Breaking Boundaries: Multi-cluster with Cilium cluster mesh
summary
Cilium Cluster Mesh uses eBPF and WireGuard to extend pod-to-pod networking across clusters, deployed as a node-level CNI daemonset plus a cluster-mesh API server; automation (Terraform/Terragrunt) builds two EKS regions (Mumbai, Singapore) and proves a single annotation makes services global across clusters, with topology-aware affinity preferring local pods and immediate failover when replicas scale down. Cross-cluster policies use CiliumNetworkPolicy, Hubble provides observability, and node-to-node encryption removes per-service mTLS overhead.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:58Microservices and proxies
- 4:19Evolution to eBPF
- 6:37Multi-cluster challenges
- 10:42Need for multi-cluster
- 12:27Introducing Cilium
- 16:08Multi-cluster use cases
- 18:18Cilium ClusterMesh
- 20:11Demo setup and prerequisites
- 22:38Infrastructure automation
- 24:28High availability demo
- 26:41Topology-aware routing
- 28:19Cross-cluster security
- 29:45Observability with Hubble
- 30:14Future and conclusion
related talks
27mCilium Cluster Mesh: The eBPF-Powered Multicluster Solution for Kubernetes
31mCilium Mesh
28mConnecting the World: Your Hands-on Guide To Cilium ClusterMesh and MCS-API
10mLightning Talk: Connecting Klusters on the Edge with Deep Dive into Cilium Cluster Mesh
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
13mWhich Edge Are You on? Service Affinity with Cilium Cluster Mesh
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
27mMeshing It up Securely: How Roche Manages Network Connectivity for...