Docker 部署 Kong云原生API网关
Docker 部署 Kong云原生API网关
本指南提供了在 Docker Compose 上配置 Kong Gateway 的步骤，基于有数据库模式的配置。本指南中使用的数据库是 PostgreSQL。
前置条件
准备一台Ubuntu服务器：
- 节点IP: 192.168.73.11
- 操作系统： Ubuntu 24.04
- 已安装docker及docker-compose
部署kong网关
创建docker-compose文件
root@user-service:/data/apps/kong# cat docker-compose.yaml
name: 'kong-gateway'services:kong-db:image: postgres:17.5container_name: kong-dbrestart: alwaysenvironment:POSTGRES_DB: kongPOSTGRES_USER: kongPOSTGRES_PASSWORD: kongpassvolumes:- kong_db_data:/var/lib/postgresql/datanetworks:- kong-nethealthcheck:test: ["CMD-SHELL", "pg_isready -U kong -d kong"]interval: 10stimeout: 5sretries: 5kong-migrations:image: kong:3.9.1container_name: kong-migrationsdepends_on:kong-db:condition: service_healthyenvironment:KONG_DATABASE: postgresKONG_PG_HOST: kong-dbKONG_PG_USER: kongKONG_PG_PASSWORD: kongpasscommand: "kong migrations bootstrap"networks:- kong-netrestart: on-failurekong:image: kong:3.9.1container_name: kong-gatewayrestart: alwaysdepends_on:kong-migrations:condition: service_completed_successfullyenvironment:# kong databaseKONG_DATABASE: postgresKONG_PG_HOST: kong-dbKONG_PG_DATABASE: kongKONG_PG_USER: kongKONG_PG_PASSWORD: kongpass# kong proxyKONG_PROXY_LISTEN: 0.0.0.0:8000KONG_PROXY_LISTEN_SSL: 0.0.0.0:8443# kong adminKONG_ADMIN_LISTEN: 0.0.0.0:8001, 0.0.0.0:8444 ssl# kong managerKONG_ADMIN_GUI_LISTEN: 0.0.0.0:8002, 0.0.0.0:8445 ssl# kong logsKONG_PROXY_ACCESS_LOG: /dev/stdoutKONG_PROXY_ERROR_LOG: /dev/stderrKONG_ADMIN_ACCESS_LOG: /dev/stdoutKONG_ADMIN_ERROR_LOG: /dev/stderrports:- "8000:8000" # Proxy- "8443:8443" # Proxy SSL- "8001:8001" # Admin API- "8444:8444" # Admin API SSL- "8002:8002" # Kong Manager- "8445:8445" # Kong Manager SSLnetworks:- kong-nethealthcheck:test: ["CMD-SHELL", "kong health"]interval: 15stimeout: 10sretries: 3networks:kong-net:driver: bridgevolumes:kong_db_data:driver: local
启动服务
docker compose up -d
确认容器启动状态
root@user-service:/data/apps/kong# docker compose ps -a
NAME IMAGE COMMAND SERVICE CREATED STATUS PORTS
kong-db postgres:17.5 "docker-entrypoint.s…" kong-db 3 days ago Up 3 days (healthy) 5432/tcp
kong-gateway kong:3.9.1 "/docker-entrypoint.…" kong 24 minutes ago Up 24 minutes (healthy) 0.0.0.0:8000-8002->8000-8002/tcp, [::]:8000-8002->8000-8002/tcp, 0.0.0.0:8443-8445->8443-8445/tcp, [::]:8443-8445->8443-8445/tcp
kong-migrations kong:3.9.1 "/docker-entrypoint.…" kong-migrations 3 days ago Exited (0) 24 minutes ago
root@user-service:/data/apps/kong#
浏览器访问kong manager GUI
部署示例应用
下面是一个简单且贴近实际业务场景的系统，模拟一个订单系统的调用流程，基于docker构建：
- A 是前端页面，用户点击“创建订单”按钮；
- A 通过 Kong 网关调用后端 B（订单服务）；
- B 接收到请求后，再通过 Kong 网关调用后端 C（库存服务）进行扣减库存；
- 最后返回响应到前端。
Kong 网关地址为：http://192.168.73.11:8000
创建相关目录
mkdir -p /data/app/order-app{order-ui,order-servcie,inventory-service}
cd /data/app/order-app
1. 后端 C：库存服务（inventory-service）
inventory-service/app.py
root@ubuntu:~# cat /data/app/order-app/inventory-service/app.py
from flask import Flask, jsonifyapp = Flask(__name__)@app.route("/inventory/decrease", methods=["POST"])
def decrease_inventory():print("库存扣减成功")return jsonify({"msg": "库存扣减成功"}), 200if __name__ == "__main__":app.run(host="0.0.0.0", port=5002)
inventory-service/Dockerfile
root@ubuntu:~# cat /data/app/order-app/inventory-service/Dockerfile
FROM python:3.9-slim
WORKDIR /app
COPY app.py .
RUN pip install flask
EXPOSE 5002
CMD ["python", "app.py"]
2. 后端 B：订单服务（order-service）
order-service/app.py
root@ubuntu:~# cat /data/app/order-app/order-service/app.py
from flask import Flask, jsonify
import requestsapp = Flask(__name__)@app.route("/order/create", methods=["POST"])
def create_order():print("收到创建订单请求，调用库存服务扣减库存")try:# 通过Kong调用库存服务resp = requests.post("http://192.168.73.11:8000/inventory/decrease")return jsonify({"msg": "订单创建成功", "inventory_response": resp.json()})except Exception as e:return jsonify({"msg": "订单创建失败", "error": str(e)}), 500if __name__ == "__main__":app.run(host="0.0.0.0", port=5001)
order-service/Dockerfile
root@ubuntu:~# cat /data/app/order-app/order-service/Dockerfile
FROM python:3.9-slim
WORKDIR /app
COPY app.py .
