3 ms·
Yes, this is enabled for all VMs running on Compute Engine (which includes GKE VMs), however the in-guest iptables &c. bits add non-trivial overhead (I don't ha
by jsolson 9y ago
Yes, this is enabled for all VMs running on Compute Engine (which includes GKE VMs), however the in-guest iptables &c. bits add non-trivial overhead (I don't have numbers handy, apologies).
- FBISurveillance 9y agoThanks, good to know. Regarding in-guest iptables -- there's not much we can do on GKE/Kubernetes about that. I serve about 1.2M requests per second on my GKE cluster through GLB and see this overhead very well.
- boulos 9y agoThe new Alias IP stuff should help with that (though I imagine there will still be some iptables shenanigans left, so I'm not sure how much it will help)
- FBISurveillance 9y agoAFAIK for GLB to work with GKE (via GLBC) I would still need NodePort service that routes exclusively via iptables? FWIW I also look forward to IPVS in k8s 1.9 that should improve this slightly.