Kubernetes networking and Cilium - Part 1

Cilium is a solution for providing, securing, and observing network connectivity between workloads. In this video, we'll start with the basics of Kubernetes networking and explain how the Container Network Interface (CNI) plugins, such as Cilium, implement the Kubernetes network model.

[andy.mindful]

Thank you, great overview for newcomers to K8s world.

[spiraldynamics]

Thank you
Continue please to enter in details more and more 🤪

[nikhilsrivastava]

This was awesome, thanks a ton !! Can you explain in next video how can we assign a custom Security Identity to a subset of cilium endpoints based on some custom logic. Example - say a pod has multiple IP addresses (say 50) (due to multiple network interfaces on it) and then out of 50 IP addresses, I want to create a network policy to filter just 10 IP addresses from that pod. In that case a pod label based policy won't work. Hence, I was thinking if we can assign a custom security identity to those 10 endpoints and then stick that security identity in the network policy to entertain traffic originating from a subset of endpoints associated with a single pod.

[olasumbo]

It is not odd to Nigerians based in Nigeria watching Cilium..Remember there are so many Nigeria based in the US working in the devops space. Lol. We are starting to mentor Nigerians who are based in Nigeria about kubernetes. Nigerians banks and companies are some of the biggest in Africa.

[paulfx]

Hi Peter, Great deep dive into k8s & cilium networking. I do have a question though with on-prem baremetal deployment, do I still need to use MetalLB or can I use Cilium instead?

[BoyanOrion]

Why nftables were not used instead of iptables during this "transition" period towards ebpf?