Exposing your application¶

What good is an application if no one can reach it?

Nais tries to make it easy to expose your application to the correct audience. An audience is the set of users or applications that your application is intended to be consumed by. The audience may be other applications within the same environment, or it may be humans or applications on the outside.

There are two different ways to expose your application, depending on your audience:

1. Service discovery for applications within the same environment.
2. Ingress for users and applications outside the environment.

Service discovery¶

If your application and its consumers all run in the same environment, they can communicate directly with your application by using service discovery.

Applications deployed to Kubernetes are automatically exposed through what is known as a Service. A service provides your application with an internal address that allows for direct communication within the same environment.

The address is the name of your application:

http://<name>

If your consumers are in another namespace, the address should include the namespace as well:

http://<name>.<namespace>

Service discovery is the recommended way to communicate between applications running in the same environment.

Compared to ingresses, using service discovery has several advantages:

• Fewer network hops and lower latency. Requests happen directly between applications. Requests to an ingress will go out of the environment to the internet, and then back to the environment.
• Avoids unnecessary exposure. Applications can avoid being exposed to the outside world through an ingress if all of their consumers are internal.
• Network traffic is restricted by access policies. Access policies do not restrict inbound traffic through ingresses.

Learn how to communicate with other workloads via service discovery.

Ingress¶

If your audiences consist of human users or other services running in another environment, you will have to expose your application by using an ingress.

spec:
  ingresses:
    - https://myapplication.example.com

An ingress exposes your application to other environments. The ingress allows inbound traffic from other networks or other environments to reach your application. The domain of the ingress controls which users and environments that your application is reachable from.

Your application may specify multiple ingresses, each using the same or different domains:

spec:
  ingresses:
    - https://myapplication.example.com
    - https://myapplication2.example.com
    - https://myapplication.internal.example.com

Ingresses may also include a trailing path:

spec:
  ingresses:
    - https://myapplication.example.com/some-path

This allows for routing traffic to only specific parts of your application, or as part of a shared domain between multiple applications.

Learn how to expose your application with an ingress.

See the environments reference for a list of available domains.

See the ingress reference for technical details and options.

Ingress redirects¶

In some cases, you may want to redirect traffic from one domain to another. This can be useful if you have changed the domain of your application, or if you want to redirect users from an old domain to a new one.

Learn how to redirect traffic with an ingress.

See the ingress reference for technical details and options.