RUN pip install flask requests
EXPOSE 5001
CMD ["python", "app.py"]
3. 前端 A：订单创建页面
order-ui/index.html
root@ubuntu:~# cat /data/app/order-app/order-ui/index.html
<!DOCTYPE html>
<html>
<head><meta charset="utf-8"><title>订单系统</title>
</head>
<body><h1>订单系统</h1><button onclick="createOrder()">创建订单</button><pre id="result"></pre><script>function createOrder() {fetch('http://192.168.73.11:8000/order/create', { method: 'POST' }).then(async res => {const text = await res.text();try {const json = JSON.parse(text);document.getElementById("result").innerText = JSON.stringify(json, null, 2);} catch (err) {console.error("非 JSON 响应内容：", text); // 只打印在控制台document.getElementById("result").innerText = "请求失败：服务暂时不可用，请稍后再试。";}}).catch(err => {console.error("请求错误：", err);document.getElementById("result").innerText = "网络异常或服务器未响应，请检查后端服务状态。";});}</script></body>
</html>
order-ui/Dockerfile
root@ubuntu:~# cat /data/app/order-app/order-ui/Dockerfile
FROM nginx:alpine
COPY index.html /usr/share/nginx/html/index.html
EXPOSE 80
4. Docker Compose
构建docker镜像
root@ubuntu:~# cd /data/app/order-app/order-ui
docker build -t registry.cn-shenzhen.aliyuncs.com/cnmirror/order-ui:v1.0 .
root@ubuntu:~# cd /data/app/order-app/order-service
docker build -t registry.cn-shenzhen.aliyuncs.com/cnmirror/order-service:v1.0 .
root@ubuntu:~# cd /data/app/order-app/order-service
docker build -t registry.cn-shenzhen.aliyuncs.com/cnmirror/inventory-service:v1.0 .
创建docker-compose
root@ubuntu:~# cat /data/app/order-app/docker-compose.yaml
name: "order-app"
services:ui:image: registry.cn-shenzhen.aliyuncs.com/cnmirror/order-ui:v1.0container_name: order-uiports:- "8080:80"networks:- order-netorder-service:image: registry.cn-shenzhen.aliyuncs.com/cnmirror/order-service:v1.0container_name: order-serviceports:- "5001:5001"networks:- order-netinventory-service:image: registry.cn-shenzhen.aliyuncs.com/cnmirror/inventory-service:v1.0container_name: inventory-serviceports:- "5002:5002"networks:- order-netnetworks:order-net:driver: bridge
四、Kong配置建议（注册B和C）
创建 Service（服务）
服务代表你后端的 API 服务，告诉 Kong 请求最终要发到哪里。
# 注册服务B（订单）
curl -i -X POST http://192.168.73.11:8001/services \--data name=order-service \--data url=http://192.168.73.11:5001# 注册服务C（库存）
curl -i -X POST http://192.168.73.11:8001/services \--data name=inventory-service \--data url=http://192.168.73.11:5002
查看注册的服务
创建 Route（路由）
路由是入口规则，告诉 Kong 哪些路径/域名/方法应该映射到哪个 Service。
# order-service 的路由（例如 /order）
curl -i -X POST http://192.168.73.11:8001/services/order-service/routes \--data name=order-route \--data paths[]=/order \--data 'strip_path=false'# inventory-service 的路由（例如 /inventory）
curl -i -X POST http://192.168.73.11:8001/services/inventory-service/routes \--data name=inventory-route \--data paths[]=/inventory \--data 'strip_path=false'
查看注册的路由
全局启用cores插件，解决跨域问题
curl -i -X POST http://192.168.73.11:8001/plugins \--data "name=cors" \--data "config.origins=*" \--data "config.methods[]=GET" \--data "config.methods[]=POST" \--data "config.methods[]=PUT" \--data "config.methods[]=DELETE" \--data "config.methods[]=OPTIONS" \--data "config.headers[]=Accept" \--data "config.headers[]=Authorization" \--data "config.headers[]=Content-Type" \--data "config.exposed_headers[]=X-Custom-Header" \--data "config.credentials=true" \--data "config.max_age=3600"
演示应用请求调用
演示流程：
- 启动服务和Kong；
- 注册 B 和 C 到 Kong；
- 浏览器访问
http://192.168.73.11:8080； - 点击“创建订单”；
- 查看链路：A → B → C。
验证inventory-service接口
root@user-service:~# curl -s -X POST http://192.168.73.11:5002/inventory/decrease | jq
{"msg": "库存扣减成功"
}
验证order-service接口
root@user-service:~# curl -s -X POST http://192.168.73.11:5001/order/create | jq
{"inventory_response": {"msg": "库存扣减成功"},"msg": "订单创建成功"
}
验证通过aloha网关请求inventory-service接口
root@user-service:~# curl -s -X POST http://192.168.73.11:8000/inventory/decrease | jq
{"msg": "库存扣减成功"
}
验证通过aloha网关请求order-service接口
root@user-service:~# curl -s -X POST http://192.168.73.11:8000/order/create | jq
{"inventory_response": {"msg": "库存扣减成功"},"msg": "订单创建成功"
}
浏览器输出
