Clusterlink: Enabling Fine-Grained and High-Speed Application-Level Connectivity...
summary
ClusterLink implements a programmable, connection‑oriented in-cluster gateway that exposes four declarative objects — peer / exported service / imported service / policy — and enforces identity‑based, zero‑trust access rules. It uses Envoy plus a lightweight Go L4 proxy with XDS control plane and mTLS multiplexed tunnels, and supports privileged and unprivileged deployments with CLI and CRD APIs. Measured overhead is negligible on low‑bandwidth tests, ~15% drop on high bandwidth, and roughly 2x throughput vs Scupper in the presenter’s benchmarks.
AI-written summary · about
chapters (11)
- 0:00Cloud computing trends
- 3:32Multicloud connectivity gaps
- 6:42Ideal connectivity requirements
- 8:07Clusterlink architecture
- 11:16Clusterlink deployment models
- 15:08Clusterlink workflow example
- 17:17Clusterlink implementation
- 18:21Performance comparison
- 19:26Live demo setup
- 23:40Policy enforcement
- 25:25Q&A
related talks
34mLinkerd Deep Dive
14mEnabling Multi-Cluster Load Balancing with Gateway API and Envoy Gateway
10mLightning Talk: Connecting Klusters on the Edge with Deep Dive into Cilium Cluster Mesh
32mBuilding Zero Trust with Envoy
09mMulti-Cluster Networking: A Technology-Agnostic Network Operator for K8 Federation
18mAbstracting Multi-Cluster Topologies With CAPI and Linkerd for Internal Developer Platforms
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
05mKeynote: An update on the extremely boring and uninteresting world of Linkerd