Improving Network Efficiency: The Power of Integrating Delegated...
summary
Native routing with Delegated IPAM removes VXLAN encapsulation and shows ~20% throughput improvement and lower CPU versus tunnel mode. Implementation uses a tiny node binary called Azure IPAM that talks to an Azure CNS daemonset via a NodeNetworkConfig CRD to allocate/release pod IPs, while Cilium remains the CNI and is configured via CNI.conf (CNI.customConfig=true). Works with most Cilium features but requires disabling endpoint health checking and some ingress controller features; local router uses link‑local.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:22Pod routing in Kubernetes
- 1:45Tunnel vs native routing in Cilium
- 3:09Performance benefits of native routing
- 3:31Challenges with IPAM modes
- 5:38Azure IPAM limitations in Cilium
- 7:21Delegated IPAM for cloud providers
- 8:05CNI delegation mechanism
- 9:49Delegated IPAM in practice
- 11:57Features with delegated IPAM
- 13:00Configuring delegated IPAM in AKS
- 14:23Open-source development of delegated IPAM
- 15:28Q&A
related talks
09mCilium on Azure: Most Scalable and Performant Implementation in...
17mUnlocking potential with eBPF & Cilium integration
44mCilium - Container Security and Networking Using BPF and XDP
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
22mTransparent MultiNIC Routing for Large AI Models
31mCilium Mesh
29mSimplifying the Networking and Secur...
29mThe Swiss Army Knife of Cloud Native Networking