Lightning Talk: Closing the Gap: Fair North–South Bandwidth Management for Tenants
summary
Built a lightweight in-cluster solution that enforces a single tenant-level north–south ingress cap across many Envoy replicas using Cilium and Spiderpool with Multus. The design advertises LoadBalancer IPs via ARP announce pods (macvlan + veth) and applies tc on the veth so traffic is rate-limited before hitting the node, avoiding BGP or L2 announcements. A new ingress bandwidth policy CRD maps service LB IPs to limits, replacing costly external appliances.
AI-written summary · about
related talks
07mLightning Talk: Taming Noisy Network Neigbours with Cilium and eBPF
10mLightning Talk: Envoy @ Netflix
05mLightning Talk: Optimizing Cluster Workloads: Cilium Envoy on DPU
05mLightning Talk: Unveiling 5 Essential Insights from Cilium Implementation in a...
10mLightning Talk: Rate Limiting With Quotas Is Hard - So We Didn't!
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
10mLightning Talk: Connecting Klusters on the Edge with Deep Dive into Cilium Cluster Mesh
27mMeshing It up Securely: How Roche Manages Network Connectivity for...