Building HA Multi-Cloud Clusters Using WireGuard as a Network Overlay
summary
Claims a single Kubernetes cluster can span clouds and regions by using WireGuard as an overlay to secure cross-cloud pod and node traffic; implements this with the open-source kilo CRD and the WireGuard kernel module to auto-generate peers and routes. Demo wires a laptop camera into a DigitalOcean + AWS cluster, sends frames to AWS GPU nodes for object detection, and returns results — the demo works. Notes: GKE has custom networking, database replication and global load balancing remain unsolved, and UDP ports must be open.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:44Agenda
- 1:30Lucas introduction
- 2:00WireGuard overview
- 4:20Whitepaper
- 4:51How does this work
- 6:03Why do we want this
- 7:19Crosscloud communication
- 7:52Elastic scaling
- 9:12Multicloud clusters
- 10:06Meshing nodes
- 10:45WireGuard tooling
- 13:18Multicloud services
- 16:20Demo
- 22:06Wrapup
related talks
37mBuilding a Multi-Cloud Service Mesh from the Ground Up with Kilo
29mSecuring Data-in-Transit with Wireguard for Kubernetes Cluster
26mSimplify Networking in Kubernetes with Consul and Wireguard- 29mSecuring Data-in-Transit with Wireguard for Kubernetes Cluster
37mWireGuard and the Future of Cloud Networking
41mAn Adventure in Multi-Cloud with Kubernetes
31mAn Adventure in Multi Cloud with Kubernetes and Distributed Data
14mBeyond Traditional VPNs: WireGuard Mesh Networking for Kubernetes with Tailscale