3 ms·
How does this work in something like Kubernetes where you have a sidebar container configuring the network for the main container without affecting others on th
by throwaway894345 10mo ago
How does this work in something like Kubernetes where you have a sidebar container configuring the network for the main container without affecting others on the same host?
- conradev 10mo agoI think all containers share the same netns in a pod. You restrict the pod to only the Wireguard peer IP, and have a (NET_ADMIN) sidecar container create an interface (tun/kernel wg) and update the routing tables for the netns. Then I believe the traffic from the other containers in the pod is tunneled.