Gateway management is the set of tasks that you perform to put an MSE cloud-native gateway into service and keep it running: creating the gateway, connecting it to request ingress, adjusting its parameters, observing its traffic, and protecting the services behind it. The following sections describe each task and link to the detailed instructions.
The sections are ordered by the sequence in which the tasks are typically performed, starting with gateway creation and inspection and continuing with tasks such as request ingress and traffic migration, runtime configuration, observability, and protection. Creating a gateway is a prerequisite for every other task in this topic. Which of the remaining tasks apply depends on how your gateway and your backend services are deployed, and on which capabilities you need.
Create a cloud-native gateway
A cloud-native gateway instance is the resource that every other task in this topic operates on. Create the instance before you configure, observe, or protect anything else. For instructions, see Create a cloud-native gateway.
View gateway details
After a cloud-native gateway is created, you can view its Basic Information, Ingresses, and Security Group Authorization. Viewing the details does not change the gateway configuration: the ingress and security group settings are managed by the separate tasks described in this topic. For more information, see View gateway details.
Manage gateway ingress SLB instances
MSE cloud-native gateways use Alibaba Cloud Server Load Balancer (SLB) to distribute requests and manage traffic. You can associate one or more Internet-facing or internal SLB instances with a gateway instance, and update the association when your ingress requirements change. For instructions, see Manage gateway ingress SLB instances.
Migrate traffic to a gateway
When you replace an existing gateway with an MSE cloud-native gateway, you do not have to switch all traffic at once. You can gradually migrate traffic from other types of gateways to an MSE cloud-native gateway at a specified ratio. For instructions, see Migrate a CLB instance.
Modify gateway parameters
You can adjust the parameters of a cloud-native gateway to improve the network performance, reliability, and security of the gateway. For instructions, see Modify gateway parameters.
View gateway monitoring data
You can view the monitoring data of a cloud-native gateway, including log analysis, global dashboards, resource monitoring, and top business lists. For more information, see View gateway monitoring data.
Enable log delivery for a gateway
Log delivery is a feature that integrates MSE cloud-native gateways with Alibaba Cloud Simple Log Service (SLS). After you enable log delivery, you can analyze the access logs of the gateway to learn client behavior and the geographical distribution of clients, which helps you troubleshoot issues. For instructions, see Enable log delivery for a gateway.
Enable Tracing Analysis for a gateway
MSE cloud-native gateways provide Tracing Analysis through integration with Alibaba Cloud Managed Service for OpenTelemetry and SkyWalking. Enable Tracing Analysis to analyze and diagnose performance bottlenecks in a distributed application architecture. For instructions, see Enable Tracing Analysis for a gateway.
Configure security group rules for a gateway
If a cloud-native gateway and the node where your backend service is deployed belong to different security groups, configure a security group rule to grant the gateway permission to access the backend service. For instructions, see Configure security group rules.
Enable Web Application Firewall for a gateway
MSE cloud-native gateways integrate with Alibaba Cloud Web Application Firewall (WAF) 3.0. WAF protection applies at both the instance level and the route level. For instructions, see Enable Web Application Firewall.