Filtering Network Flows from Kubernetes Clusters: Why and How?
summary
The talk explains why and how to filter outbound (egress) network traffic from Kubernetes clusters toward APIs, databases and persistent storage. It compares common network topologies and shows three concrete approaches—Kubernetes Egress NetworkPolicy, assigning distinguishable IPs via IPAM per pod or namespace, and a Secure Egress Gateway—and demonstrates them using the Project Calico CNI plugin.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:53Outbound flow filtering
- 8:51Demo: Network Policies
- 19:31Advanced Calico filtering
- 23:51Pod IP attribution
- 28:24Egress Gateways for filtering
- 35:40Summary
related talks
46mNetworking in Kubernetes: can we make it clearer?
20mKubernetes Networking 101
34mLife of a Packet [I]
40mKubernetes Networking Panel: Collaborate on the Spec, Compete on Execution
33mNavigating the Container Jungle
29m“Are These Things Talking to Each Other?” - Observing Kubernetes Networking...
21mFrom Squire To Network Knight: Defending the Kubernetes Castle the Cloud Native...
15mSimplify Kubernetes Connectivity