Benchmark results of Kubernetes network plugins over 10Gb/s network

Re:Benchmark results of Kubernetes network plugins over 10Gb... by jamp897 on Friday November 30, 2018 @01:02PM (#18570986)

I have to admin I’ve never quite understood the need for the overlay network, esp with such a large performance impact. Security has been moving higher up into the app layer anyway with Beyond Corp style approaches. What are the uses cases driving it?

[ Parent | on HN ]

Re:Benchmark results of Kubernetes network plugins over 10Gb... by dharmab on Friday November 30, 2018 @03:25PM (#18572290)

In our case, service mesh and network isolation (including for potentially untrusted code). Being able to ensure that pods can't talk to each other by default and managing whitelists for service to service communication. Managing that without an overlay is a pain once you're past a handful of nodes.

[ Parent | on HN ]

Re:Benchmark results of Kubernetes network plugins over 10Gb... by wmf on Friday November 30, 2018 @02:21PM (#18571804)

Most of the CNIs tested here are not overlays.

But in general most companies can't do automation or self-service in their physical network so overlays are the only way to get any network agility. And BeyondCorp is much harder than that.

[ Parent | on HN ]