All You Can Eat Networking. Kubernetes Goodness for the Hungriest Workloads

on YouTube ↗30m

" summary

Calico integrates a VPP userspace data plane to replace Linux networking, using a Calico+VPP data plane driven by a calico-vpp agent and tun interfaces so pods stay unmodified; VPP runs in interrupt mode & no hugepages and implements service LB and Felix policy APIs. Kernel handoff uses GSO/GRO 64KB buffers to cut TCP overhead. Benchmarks show ~370k HTTP req/s with 67% CPU (vs ~350k at ~80%), up to 36 Gbps TCP and 12–36 Gbps encrypted, and connect latency stays ~250 µs versus >6 ms for iptables at 100k services.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 19:16Application Traffic
3. 21:05Product Status
4. 21:34Performance Benchmarks
5. 22:02Http Latency Test

" related talks

• 29mCalico/VPP: Using Calico’s Pluggable Dataplanes for Fun and Fast NetworkingAloys Augustin, Chris Tomkins · KubeCon + CloudNativeCon North America 2021
• 32mCalico Networking with eBPFShaun Crampton · Virtual Rejekts 2020
• 38mKubernetes Networking Infrastructure OffloadD Daly, N Jain, N Bitar, Moshe Levi, Vytautas Valancius · KubeCon + CloudNativeCon North America 2022
• 44mUnderstanding Calico's eBPF data-planeTomas Hruby · KCD Los Angeles 2023
• 23mContainer and Kubernetes security policy design: 10 critical best practicesJérémy Guerrand · ContainerDays 2023
• 52mImplementing holistic security for containers and KubernetesJan Bruder, Jérémy Guerrand · stackconf 2023
• 29mOpening the Black Box: Understanding and Troubleshooting Calico’s eBPF Data PlaneTomas Hruby · Cloud Native eBPF Day North America 2022
• 40mKubernetes Networking Panel: Collaborate on the Spec, Compete on ExecutionSusan Wu, Robert Starmer · KubeCon + CloudNativeCon North America 2016