4 ms·
Conntrack tables filling up are also a challenge with k8s at very, very, very large scale.
by bushbaba 4y ago
Conntrack tables filling up are also a challenge with k8s at very, very, very large scale.
- jeffbee 4y agoAny kind of "smart" thing in your network will eventually hit a scaling limit. The end-to-end principle has to be given due respect. Only the edge of your system has the necessary resources to participate in it. As the scale becomes more extreme, even the kernel of a machine running 100s of k8s pods (or borg tasks) starts to look more like the center of your network and less like the edge of it. The trend is to move as many things as possible out of the kernel and into user processes, including network policy, quota, pacing, and the whole TCP stack too.