Cilium Kubernetes CNI Provider: Part 4, IP Routing Modes (Direct and Encapsulated)

[@spiraldynamics6008]

Thank you! very good videos!! Please continue ! ❤️

[@darpanmalhotra2]

I have been following all CNI videos you have posted. You are doing an amazing work of sharing this knowledge with us. Many thanks !

[@TheLearningChannel-Tech]

Thank you!

[@amukher1]

You have been a huge help for me in learning Cilium. There is one things that isn't clear though. In the direct routing mode, which CIDR can you use for the pod network? Is it any arbitrary CIDR or something that depends on the existing node network? EDIT: Never mind, I figured that I can use any CIDR. Thank you again.

[@ola-lr6vc]

Great job, thanks you. It helped me to learn a lot, you deserve more views !

[@TheLearningChannel-Tech]

Thank you, I appreciate that!

[@jankoprowski]

Thank you for your videos :) They are the best videos I watched related with networking and kubernetes. I would be thrilled if you could add video explaining keepalived :D

[@TheLearningChannel-Tech]

Hi and thank you! Keepalive as in tcp and http connections? If so, I'll add that to my list, though can't say I'll get to it due to other projects I'm working right now. Thanks!

[@agestar333]

You're doing great job, thank you for videos!

[@TheLearningChannel-Tech]

Thank you, glad you like them!

[@SuperBitbucket]

Thank you for the great content!! I was a tad confused at 6:40. The Dst IP in the center shows 10.101.79.42. Is this just a typo and really should be the cluster IP of 10.107.72.75?

[@TheLearningChannel-Tech]

Hi and thank you! You are absolutely right, the IP in that header should be 10.1.07.75. Sorry about that! I'll make a note in the description. Thanks again for noticing it!

[@nikhilsrivastava9120]

how can we embed some custom identity to the vxlan routing based approach in order to have isolation when traffic egresses to another pod on another node?

[@TheLearningChannel-Tech]

VXLAN really is a communication protocol that guides packets from one system to another, it is not a security protocol. In the Kubernetes world, network policies are used to secure communication (both ingress and egress). POD and name spaces are labeled to identify them when policies are created. I have a number of videos that deal with Kubernetes network policies that you can watch.

[@buacomgiadinh1]

thank you for your videos

[@TheLearningChannel-Tech]

My pleasure!

[@jingairpi]

Possible to mesh between vxlan and direct routing?

[@TheLearningChannel-Tech]

I don't believe so because you have to commit to one or the other when s cluster is initially set up.

[@keratishvili]

would we see more cilium series videos?

[@TheLearningChannel-Tech]

Hi, yes.

[@keratishvili]

@@TheLearningChannel-Tech 💘💘

[@hemantbali5076]

can vxlan + cluster mesh is possible?

[@TheLearningChannel-Tech]

VXLAN is Cilium's default routing and encapsulation method. If you don't specifically configure Cilium to use Direct routing/BGP it will use VXLAN.

[@eBPFCilium]

Thanks for making this video and all the other ones too! If you want some Cilium swag, DM us your address on Twitter and we will get it to you :)