Networking & Ingress
20 articles from official documentation
Deploying Dragonfly Lightweight: P2P Distribution Without the Database Overhead
Tired of heavyweight database stacks slowing down your deployments? Discover how a lightweight Dragonfly deployment leverages Kubernetes primitives like ConfigMaps and headless Services for efficient P2P distribution. This approach simplifies your architecture while maintaining performance.
- →Leverage ConfigMaps to manage dynamic configurations efficiently.
- →Utilize headless Services for direct communication between Clients and Schedulers.
K8gb: Elevating Global Load Balancing in Kubernetes
K8gb is now a CNCF incubating project, marking a significant step in cloud-native global server load balancing. It automates traffic management and ensures seamless failover using Kubernetes-native health checks and CoreDNS.
- →Leverage K8gb's GSLB Custom Resource for global traffic management across clusters.
- →Utilize Kubernetes Native Health Checks to enhance routing decisions.
TCPRoute and UDPRoute in Gateway API v1.6: What You Need to Know
The Gateway API v1.6 marks a significant step forward with TCPRoute and UDPRoute graduating to standard status. These resources allow you to route traffic based solely on protocol and port, simplifying your networking configurations in Kubernetes.
- →Utilize TCPRoute to route traffic based on protocol and port without Layer 7 awareness.
- →Define a Gateway with listeners to attach TCPRoute and UDPRoute for efficient traffic management.
Injecting Chaos: My LFX Mentorship with kgateway
Chaos engineering is essential for resilient systems, and kgateway makes it easier to implement. I focused on adding HTTP fault injection support, enabling teams to test their services against real-world failures. This article dives into how I achieved this and what you need to know to leverage it effectively.
- →Implement fault injection support by extending TrafficPolicy in kgateway.
- →Use delay and abort injection to simulate real-world failures in your services.
Seamlessly Access Private Git Repositories in EKS with Argo CD
Unlock the power of Argo CD by integrating it with private Git repositories hosted on AWS. Learn how to set up AWS CodeConnections to create a secure network path for your Git server, ensuring smooth deployment workflows.
- →Configure AWS CodeConnections to create a secure network path for your private Git server.
- →Set the GIT_ENDPOINT_URL to your private Git server's URL for seamless access.
Mastering Full Request and Response Logging on Amazon EKS
In a world where compliance is non-negotiable, capturing full request and response data is crucial. Learn how Envoy’s External Processing filter enables this without altering your application code.
- →Utilize Envoy’s External Processing filter to capture full request and response data without modifying application code.
- →Ensure your traffic flows through the Istio Ingress Gateway for proper routing and logging.
Mastering EKS Control Plane Egress: Route Your Traffic with Precision
Amazon EKS now allows you to route Kubernetes control plane traffic through your own VPC, giving you greater control over egress traffic. By enabling CUSTOMER_ROUTED mode, you can ensure that API server calls follow your configured routes and security groups.
- →Enable CUSTOMER_ROUTED mode to control Kubernetes API Server egress traffic.
- →Use Elastic Network Interfaces (ENIs) to bind egress to your VPC subnets.
Zero-Downtime Migration: From Ingress NGINX to Envoy Gateway
Migrating from Ingress NGINX to Envoy Gateway without downtime is crucial for maintaining service continuity. By leveraging weighted DNS records, you can run both systems simultaneously and control traffic flow seamlessly. This article breaks down the practical steps to achieve this migration effectively.
- →Leverage weighted DNS records to manage traffic during migration.
- →Run Ingress and HTTPRoute simultaneously to ensure zero downtime.
Mastering Ingress Request Tracing for Multi-Tenant SaaS on Kubernetes
In a multi-tenant SaaS environment, understanding request flows is crucial for maintaining performance and reliability. By implementing end-to-end ingress request tracing, you can track customer requests through your services using Trace IDs and Span IDs.
- →Implement Trace IDs to group all spans for a single customer request.
- →Use Span IDs to identify individual units of work within each service.
Building a Cloud Native Platform: Kairos, k0rdent, and bindy in Action
Creating a cloud native platform from scratch can be daunting. With Kairos, you get an immutable Linux distribution that boots from OCI images, ensuring consistency. Dive into how k0rdent and bindy enhance your Kubernetes management and DNS operations.
- →Utilize Kairos for immutable, reproducible node configurations using OCI images.
- →Define node behavior and configurations in versioned YAML through FluxCD.
