Deep Dive: NATS
summary
NATS v2 ships June 10 with concrete changes: NATS v2 adds account-based multi‑tenancy, streams and services abstractions, JWT-backed decentralized identities and nkeys (ed25519) for auth, plus gateways/leaf nodes to form superclusters. An NGS deployment runs these features in production since December, routing is not backward compatible so clusters must be upgraded and clients reconnect, and the Kubernetes operator supports gateways, hostPort/externalIP setups and cert-manager TLS. Claimed raw throughput reaches 80M msgs/s on busy machines.
AI-written summary · about
chapters (25)
- 0:00Intro
- 0:43About the speaker
- 5:20NATS V2 Features
- 6:28NATS V1 Authorization
- 7:37Introducing Accounts
- 9:01Accounts + Clustering
- 9:49The Global Account
- 10:47Account Sharing
- 11:16Services
- 12:43Requests across accounts N
- 13:43Streams
- 15:09NKEYS and JWTS
- 16:29Using NKEYS users
- 18:06NATS Account Server
- 19:47NKEYS Connect
- 23:04NATS Super Cluster At most 3 hops
- 24:02System Events
- 25:15Lame Duck Shutdown
- 25:51NATS Operator
- 26:26NATS v2 on K8S
- 27:53Clustering using Headless suc N
- 28:29Advertising external IP
- 29:24Operator Config
- 30:04Using the System Account
- 32:25NATS Super Cluster +Leafnodes
related talks
39mNATS-Sync: Secure, Multi-Tenant, Cross Cluster Message Routing
31mWhat's New in Knative Eventing: Security, Discovery, Integrations, and JobSink
33mBuilding a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A]
29mSimplifying the Networking and Secur...
40mReimagining Application Networking and Security
30mApplication network security and observability in an encrypted future
06mLightning Talk: Optimizing SNAT Port and IP Address Management in Ku...
24mCGN - Carrier Grade NAT - Carrier Grade Problems