5 ms·
I have to admin I’ve never quite understood the need for the overlay network, esp with such a large performance impact. Security has been moving higher up into
by jamp897 8y ago
I have to admin I’ve never quite understood the need for the overlay network, esp with such a large performance impact. Security has been moving higher up into the app layer anyway with Beyond Corp style approaches. What are the uses cases driving it?
- wmf 8y agoMost of the CNIs tested here are not overlays. But in general most companies can't do automation or self-service in their physical network so overlays are the only way to get any network agility. And BeyondCorp is much harder than that.
- dharmab 8y agoIn our case, service mesh and network isolation (including for potentially untrusted code). Being able to ensure that pods can't talk to each other by default and managing whitelists for service to service communication. Managing that without an overlay is a pain once you're past a handful of nodes.