KubeCon NA'22 Lightning Talk: Where did all my IPs go?

•

0 likes•102 views

Kubernetes cluster planning requires quite a few things to get started. What about IPs? Common IP management hurdles with Kubernetes clusters include IP assignments when building a cluster and challenges faced when deploying in a multi-faceted environment. Kubernetes Admins often need to use IP addressing handed out by Network Admins juggling other non-k8s workload IP assignments and IP exhaustion. In this talk, Cynthia will discuss new and existing KEPs that SIG-network has implemented to help mitigate IP challenges. Such features include discontiguous cluster CIDRs and the journey to IPv6. Cynthia will also discuss how the best practices for Kubernetes IP management are changing with these new capabilities to help scale and grow instead of rebuild. https://sched.co/184sj

Recommended for you

Dotnet network prog_chap07

This document discusses multicasting and provides examples of how it can be used. Multicasting allows a server to send data to multiple clients simultaneously without using excessive bandwidth. It describes how multicasting works using UDP and IGMP, and provides examples of chat and picture sharing applications that can benefit from multicasting. The key aspects of multicasting covered are unicast, broadcast, and multicast addressing; the IGMP protocol; multicast routing; and application models for multicasting.

•by Truong NGUYEN

c# network programming

BKK16-500K2 CTO talk - The End to End Story

Some problems can only be solved by looking across a complete compute ecosystem. IoT Devices, Mobile Devices, Media Servers Gateways, Cloud Edge Devices.

•by Linaro

open sourcelinarolinaroconnect

RTBkit Meetup - Developer Spotlight, Behind the Scenes of RTBkit and Intro to...

This virtual meetup covered several topics related to RTBkit: 1. The developer spotlight featured Nicolas Emiliani, the RTB dev team lead at Motrixi, discussing getting an RTBKit installation running. 2. Attendees learned about Motrixi's traffic which includes up to 40k queries per second from US and Canada connected to several exchanges. 3. The meetup discussed isolating the RTBKit stack using a reverse proxy, important kernel parameters, and transitioning to HTTP interfaces for RTBkit 2.0.

•by Datacratic

rtbrtbkit architecture#rtb

Which KEPs are on the horizon?
● Support multiple Service CIDRs
● Reserve static and dynamic IP allocation for Service IP ranges

Where will all my IPs go?
We can change the way we start: allocate small to start,
and build up.
K8s workloads may be the big push to move to IPv6
- Question for you: what are your thoughts?

Similar to KubeCon NA'22 Lightning Talk: Where did all my IPs go?

Computer network (7)

NYversity

This document summarizes topics that may be covered on a CS144 review session exam, including testing simultaneous open connections in TCP, logistics of the exam, sample exam questions and explanations, an overview of protocols like TCP, IP, and DNS, and concepts related to routing, physical layer transmission, and more. Sample exam questions are provided to illustrate the level of detail and reasoning expected in answers.

Curs_IPv6.ppt

AkhilSG4

This document provides an overview and introduction to IPv6, the next generation Internet Protocol. It discusses the need for a new IP due to the impending exhaustion of IPv4 addresses. Some key highlights include: IPv6 features a 128-bit address size providing vastly more addresses than IPv4; it has a simplified header format; and it allows for easy address autoconfiguration and integration of mobility. The transition to IPv6 is important to support new technologies and continued growth of the Internet.

Network services on Kubernetes on premise

Hans Duedal

Dotnet network prog_chap07

Truong NGUYEN

BKK16-500K2 CTO talk - The End to End Story

Linaro

RTBkit Meetup - Developer Spotlight, Behind the Scenes of RTBkit and Intro to...

Datacratic

CCNA2 Verson6 Chapter9

Chaing Ravuth

This document discusses Network Address Translation (NAT) for IPv4 networks. It covers the basics of NAT including the different types (static, dynamic, port address translation), advantages and disadvantages, and configuration on Cisco routers. The document also discusses troubleshooting NAT using show and debug commands, and how NAT applies to IPv6 networks for translation between IPv4 and IPv6 addresses.

