Inside Kubernetes Services
Talkat KubeCon + CloudNativeCon North America 2019 · on Thursday, 2019-11-21· at 17:20· Room 17AB - San Diego Convention Center, Mezzanine Level·
summary
Kubernetes Services implement an anycast domain not a running process: Service, Endpoints and the EndpointsController map selectors to pod IPs, kube-proxy reads those endpoints and installs iptables DNAT rules (netfilter prerouting/output) to rewrite clusterIP or NodePort to a pod IP. ClusterIP vs NodePort behaviors, per-packet iptables connection tracking, and a concrete failure window show transient 50% then 25% error rates as controllers and kube-proxies converge; retries or a service mesh mitigate it.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:30What is a service
- 6:02Exploring Kubernetes Services
- 6:56Kubernetes Architecture
- 8:35Network Architecture
- 9:28Kubernetes Services
- 13:11Kubernetes Endpoints
- 13:49Network Address Translation
- 16:57When does Kubernetes service not work
- 19:49Questions
related talks
40mCloud, Kubernetes, and Service Networking - Taming the Turtles
20mKubernetes Networking 101
51mKubernetes SIG-Network: Intro and Deep-Dive
42mKubernetes Networking at Scale
31mHere Be Services: Beyond the Cluster Boundary with Multicluster Servi...
32mThe Easy--Don't Drive Yourself Crazy--Way to Kubernetes Networking
15mSimplify Kubernetes Connectivity
27mMicroservices: Awareness and Discovery Pattern on K8s