3 ms·
It supports addressable pods natively on vpc. Others (i think) do not. This simplifies ingess options a great deal. Also in general GCP networking is better th
by dilyevsky 8y ago
It supports addressable pods natively on vpc. Others (i think) do not. This simplifies ingess options a great deal.
Also in general GCP networking is better than aws ime (ever tried to have multiple projects in aws share a network?). Don’t know anything about Azure but I suspect msft still sucks at networking things so it’s not great.
- marcinzm 8y agoEKS pods use the VPC networking layer so I think they meet the criteria. They use secondary IPs attached to instances rather than virtual IPs. I’ve been able to route to them from non-EKS instances in the same VPC.
- dilyevsky 8y agoAh I see aws has their own cni that does that via eni. I never realized that it allowed for native pod addressing (and it was never brought up during their pitches). Might be worse performance for big clusters because it’s still using calico (iptables)
- gtaylor 8y agoI think Calico is only used for network policy on the AWS VPC CNI plugin.
- anything4dogs 8y ago> Might be worse performance for big clusters because it’s still using calico (iptables) I'm curious why you think that Calico's use of iptables will have performance impacts for large clusters, and what type of performance impacts you expect (bandwidth / latency / cpu / something else?). From my experience, Calico performs rather well in large clusters (e.g. 2k nodes, appx 100 pods / node, several hundred network policies).