
        - hosts:
          - api.forecast.weather
          port:
            number: 1031
            name: http
            protocol: HTTP    #HTTP协议
	
---
###对应VirtualService
    apiVersion: networking.istio.io/v1alpha3
    kind: VirtualService
    metadata:
      name: egress-weatherdb
    spec:
      gateways:
      - istio-system/egressgateway-http
      - mesh
      hosts:
      - api.forecast.weather
      http:
      - match:
        - gateways:
          - mesh
          port: 9999   #Service Entry的服务端口
        route:
        - destination:
            host: egressgateway-http.istio-system.svc.cluster.local
            port:
              number: 80  #Egress Gateway的服务端口
    #内部流量：这个路由的gateways是mesh关键字,表示来自服务网络内部的流量，这类流量在访问api.forecast.weather这个外部地址时将被转发到Egress-gateway
      - match:
        - gateways:
          - istio-system/egressgateway-http
          port: 1031   #Egress Gateway的目标端口
        route:
        - destination:
            host: api.forecast.weather
            port:
              number: 9999  #Service Entry的服务端口
    #外部流量：这个路由匹配的gateways是egressgateway-http,表示匹配来自Egress-gateway的流量将被路由到服务网络外部服务api.forecast.weather

---
###出口网关TLS
    apiVersion: networking.istio.io/v1alpha3
    kind: DestinationRule
    metadata:
      name: originate-tls-dr
    spec:
      host: api.forecast.weather
      trafficPolicy:
        portLevelSettings:
        - port:
            number: 9999
          tls:
            mode: SIMPLE
            sni: api.forecast.weather