https://kubecon25.nicolai-ort.com/tags/cilium/index.html Hugo en https://kubecon25.nicolai-ort.com/day-2/06-kubeproxy/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://kubecon25.nicolai-ort.com/day-2/06-kubeproxy/index.html Code/Demo A talk by isovalent (now part of cisco - god i love that they have to say this every time). It’S a good baseline introduction to how kubernetes service routing works but also a bit dry (in terms of the presentation itself). I skipped the introduction to cilium in these notes. The docs exist for a reason. Kubernetes Services - a baseline East-West: ClusterIP -> App2App inside the cluster North-South: NodePort -> External Client to app in Cluster Kube-Proxy - IPTables Mode IPTables: Traffics flows through different tables/chains - most imporantly the NAT-Table Every Node has it’s own kube-proxy next to the kubelet ClusterIP: Scales to a huge numer of rules when exposing multiple services NodePort: Masquerades sources if routing cross-node (Source-IP is lost) TODO: Steal iptables visualizer TODO: Steal livecycle of a packet clusterip TODO: Steal livecycle of a packet nodeport