Microsofts Configurable Cloud

Chris Genazzio

Microsoft's Production Configurable Cloud leverages FPGAs and a programmable infrastructure to provide accelerated computing capabilities. Key aspects include: - Using FPGAs on servers and smartNICs to accelerate networking, storage, security and other functions through reconfigurable hardware. - Developing a pod architecture that connects multiple FPGAs within a rack for low-latency sharing of resources. - Creating a programmable "configurable cloud" infrastructure that allows workloads to be accelerated locally, through infrastructure enhancements, or remotely on other servers' FPGAs. - Early FPGA applications provided significant query latency and throughput improvements for Bing search functions. The approach is now used broadly in

Sharing your-internet-connection-on-linux

jasembo

Compatibility between IPv4 and IPv6

Zalak Patel

IPv4 addresses are running out, so IPv6 was created with a vastly larger 128-bit address space. During the transition, IPv4 and IPv6 will coexist via three main methods: dual-stack, tunneling, and translation. For internet service providers, dual-stack is the best approach as it allows gradual migration while both protocols are supported. The presentation provides details on IPv4 and IPv6 addressing schemes, transition mechanisms, and configuration examples for tunneling dual-stack implementations at an ISP.

CCNA (R & S) Module 03 - Routing & Switching Essentials - Chapter 9

Waqas Ahmed Nawaz

CCNA (R & S) Module 02 - Connecting Networks - Chapter 3

Waqas Ahmed Nawaz

Why We Need IPv6

Netwax Lab

Internet Protocol version 6 (IPv6) is the latest version of the Internet Protocol (IP), the communications protocol that provides an identification and location system for computers on networks and routes traffic across the Internet. IPv4 & IPv6 are not designed to be interoperable, complicating the transition to IPv6. However, several IPv6 transition mechanisms have been devised to permit communication between IPv4 and IPv6 hosts.

Interledger Workshop Berlin (1 June 2017)

Interledger

The document provides an agenda and details for the Interledger workshop taking place in Berlin on June 1-2, 2017. Day 1 will include sessions on Interledger overviews, keynotes, demos of Interledger implementations, and panels discussing routing challenges. Breakfast, afternoon tea, and wifi will be provided. The agenda provides timing for sessions and breaks. Background information on Interledger includes its community and contributors from various organizations, timeline of milestones, and goal of creating an Internet of Value through micropayments.

Mikro tik

guest8423a64e

MikroTik is a Linux-based router that can be installed and fully operated on a regular PC. It has many features, including performing functions like NAT, bandwidth management, and filtering at the 3-layer network level, allowing it to efficiently route high bandwidth and perform operations like NAT and filtering on low-end hardware. MikroTik also offers stability, security, and ease of configuration through its web interface and command line tools.

3hows

Haris Padinharethil

The document outlines an agenda for a 3HOWs event discussing IPv6 and MPLS technology. The morning sessions will cover how to deal with IPv6, including why it is important now due to limited IPv4 addresses, IPv6 addressing details, and how to connect to IPv6. The afternoon will discuss how to connect with MPLS technology, the benefits it provides for interconnecting offices, and actual customer case studies. Questions from attendees will conclude the event.

ION Malta - Seeweb Thoughts on IPv6 Transition

Deploy360 Programme (Internet Society)

The document discusses Marco d'Itri's thoughts on the transition to IPv6. It describes the transition as ongoing, with no flag days, as IPv6 adoption grows. It notes that while IPv4 NAT is easy for access networks, it is difficult for servers. Many large content providers already use IPv6. The transition involves steps before IPv4 addresses ran out, the current transition period, and after the transition when IPv4 will be optional. IPv6 adoption is growing in several countries like Belgium and the US. Eventually IPv4-only islands will need to make themselves accessible over IPv6. The document provides advice on starting an IPv6 transition and offers a simple IPv6 addressing plan.

Applying IPv6 to LTE Networks

APNIC

Building and operating a global DNS content delivery anycast network

APNIC

This document discusses Packet Clearing House's (PCH) global anycast network for content delivery of DNS services. PCH operates 118 nodes across 14 global locations and 152 internet exchange points. Anycast technology allows optimal routing of DNS queries to the closest server instance. PCH has been operating anycast DNS services since 1997 and their network has evolved to support the growth of the internet. The document describes considerations for planning new anycast nodes, and how PCH monitors and operates their global anycast network.

Ipv4 To Ipv6 Transition

Heidi Owens

The document discusses the need to redesign the routing and addressing architecture of the Internet as identified by the Internet Architecture Board due to concerns over the scalability of today's routing system and the impending exhaustion of IPv4 addresses. It focuses on proposals to resolve these issues that are based on a common philosophy of separating location and identity in addressing, called the 'Loc/ID split'. The article will focus on achieving consensus on an addressing method that incorporates location.

