Cloud-native API Gateway is compatible with Kubernetes Ingresses and can discover services that are deployed on Container Service for Kubernetes (ACK) and Nacos. Cloud-native API Gateway also provides various security and O&M capabilities. This topic describes how to create a Cloud-native API Gateway instance.
Procedure
Log on to the Cloud-native API Gateway console. If you are using Cloud-native API Gateway for the first time, you must perform the following operations:
Activate the service: Cloud-native API Gateway can be activated free of charge.
Attach service-linked roles: The system prompts you to attach the
AliyunServiceRolePolicyForNativeApiGw
andAliyunServiceRolePolicyForNativeApiGwInvokeFC
service-linked roles to allow Cloud-native API Gateway to access resources in other Alibaba Cloud services and Function Compute.Go to the console: On the page that shows successful activation, click the console button to go to the Cloud-native API Gateway console.
In the left-side navigation pane, click Instance. In the top navigation bar, select a region. Then, click Create Instance.
On the buy page, configure the parameters and click Buy Now.
Parameter
Description
Product Type
The billing method of the instance. Cloud-native API Gateway instances support two billing methods: pay-as-you-go and subscription. For more information about the billing methods, see Billing overview.
Region
The region in which you want to create the instance. For more information, see Supported regions.
ImportantAfter you create the instance, you can no longer change the region for the instance.
Instance Name
The custom name of the instance. The name must be 1 to 64 characters in length. We recommend that you use a name that indicates the environment or the environment and business type. Example: test or order-prod.
Instance Specification
The instance specification. You can select a specification based on your business requirements. For more information about the capacity thresholds of different instance specifications, see Capacities.
Resource Group
The resource group to which the instance belongs. The default resource group or an existing resource group is supported. To create a resource group, click Create Resource Group.
NoteYou can use the resource group to manage resources of your Alibaba Cloud account. This way, you can centrally manage permissions, deploy resources, or monitor resources.
Network Type
The network over which your instance will be accessed. Options: Public, Private, and Public + Private.
Internet: If you select Internet, Cloud Data Transfer (CDT) provides BGP (Multi-ISP) services for your access and charges public traffic fees. For more information, see Internet data transfers.
Private Network: If you select Private Network, data is transferred over the private network free of charge.
Public + Private:
If you select Public + Private, data can be transferred over the Internet or the private network. Data transferred over the Internet is charged public traffic fees by CDT, which provides BGP (Multi-ISP) services for your access. Data transferred over the private network is free of charge.
Private Network
The virtual private cloud (VPC) in which your instance runs.
To create a VPC, click Create VPC to go to the VPC console.
If you require an AI gateway, make sure that a Network Address Translation (NAT) gateway is created. To create a NAT gateway, go to the VPC console.
NoteThe Cloud-native API Gateway instance must reside in the same VPC as the service to be accessed by the instance.
Select Zone
The method in which you want zones to be assigned to deploy your gateway nodes. Options: Auto-assign and Manually Select.
Auto-assign: You select a vSwitch and the system automatically allocates two zones to deploy your gateway nodes.
Manually Select: You manually select zones and vSwitches to deploy your gateway nodes.
vSwitch
The vSwitch to be used by the Cloud-native API Gateway instance. To create a vSwitch, click go to the console.
Simple Log Service
Specifies whether to activate Simple Log Service and enable log shipping to help you analyze logs and visualize data on dashboards. For more information, see Enable log shipping for a Cloud-native API Gateway instance.
Service-linked Role
The service-linked role that is automatically created. You can use the service-linked role to authorize Cloud-native API Gateway to access other Alibaba Cloud services.
On the Confirm Order page, check the configuration details of the instance and click Activate Now.
NoteInstance creation may require one to five minutes to complete.
Return to the Instance page. Check whether the instance is created and in the Running status.
What to do next
Cloud-native API Gateway supports multiple API types, including AI API, REST API, HTTP API, and WebSocket API. You can configure routing rules or policies for different types of APIs based on your business requirements.
You can create a service to add a backend service to your instance. Then, the instance can obtain and centrally manage the endpoints of backend services.
If you require routing to allow external access to your internal service, see For more information about how to configure a gateway route for external access to internal services, see Access applications in ACK by using an HTTP API.
For more information about the frequently asked questions (FAQ) about using Cloud-native API Gateway. see FAQ.