June 2023 Summaries

The ngrok Kubernetes Operator is now generally available, offering developers an easy and secure way to manage internet access for Kubernetes workloads by leveraging ngrok's global ingress as a service platform. This operator facilitates simplified network configuration by eliminating the need for detailed networking setup like ELBs and IPs, and provides environment independence, allowing it to operate consistently across various Kubernetes environments. It enhances security by preventing unauthorized traffic from reaching the origin network and accelerates application traffic through ngrok's global network middleware. The operator offers high availability by balancing traffic through multiple redundant pods, customizable helm packaging for seamless integration, and native observability with logging integrations. It's also open-source on GitHub, and its deployment is facilitated through a simple helm install process, with a free tier expansion to encourage usage and exploration.

Integrating authentication into applications can be challenging, especially when aiming for a production-grade solution that satisfies both end-users with features like self-service sign-ups and social authentication, and security needs such as audit trails and session management. Auth0 provides these functionalities out of the box through complex protocols like OAuth, OpenID Connect, and SAML, while ngrok offers native integrations with Auth0 to streamline the process. By setting up a sample application with NodeJS and leveraging ngrok's ingress service, developers can easily expose their apps to the internet, incorporating Auth0's authentication to enhance security and user experience. The integration allows for the addition of various features, including social authentication, URL-based authorization, and real-time session monitoring, which are accessible through ngrok's dashboard and compatible with observability tools like AWS and Datadog for auditing and compliance purposes.

ngrok has integrated its traffic logs with Datadog Logs, allowing developers to send their ngrok traffic as logs to Datadog with just a few clicks. This integration enables first-class observability for production workloads and is available in the free tier up to 10,000 events per month. The Datadog Log Management integration allows users to capture detailed logs at the TCP or HTTP layer, introspect ngrok middleware behaviors, filter which events are sent to Datadog with CEL predicates, and visualize their traffic data in Datadog visualizations. Additionally, this integration also supports audit events for changes to the ngrok account configuration, enabling security and compliance teams to record changes and satisfy their requirements. The integration can be configured programmatically via API, and users can send their logs to other services like AWS CloudWatch Logs, Kinesis, and Firehose as well.

Webhooks serve as a crucial component in modern API development by enabling real-time data transfer from third-party systems, referred to as webhook providers, to receiving systems, or webhook consumers, without the need for explicit requests. This article explains how webhooks operate, emphasizing their role in delivering updates and the security measures necessary to ensure their validity, such as shared secret verification. Specifically, it details the integration of PagerDuty webhooks with the ngrok agent to maintain secure and reliable incident notifications. PagerDuty uses shared secret security by signing webhook payloads with an HMAC SHA-256 hash, which can be manually verified through steps involving retrieval and comparison of signatures. The article also covers the process of setting up webhook verification using ngrok, highlighting the importance of matching secrets to avoid deactivation issues, and offers troubleshooting tips for configuring and ensuring the accuracy of webhook communications. Additionally, it mentions that webhook verification is available not only in the ngrok agent but also in the ngrok dashboard and libraries, with shared secret verification being one of several methods for securing webhooks.