2V0-71.23 Question 101
Select 3An organization is deploying a new application on their Kubernetes cluster managed by VMware Tanzu. They need an ingress controller to manage external traffic routing to specific services within the cluster. The team chooses Contour as the ingress controller. Which of the following correctly describes the role and capabilities of the Contour ingress controller?
- A
Contour provides Layer 7 load balancing and routes HTTP/HTTPS traffic to Kubernetes services.
- B
Contour directly modifies Service objects to manage ingress traffic routing.
- C
Contour leverages Envoy as its data plane to handle ingress traffic.
- D
Contour supports TLS termination and advanced traffic management features like path-based routing.
- E
Contour can only handle HTTP traffic and does not support HTTPS.
Show answer and explanation
Correct answers: A, C, D
Explanation
The Contour ingress controller is a powerful tool for managing ingress traffic in Kubernetes clusters, particularly in VMware Tanzu environments. It uses Envoy as its data plane to provide Layer 7 load balancing, TLS termination, and advanced traffic control features such as path-based routing. By leveraging Contour, organizations can handle both HTTP and HTTPS traffic efficiently. However, Contour does not directly modify Service objects, as it uses resources like Ingress and HTTPProxy for routing and configuration management.
- A. Correct.
Correct: Contour is designed to handle Layer 7 (HTTP/HTTPS) traffic and route it to appropriate Kubernetes services. This is one of its primary roles.
- B. Incorrect.
Incorrect: Contour does not directly modify Service objects for traffic routing. Instead, it uses Ingress and HTTPProxy resources for traffic management.
- C. Correct.
Correct: Contour relies on Envoy as its data plane, which provides high-performance ingress traffic handling.
- D. Correct.
Correct: Contour supports TLS termination and advanced features such as path-based and header-based routing, which are essential for managing complex ingress traffic scenarios.
- E. Incorrect.
Incorrect: Contour supports both HTTP and HTTPS traffic. It also provides features like TLS termination, making it suitable for handling secure traffic.