Mastering EKS Container Network Observability for Inter-AZ Traffic
Understanding inter-AZ and NAT gateway traffic is crucial for optimizing your Kubernetes workloads. With EKS Container Network Observability, you gain pod-level insights into network traffic, enabling better performance tuning and troubleshooting. Dive into how to leverage this powerful feature effectively.
- →Leverage the Network Flow Monitor Agent to gain pod-level insights into network traffic.
- →Use the `trafficDistribution` field to control how traffic is routed to service endpoints.
Streamline Your Hybrid Kubernetes Networking with EKS Hybrid Nodes Gateway
Hybrid cloud environments are complex, but the Amazon EKS Hybrid Nodes gateway simplifies networking between on-premises and cloud resources. By leveraging Cilium's VXLAN Tunnel Endpoint feature, it creates seamless connections that keep your applications running smoothly.
- →Utilize the Cilium VXLAN Tunnel Endpoint feature for seamless hybrid networking.
- →Configure the `autoModeConfig` parameter to enable EKS Auto Mode.
Migrating 60+ Resources from Ingress NGINX to Higress in 30 Minutes with AI
Ready to ditch Ingress NGINX? Discover how an AI agent can streamline your migration to Higress, a cloud-native API gateway. With features like zero-downtime reliability and advanced caching, you can transition seamlessly and efficiently.
- →Utilize an AI agent to audit your existing cluster for efficient migration.
- →Generate high-performance WebAssembly (WASM) plugins to replicate existing NGINX logic.
Mastering DNS for Kubernetes Services and Pods
DNS is crucial for service discovery in Kubernetes, allowing Pods to communicate seamlessly. Understanding how Kubernetes manages DNS records can save you from frustrating connectivity issues in production environments.
- →Understand how Kubernetes creates DNS records for Services and Pods to facilitate service discovery.
- →Use A and AAAA records for normal Services to manage IP addressing effectively.
Gateway API v1.5: Stabilizing Your Kubernetes Traffic Management
Gateway API v1.5 is a game-changer for Kubernetes traffic management, moving key features to stable status. With the introduction of ListenerSets and TLSRoutes, you can streamline your routing configurations significantly. Dive in to understand how these enhancements can simplify your deployments.
- →Utilize ListenerSets to define and merge listeners independently for better traffic management.
- →Implement TLSRoutes to route requests based on SNI during the TLS handshake.
Mastering Kubernetes Services: The Key to Network Application Exposure
Kubernetes Services are essential for exposing your applications running in Pods. With the right configuration, you can seamlessly manage traffic routing and access. Dive into how to set up a Service and avoid common pitfalls.
- →Understand the role of Services in exposing Pods over the network.
- →Configure `targetPort` correctly to ensure traffic reaches the right container port.
Mastering Ingress in Kubernetes: Routing Traffic Like a Pro
Ingress is your gateway to managing HTTP and HTTPS traffic in Kubernetes. With precise routing rules, you can control how external requests reach your services. Understanding its configuration is crucial for a smooth production environment.
- →Define routing rules in the `spec` section of the Ingress resource.
- →Set `defaultBackend` to handle unmatched requests effectively.
Mastering Kubernetes Network Policies: Control Your Pod Traffic
Network Policies are crucial for securing traffic flow in your Kubernetes cluster. They allow you to define specific rules for both ingress and egress traffic, ensuring only authorized connections are made. Dive into how to implement these policies effectively in production.
- →Define ingress and egress rules to control traffic flow effectively.
- →Use podSelector to target specific Pods for your policies.
Mastering Networking Challenges with Amazon EKS Auto Mode
Tired of wrestling with complex networking setups in Kubernetes? Amazon EKS Auto Mode automates infrastructure provisioning, including networking components like the VPC CNI and load balancers, making your life easier. Dive into how this can streamline your enterprise deployments.
- →Automate infrastructure provisioning with Amazon EKS Auto Mode for streamlined networking.
- →Utilize the VPC CNI for optimal pod performance and simplified troubleshooting.
Migrating from ingress-nginx to Envoy Gateway: A Practical Guide
Ready to level up your Kubernetes ingress? Migrating to Envoy Gateway can streamline your traffic management. Pay special attention to the externalTrafficPolicy setting to avoid connection failures during health checks.
- →Configure externalTrafficPolicy to Cluster to avoid health check failures.
- →Use a reserved loadBalancerIP for consistent traffic routing.
Industry-standard certifications built by the people behind Linux and Kubernetes. Earn the CKA — the gold standard Kubernetes administrator cert. OpsCanary readers get 30% off year-round with code OPSCANARY3.
Get CKA certified →Get the daily digest
One email. 5 articles. Every morning.
No spam. Unsubscribe anytime.