Similar to KubeCon NA'22 Lightning Talk: Where did all my IPs go? (20)

Computer network (7)

Curs_IPv6.ppt

Network services on Kubernetes on premise

Dotnet network prog_chap07

BKK16-500K2 CTO talk - The End to End Story

RTBkit Meetup - Developer Spotlight, Behind the Scenes of RTBkit and Intro to...

CCNA2 Verson6 Chapter9

Microsofts Configurable Cloud

Sharing your-internet-connection-on-linux

Compatibility between IPv4 and IPv6

CCNA (R & S) Module 03 - Routing & Switching Essentials - Chapter 9

CCNA (R & S) Module 02 - Connecting Networks - Chapter 3

Why We Need IPv6

Interledger Workshop Berlin (1 June 2017)

Mikro tik

3hows

ION Malta - Seeweb Thoughts on IPv6 Transition

Applying IPv6 to LTE Networks

Building and operating a global DNS content delivery anycast network

Ipv4 To Ipv6 Transition

More from Cynthia Thomas

CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity

Cynthia Thomas

Kernel advantages for Istio realized with Cilium

Cynthia Thomas

Istio brings a myriad of options to provide routing rules, encryption, and monitoring for microservices, typically in container environments. Cilium provides accelerated network security using a modern kernel technology called BPF. Put the two together and what do you get? A distributed security solution enabling microservices traffic management, security, and monitoring while enforcing policy as close to the microservices as possible. Cynthia Thomas and Romain Lenglet discuss the architectural and performance benefits of using Cilium with Istio and provide a demo of this BPF-based, Linux kernel technology. Cilium provides an API-aware security solution that can make a decision on every single microservice flow, with the ability to enforce protocols such as HTTP, Kafka, and gRPC. By addressing security policy at the API layer, you can enforce policy efficiently with kernel capabilities while reducing the attack surface in a microservices deployment.

Cilium:: Application-Aware Microservices via BPF

Cynthia Thomas

Cilium: Seattle Kubernetes MeetUp Dec 2017

Cynthia Thomas

BPF (Berkeley Packet Filter) is becoming the fastest growing technology in the Linux kernel and is revolutionizing networking, security and tracing. At the same time, the rise of container-based orchestration platforms such as Kubernetes is creating demand for routing, load-balancing & security infrastructure that is highly scalable, application-aware, and resilient. This talk introduces the open source project Cilium - a modern networking and security platform for microservices. Cilium is built on top of BPF and provides Linux native networking and security services with application protocol awareness. Cilium works hand in hand with application proxies such as Envoy and the services management orchestration layer Istio to provide infrastructure services in a transparent manner and with minimal overhead. This talk will discuss the challenges of exposing services via APIs and the solution that Cilium provides to enforce least privilege security.

Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF

Cynthia Thomas

We have introduced Cilium at DockerCon US 2017 this year. Cilium provides application-aware network connectivity, security, and load-balancing for containers. This talk will follow up on the introduction and deep dive into recent kernel developments that address two fundamental questions: How can I provide application-aware security and routing efficiently without overhead embedded into every service? How can container hosts protect themselves from internal and external DDoS attacks? The solutions include: kproxy: a kernel-based socket proxy which allows for application-aware routing and security enforcement with minimal overhead. XDP: A lightning-fast packet processing datapath using BPF. The technology is intended for DDoS mitigation, load-balancing, and forwarding. This talk will deep dive into these exciting technologies and show how Cilium makes BPF and these kernel features available on Linux for your Docker containers.

Secure Your Containers: What Network Admins Should Know When Moving Into Prod...

Cynthia Thomas

Midokura @ OpenStack Seattle

Cynthia Thomas

What's the deal with Neutron?

Cynthia Thomas

CloudKC: Evolution of Network Virtualization

Cynthia Thomas

This document discusses the evolution of network virtualization. It begins with an overview of using VLANs for network virtualization, which provides L2 isolation but has limitations around scalability and management. OpenFlow is presented as an early approach that uses a centralized controller but has performance impacts. The document then introduces network overlays using software-defined networking as a more advanced approach, allowing network services to be decoupled from physical network hardware for improved scalability, agility and fault tolerance. It provides an overview of using the Midokura network virtualization platform with OpenStack Neutron for network automation and management.

