Re:IPvlan overlay-free Kubernetes Networking in AWS
by warp_factor on Tuesday December 05, 2017 @01:51PM
(#15854489)
Not all NetworkPolicy implementations base themselves on Source//Destination IPs. I can think specifically of Trireme//Cilium that are using metadata in order to enable policies.
[ Parent
| on HN ]
Re:IPvlan overlay-free Kubernetes Networking in AWS
by chris_marino on Tuesday December 05, 2017 @02:55PM
(#15855197)
I knew that. What I didn't know was if either of these could apply network policy to these endpoints. Guessing that since they each require their own CNI, there will be probs. So, whether the CNI uses iptables, or not, not clear how network policy API can be enforced.