networkop / tkng Goto Github PK

• theory intro
• diagram
• lab walkthrough

starting points
https://cilium.io/blog/2019/08/20/cilium-16#socket-based-load-balancing
https://docs.cilium.io/en/v1.9/gettingstarted/host-services/#host-services
https://cilium.io/blog/2020/06/22/cilium-18#kubeproxy-removal
https://cilium.io/blog/2020/02/18/cilium-17#kube-proxy-replacement-with-direct-server-return
https://cilium.io/blog/2020/06/22/cilium-18#kube-proxy-replacement-at-the-xdp-layer
https://docs.cilium.io/en/v1.8/gettingstarted/kubeproxy-free/#container-hostport-support

I recently started playing around with k8s and decided to give the lab a spin. The lab doc asks to run make stop followed by make destroy to free up the resources but none of those rules exist.

There're down and cleanup rules in the Makefile though, which seems like the right commands to use. I could send in a fix PR to the main repo if my assumptions are right.

Sorry, super dump question. I probably know the answer to this, but I will still ask 'cause my networking knowledge is not super good.

What does L2 and L3 exactly specify in the above diagram? I know it link and network layer respectively. But what do they exactly specify?

Like in the first image, L3 specifies that flow from cbr0 -> flannel.1 is layer 3 routing and L2 specifies that flannel.1 internally does layer 2 routing (by adding internal MAC address and VXLAN header + UDP headers + outer IP header). Also then why does, flannel.1 -> eth0.4 does not have that L3 tag?

Bit confusing.

In the second image, like does it mean packets from vethX -> eth0.11 are routed using L3? This notation is pretty obvious but I want to still clarify whether I am thinking right or wrong.

Sorry for this question and really awesome work on this project, helps a lot!!

• theory intro
• diagram
• lab walkthrough

most likely https://kubernetes.github.io/ingress-nginx/ as an example.

https://docs.google.com/spreadsheets/d/1DnsHtdHbxjvHmxvlu7VhzWcWgLAn_Mc5L1WlhLDA__k/edit#gid=0

• theory intro
• diagram
• lab walkthrough

Calico vs Cilium

• theory intro
• diagram
• lab walkthrough

Cilium vs Istio?

This code repo doesn't set a license. Decide what license should apply, and add a LICENSE file (or LICENSE.md) to make that clear.

Hi @networkop
here https://www.tkng.io/cni/kindnet/ you have typos in node addressing (3rd octets) and some static addresses as well

Hi! Great content first of all!

The link here is broken:
https://github.com/networkop/k8s-networking-guide/blob/master/content/services/clusterIP/dataplane/IPVS.md?plain=1#L280

I guess it can be replaces with either this SlideShare or this GitHub.

Hi Michael,
for those who create on-demand/clean VM for tkng lab cluster it might be quite compelling to have an installer script that installs the prerequisite components.

For this purpose I created a simple bash script that installs latest stable versions of docker-ce, kubectl, helm and make for Ubuntu 20.4 LTS AMD64.

https://gist.github.com/hellt/61242c680c78c3c813f20ecb9577a93e

Feel free to consider if its worth adding a link to it to the docs

ADD1: later I will update it to have extras installed as well (k9s, auto-completions, etc)

Endpoint slices

Topology-aware routing

traffic policy local

sessionAffinity

https://github.com/kubernetes/enhancements/blob/0e4d5df19d396511fe41ed0860b0ab9b96f46a2d/keps/sig-network/1507-app-protocol/README.md#risks-and-mitigations

anything else worth mentioning?

• theory intro
• diagram
• lab walkthrough

theory intro

• diagram
• lab walkthrough

I think IPVS and Cilium/eBPF can just be mentioned here, without full packet walkthrough

• single-stack
• dual-stack

• theory intro
  • public cloud vs on-prem
• diagram
• lab walkthrough

metlallb vs kube-vip or both?

Update relevant parts of the CNI/CIlium chapter after I've enabled host-reachable services and ebpf masquerading.

• theory intro
• diagram
• lab walkthrough
• https://github.com/kubernetes/enhancements/blob/3ad891202dab1fd5211946f10f31b48003bf8113/keps/sig-network/2447-Make-kube-proxy-service-abstraction-optional/README.md

not sure what to pick for an example.
linkerd vs isito vs consul?

https://github.com/dumlutimuralp/antrea-packet-walks

• internal DNS
• external DNS
• DNS spec