From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking

Cynthia Thomas

This document provides an overview of the evolution of network virtualization and OpenStack networking. It describes how networking started with manually configured VLANs, moved to OpenFlow which required programming flows, and then to network overlays using software defined networking. It outlines the requirements for network virtualization. It also details the evolution of OpenStack networking from Nova network to Quantum/Neutron, including the transition to using overlays and supporting plugins. Key features of Neutron are summarized, as well as upcoming features planned for future OpenStack releases.

More from Cynthia Thomas (10)

CNSCon 2024 Lightning Talk: Don’t Make Me Impersonate My Identity

Kernel advantages for Istio realized with Cilium

Cilium:: Application-Aware Microservices via BPF

Cilium: Seattle Kubernetes MeetUp Dec 2017

Cilium – Kernel Native Security & DDOS Mitigation for Microservices with BPF

Secure Your Containers: What Network Admins Should Know When Moving Into Prod...

Midokura @ OpenStack Seattle

What's the deal with Neutron?

CloudKC: Evolution of Network Virtualization

From Nova-Network to Neutron and Beyond: A Look at OpenStack Networking

Recently uploaded

$calcaneal fracture seminar by dr vishu.pptx$ $calcaneal fracture seminar by dr vishu.pptx$

calcaneal fracture seminar by dr vishu.pptx

Skmch

Workshop Wednesday with SaaStr CEO Jason Lemkin - VC Workshop

saastr

A study on drug utilization evaluation of bronchodilators using DDD method

Dr. Afreen Nasir

The abstract was published as a conference proceeding in a Newsletter after being presented as an e-posture and secured 2nd prize during the scientific proceedings of "National Conference on Health Economics and Outcomes Research (HEOR) to Enhance Decision Making for Global Health" held at Raghavendra Institute of Pharmaceutical Education and Research (RIPER)- Autonomous in association with the International Society for Pharmacoeconomics and Outcomes Research (ISPOR)-India Andhra Pradesh Regional Chapter during 4th& 5th August 2023. Nasir A. A study on drug utilization evaluation of bronchodilators using the DDD method. RIPER - PDIC Bulletin ISPOR India Andhra Pradesh Regional Chapter Newsletter [Internet]. 2023 Sep;11(51):14. Available from: www.riper.ac.in

Call India - AmanTel on the App Store.ppt

Best International calling app on the market

Effective-Recruitment-Strategies and leveraging linkedin

DivyaMehta193660

2024-07-07 Transformed 06 (shared slides).pptx

Dale Wells

stackconf 2024 | On-Prem is the new Black by AJ Jester

NETWAYS

In a world where Cloud gives us the ease and flexibility to deploy and scale your apps we often overlook security and control. The fact that resources in the cloud are still shared, the hardware is shared, the network is shared, there is not much insight into the infrastructure unless the logs are exposed by the cloud provider. Even an air gap environment in the cloud is truly not air gapped, it’s a pseudo-private network. Moreover, the general trend in the industry is shifting towards cloud repatriation, it’s a fancy term for bringing your apps and services from cloud back to on-prem, like old school how things were run before the cloud was even a thing. This shift has caused what I call a knowledge gap where engineers are only familiar with interacting with infrastructure via APIs but not the hardware or networks their application runs on. In this talk I aim to demystify on-prem environments and more importantly show engineers how easy and smooth it is to repatriate data from cloud to an on-prem air gap environment.

Destyney Duhon personal brand exploration

minxxmaree

HERO.pdf hero company working cap management project

SambalpurTokaSatyaji

stackconf 2024 | Using European Open Source to build a Sovereign Multi-Cloud ...

NETWAYS

The European Commission has clearly identified open source as a strategic tool for bringing some balance to an EU cloud market currently dominated by a handful of non-EU hyperscalers. Part of that commitment comes through a series of ambitious, multi-million EU projects like the SIMPL platform for Data Spaces and the multi-country “Important Project of Common European Interest on Next Generation Cloud Infrastructure and Services” (IPCEI-CIS). For the first time in the history of the European Union, it is the EU industry who will be leading large-scale open source projects aimed at building European strategic technologies. In this talk we will explain in detail how specific European open source technologies are being brought together as part of some of those projects to start building Sovereign Multi-Cloud solutions that ensure interoperability and digital sovereignty for European users while preventing vendor lock-in in the cloud market, opening up competition in the emerging 5G/edge.

Building Digital Products & Content Leadership

Rajesh Math

Marketing Articles and ppt on how to do marketing ..Challenges faced during M...

ankitamarik05

Pengukuran berat badan anak dan tinggi badan anak

DeviDamayanti53

stackconf 2024 | Buzzing across the eBPF Landscape and into the Hive by Bill ...

