Navigating the Kubernetes Networking Maze
summary
Explains how pods get IPs from per-node CIDRs, how the kubelet calls the CNI to run CNI add/delete/check/version and wire veth pairs into a bridge, and how kube-proxy uses Endpoints for service routing; compares ClusterIP, NodePort and LoadBalancer behavior and recommends LoadBalancer for heavy traffic. Describes network policies, CoreDNS name resolution, and enabling dual-stack IPv4/IPv6. Notes a production platform (Coro) rollout that adds WireGuard encryption and Cilium for observability and service‑mesh support.
AI-written summary · about
chapters (15)
- 0:00Kubernetes networking intro
- 1:58Networking fundamentals
- 3:25Pod networking model
- 7:15CNI role
- 9:26CNI implementations
- 11:30Network Address Translation in Kubernetes
- 12:13Kubernetes Services
- 13:18ClusterIP vs external
- 14:02NodePort and LoadBalancer
- 15:06Service endpoints
- 16:10Ingress controllers
- 17:58Network policies
- 18:41DNS and dual-stack
- 19:44CNI use cases
- 20:52Summary and CNI selection
related talks
20mKubernetes Networking 101
34mUnderstanding the Kubernetes Networking Layer
51mKubernetes SIG-Network: Intro and Deep-Dive
40mCloud, Kubernetes, and Service Networking - Taming the Turtles
34mLife of a Packet [I]
29mInside Kubernetes Networking
32mThe Easy--Don't Drive Yourself Crazy--Way to Kubernetes Networking
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
