Life of a packet in Amazon EKS
summary
Shows concrete packet walks in Amazon EKS and claims what actually happens: VPC CNI maps pod IPs to ENIs using secondary IPs so pod-to-pod can trombone across nodes and AZs causing extra latency and data transfer charges; kube-proxy iptables does DNAT/SNAT and can hide client IPs unless externalTrafficPolicy=Local or the AWS controller uses TargetType=IP; NLB can preserve client IP while ALB always SNATs and uses X‑Forwarded‑For; diagrams and public-tool traces back each claim.
AI-written summary · about
chapters (9)
- 0:00Introduction and Speaker Background
- 1:12Overview of Kubernetes and Amazon EKS
- 1:42Deep Dive into Kubernetes Architecture
- 5:00Pod Connectivity and Network Models
- 8:20Packet Walks and Traffic Flow
- 15:18Kubernetes Services and Load Balancing
- 24:40NodePort and LoadBalancer Services
- 40:57Ingress and Layer 7 Load Balancing
- 48:08Conclusion and Additional Resources
related talks
34mLife of a Packet [I]
20mKubernetes Networking 101
51mHow Kubernetes Networking Really Works: A Packet’s Journey Across Pods and Nodes
40mCloud, Kubernetes, and Service Networking - Taming the Turtles
29mAmazon Elastic Container Service for Kubernetes (EKS): A case study - M. Re Ferre' and G. Carabelli
25mApplication Networking on Kubernetes, where are we now?
35mWho Dropped the Packet? Solving K8s Network Mysteries in Real-Time
34mIt's Not Always the Network (But Here's How to Prove It): Kubernetes Packet...