Simplifying multi-clusters in Kubernetes using KubeSlice
summary
KubeSlice builds a flat L3 overlay via Network Service Mesh that injects an extra interface into pods, wires per-pair encrypted VPN tunnels between cluster gateways, and forwards packets through slice routers so pods talk across clusters without L7 gateways. It implements service-export/service-import (KEP-1645) so exports in one cluster auto-create imports elsewhere, uses a DNS proxy sidecar plus CoreDNS plugin, integrates with Istio for L7, and demoed Bookinfo across three clusters successfully.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:32Challenges
- 6:54KubeSlice
- 8:26Architecture
- 15:16Sample Service Export
- 17:16Realtime Demo
- 24:45Applications
- 25:59Paths
- 27:09Cloud Providers
related talks
31mHere Be Services: Beyond the Cluster Boundary with Multicluster Servi...
27mSimplifying Multi-Cluster Networking With Cilium...
36mKubernetes Multi-Cluster Made Easy - Federica Ciuffo and Marco Ballerini
33mMulti-tenant K8s Networking with Kube-OVN
40mCloud, Kubernetes, and Service Networking - Taming the Turtles
50mMulti-Cluster Kubernetes and Service Mesh Patterns
06mKeynote: From One to Many, the Road to Multicluster
15mSimplify Kubernetes Connectivity