All Products
Search

This Product

    Microservices Engine:Create an MSE cloud-native gateway

    Document Center

    Microservices Engine:Create an MSE cloud-native gateway

    Last Updated:Sep 09, 2024

    Cloud-native gateways of Microservices Engine (MSE) are compatible with Kubernetes Ingresses. Cloud-native gateways can discover services from different sources such as Container Service for Kubernetes (ACK) and Nacos. Cloud-native gateways provide various security and O&M capabilities. This topic describes how to create an MSE cloud-native gateway.

    Procedure

    1. Create a cloud-native gateway by using one of the following methods:

      • Create a cloud-native gateway on the MSE product page.

        1. Go to the MSE product page.

        2. On the MSE product page, click Buy Now. On the page that appears, click the Cloud-native Gateway tab.

      • Create a cloud-native gateway in the MSE console.

        1. Log on to the MSE console.

        2. In the left-side navigation pane, choose Cloud-native Gateway > Gateways.

        3. In the top navigation bar, select a region.

        4. In the upper-left corner of the Gateways page, click Create Gateway.

    2. On the buy page, configure the parameters and click Buy Now.

      Parameter

      Description

      Billing Method

      Select Subscription or Pay-as-you-go.

      Region

      Select the region in which you want to deploy the gateway.

      Gateway Name

      Enter a name for the gateway. The name must be 1 to 64 characters in length. We recommend that you configure the gateway name based on the environment or the type of your business, such as test or order-prod.

      Gateway Engine Specifications

      Select the specifications of the gateway engine. You can select one of the following specifications: 2 Cores, 4 GB, 4 Cores, 8 GB, 8 Cores, 16 GB, and 16 Cores, 32 GB.

      Gateway Nodes

      Specify the number of gateway nodes. If you want to deploy the gateway in a production environment, we recommend that you configure at least two nodes.

      Note

      A single-node gateway may result in business interruptions. We recommend that you do not configure a single-node gateway.

      Hardware Acceleration

      Select Enable TLS Hardware Acceleration to enable TLS hardware acceleration. This way, the handshake performance of TLS is doubled.

      Note

      TLS hardware acceleration is available only in specific regions due to the limits on underlying hardware. For more information about the supported regions, see Limits.

      Resource Group

      Select a resource group from the drop-down list.

      VPC

      Select the virtual private cloud (VPC) in which the backend services are deployed.

      Gateway Ingress Type

      • NLB: For more information, see What is NLB?

      • CLB: For more information, see Billing overview.

      • None: Server Load Balancer (SLB) instances are not used as the gateway ingress. You can change the gateway ingress type on the Gateways page in the MSE console.

      Gateway Ingress Billing Method

      Only Pay by Usage is supported.

      Zone Location

      Select Manual Selection or Automatic Allocation.

      • Manual Selection: Select Zone and then select a vSwitch.

      • Automatic Allocation: Select a vSwitch.

      Zone

      Cloud-native gateways use the vSwitches in VPCs to communicate with backend services. We recommend that you select a vSwitch that is deployed in the same zone as the backend services.

      vSwitch

      Select a vSwitch in the VPC or create a vSwitch.

      Network Type

      • Internet: Select this option if you want to access the gateway over the Internet.

      • Private Network: Select this option if you want to access the gateway over a VPC.

      • Private Network and Internet: Select this option if you want to access the gateway over both the Internet and a VPC. The system automatically creates an Internet-facing SLB instance and an internal-facing SLB based on the selected SLB instance type.

      Security Group Type

      Select a security group type for your gateway. The default type is Advanced Security Group. We recommend that you select the same security group type as the Elastic Compute Service (ECS) instance on which backend services are deployed. For more information, see Overview.

      Gateway Monitoring

      By default, Managed Service for Prometheus is activated. This service collects the metric data of gateways, displays data on dashboards, and manages alerts. You can use Managed Service for Prometheus free of charge.

      Log Service

      Select Use Log Service to activate Simple Log Service and enable log shipping to help you analyze logs and visualize data on dashboards. For more information, see Enable log shipping for a cloud-native gateway.

      Tracing Analysis

      Select Use Managed Service for OpenTelemetry to activate Alibaba Cloud Managed Service for OpenTelemetry and enable the gateway tracing analysis feature. For more information, see Enable Tracing Analysis for a cloud-native gateway.

      Service-linked Role

      A service-linked role is automatically created to allow the MSE cloud-native gateway to access other Alibaba Cloud services.

      Duration

      If you select Subscription for Billing Method, you must select a duration. You can select Auto-renewal to continue to use the gateway after the gateway expires.

      Note

      The system may require 2 minutes to 3 minutes to create the cloud-native gateway.