NETWAYS

The buzz around the Linux kernel technology eBPF is growing quickly and it can be hard to know where to start or how to keep up with this technology that is reshaping our infrastructure stack. In this talk, Bill will trace how he got into eBPF, explore some of the applications leveraging eBPF today, and teach others how to dive into the hive of activity around eBPF. People just beginning with eBPF will learn how eBPF makes it possible to have efficient networking, observability without instrumentation, effortless tracing, and real-time security (among other things) without needing your own kernel team. Those already familiar with eBPF will get an overview of the eBPF landscape and learn about many new and expanding eBPF applications that allow them to harness the power without needing to dive into the bytecode. The audience will walk away with an understanding of the buzz around eBPF and knowledge of new tools that may solve some of their problems in networking, observability, and security.

Recruitment articles and posts- different & effective ways of recruitment

Rashi427200

Biography of the late Mrs. Stella Atsupui Eddah.pdf

AbdulSadickZutah

At the intersection of SEO & Product - Vanda Pokecz presentation

Vanda Pokecz

TEST WORTHINESS: VALIDITY, RELIABILITY, PRACTICALITY

AaSs197122

the sparks foundation JOB READINESS- how to be job ready. task 2

Rashi427200

Risks & Business Risks Reduce - investment.pdf

Home

Recently uploaded (20)

$calcaneal fracture seminar by dr vishu.pptx$ $calcaneal fracture seminar by dr vishu.pptx$

calcaneal fracture seminar by dr vishu.pptx

Workshop Wednesday with SaaStr CEO Jason Lemkin - VC Workshop

A study on drug utilization evaluation of bronchodilators using DDD method

Call India - AmanTel on the App Store.ppt

Effective-Recruitment-Strategies and leveraging linkedin

2024-07-07 Transformed 06 (shared slides).pptx

stackconf 2024 | On-Prem is the new Black by AJ Jester

Destyney Duhon personal brand exploration

HERO.pdf hero company working cap management project

stackconf 2024 | Using European Open Source to build a Sovereign Multi-Cloud ...

Building Digital Products & Content Leadership

Marketing Articles and ppt on how to do marketing ..Challenges faced during M...

Pengukuran berat badan anak dan tinggi badan anak

stackconf 2024 | Buzzing across the eBPF Landscape and into the Hive by Bill ...

Recruitment articles and posts- different & effective ways of recruitment

Biography of the late Mrs. Stella Atsupui Eddah.pdf

At the intersection of SEO & Product - Vanda Pokecz presentation

TEST WORTHINESS: VALIDITY, RELIABILITY, PRACTICALITY

the sparks foundation JOB READINESS- how to be job ready. task 2

Risks & Business Risks Reduce - investment.pdf

KubeCon NA'22 Lightning Talk: Where did all my IPs go?

1. Where did all my IPs go? Cynthia Thomas, Google @_techcet_

2. Why do I need IPs? Kubernetes uses Internet Protocol (IP) addressing for network communication. 2 fundamental networking rules: ● Pods can communicate with all other Pods on any other Node without NAT ● Agents on a Node can communicate with all Pods on that Node. Network models: ﬂat, air-gapped, & island modes.

3. Where did all my IPs go? ● IP requirements for a cluster? At least 3 IP blocks: Pods, Nodes, Services ● We started with allocating big ● Organizations face challenges assigning IP blocks for Kubernetes clusters

4. How did we help make it easier? ● Single-stack IPv6-only Support ● Dual-stack (IPv4/IPv6) Support ● Multiple Cluster CIDRs Support for NodeIPAM

5. Which KEPs are on the horizon? ● Support multiple Service CIDRs ● Reserve static and dynamic IP allocation for Service IP ranges

6. Where will all my IPs go? We can change the way we start: allocate small to start, and build up. K8s workloads may be the big push to move to IPv6 - Question for you: what are your thoughts?

7. Thank you! @_techcet_

KubeCon NA'22 Lightning Talk: Where did all my IPs go?

Related slideshows

Recommended for you

More Related Content

Similar to KubeCon NA'22 Lightning Talk: Where did all my IPs go?

Similar to KubeCon NA'22 Lightning Talk: Where did all my IPs go? (20)

More from Cynthia Thomas

More from Cynthia Thomas (10)

Recently uploaded

Recently uploaded (20)

KubeCon NA'22 Lightning Talk: Where did all my IPs go?