September 27, 2019

199 words 1 min read

Proxy Service: A New Network Traffic Abstraction in Kubernetes

Proxy Service: A New Network Traffic Abstraction in Kubernetes

Kubernetes master-to-cluster communication doesnt get as much attention as the opposite direction, yet many critical features (kubectl proxy, logs, exec, ) rely on it to function. In order to suppor …

Talk Title Proxy Service: A New Network Traffic Abstraction in Kubernetes
Speakers Walter Fender (Software Developer, Google), Yongkun Gui (Software Engineer, Google)
Conference KubeCon + CloudNativeCon
Conf Tag
Location Shanghai, China
Date Jun 23-26, 2019
URL Talk Page
Slides Talk Slides
Video

Kubernetes master-to-cluster communication doesn’t get as much attention as the opposite direction, yet many critical features (kubectl proxy, logs, exec, …) rely on it to function. In order to support secure communications from Kube API Server running on the control network to nodes running on a cluster network, SSH Tunnels were developed. This technology complicates the API Server in a manner which is neither extensible nor popular. The new proposed gRPC based proxy service abstracts this complexity away from the API Server, while providing a greater degree of extensibility. In this talk, we will see how SSH tunnels are implemented right now, what the new proxy service looks like, and how it opens the door to future extensions for use cases like auditing and multi-network support.

comments powered by Disqus