Understanding the Kubernetes Networking Layer
Talkat Open Source Summit Europe 2022 · on Friday, 2022-09-16· at 15:55· Liffey B Part 2 (Level 1), Convention Centre Dublin, Spencer Dock, N Wall Quay, North Wall Dublin 1, D01 T1·
summary
Explains that the CNI provides pod networking, DNS and ingress are separate layers, and kube‑proxy’s IP-based service proxy can be replaced by CNIs that implement service routing directly. Compares Flannel (overlay), Weave (OVS, built-in encryption), Calico (BGP or eBPF, Windows support) and Cilium (eBPF-based fast data plane, CNI can replace kube‑proxy), notes which support network policies enforced by the CNI and which enable sidecarless service mesh and multi‑cluster mesh.
AI-written summary · about
chapters (31)
- 0:00Intro
- 0:47Fundamentals of Kubernetes Networking
- 1:57What is a CNI?
- 3:43Network Namespace
- 4:16Pod-to-pod connectivity
- 5:25Kubernetes Services
- 6:39Kube Proxy
- 7:46ClusterIP Service
- 8:28NodePort Service
- 9:15LoadBalancer Service
- 10:46ExternalName Service
- 11:28Compass
- 12:05DNS
- 13:24Ingress
- 15:20Network Policies
- 17:18Resilient Connectivity
- 17:53L7 Traffic Management
- 18:32Identity-based Security
- 19:23Observability and Tracing
- 19:50Transparency
- 20:27Service Mesh with sidecars
- 21:31Service Mesh without sidecars
- 22:38Multi Cluster / Cluster Mesh
- 23:34Multi Cluster options
- 24:35Kubernetes is pluggable
- 25:22CNI Chaining
- 26:11Default plugins
- 27:26Flannel
- 28:34Weave Net
- 29:46Calico
- 31:22Cilium
related talks
31mFrom CNI to Service Mesh: Demystifying Kubernetes Networking
22mNavigating the Kubernetes Networking Maze
40mCloud, Kubernetes, and Service Networking - Taming the Turtles
31mEverything You Ever Wanted to Know About CNIs (Container Network Interface) and ...
20mKubernetes Networking 101
32mThe Easy--Don't Drive Yourself Crazy--Way to Kubernetes Networking
29mInside Kubernetes Networking
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz