3 ms·
This a thousand ! You don't even need to give them actual nics, just veth pairs with routing (some CNI plugons do just that btw). I think a big part of why ov
by navaati 7y ago
This a thousand !
You don't even need to give them actual nics, just veth pairs with routing (some CNI plugons do just that btw).
I think a big part of why overlay nets are so common is that a lot of the engineers deploying these systems have a shaky or non existant understanding of networking and routing, they are stuck in the "local network and a default route" model and if you only have that, overlay it is...
- silasb 7y agoDo you know what CNI plugins support veth pairs?
- boulos 7y agoThe built-in bridge one does. Maybe you meant something else by your question though?
- CameronNemo 7y agohttps://github.com/containernetworking/plugins/blob/master/plugins/main/bridge/README.md https://github.com/containernetworking/plugins/blob/master/p...
- elFarto 7y agoI've tried using Bridget[1] before, but didn't actually manage to get it working properly (although the problem was likely firewall related). [1] https://github.com/kvaps/bridget https://github.com/kvaps/bridget
- navaati 7y agoIt’s about routing more than veth pairs (I mean you can also do simple bridging as other comment say, but it’s more limited), so look for BGP using ones, mainly Calico, but kube-router too. I know there is simpler ones that don’t use BGP, but I don’t remember their names. For example there is one for AWS that uses ENI interfaces and pass them directly to containers (you’re obviously limited by the number of ENI you can attach to a particular host, then). There is also one that configures routes in the VPC routing table, and a similar one for GCP.
- KaiserPro 7y agosorry, yes I should have said veth. at least that way you can dump them on an entirely different vlan, if you want separation. The best part is: you're using your cloud provider's networking tools (lets be honest it is a cloud and they are way more likely to work)