Microservices and containers networking
summary
Contiv is a network plugin that runs as a net master plus per-host net plugin and etcd, integrates with Kubernetes Docker Swarm Mesos and OpenShift, and maps Kubernetes labels to Contiv endpoint groups. Demo shows true tenant isolation: identical subnets and IPs in separate tenants cannot reach each other, and group-based policies allow only client group HTTP on port 80 while denying other traffic. Claim: higher performance than Calico and Flannel and supports bandwidth reservation via policy.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 1:05What is Conti
- 4:37Networking
- 7:00Groupbased policy
- 8:23Commandline tool
- 8:45Architecture
- 9:26Container Networking
- 14:16Context
- 16:16Kubernetes Dashboard
- 16:54Kubernetes Service
- 17:26Kubernetes Net Master
- 17:51Demo
- 18:46Demo 1 Tenants
- 20:29Demo 2 Groups and Policies
- 22:17Demo 2 Lab
- 27:09Create new objects
- 27:57Create networks
- 28:42Network list
- 29:23Containers
- 34:36Internet Group
- 35:49Create Internet Group
- 36:59Create Deployment
- 38:07Create Clients
- 38:49Connect to Internet
- 40:24Testing
- 42:24Conclusion
related talks
45mMicroservices and containers networking
40mKubernetes Networking Panel: Collaborate on the Spec, Compete on Execution
35mContour, a High Performance Multitenant Ingress Controller for Kubernetes
23mContainer and Kubernetes security policy design: 10 critical best practices
43mPanel Discussion: Containers and Networking: A Symbiotic Relationship
33mNavigating the Container Jungle
33mContainer Networking for Micro-Services: An Apache Mesos Networking Deep Dive
34mContainer Networking Untangling Services Meshes and SDNs