Cilium Mesh
summary
Cilium Mesh extends Cilium’s cluster-mesh across VMs and servers by deploying a Transit Gateway (VM/router) that joins legacy networks to real Kubernetes API objects so endpoints appear in the cluster without modifying existing machines. It uses eBPF for high-performance policy, observability and load balancing, maps VM tags to Kubernetes NetworkPolicy labels, supports CNI chaining for many CNIs, offers mTLS/IPsec/WireGuard at the gateway, and has been tested to about 300k endpoints with churn being the main scaling challenge.
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:39What this talk is about
- 1:14What is Cilium
- 5:36Transit Gateway
- 8:12Natural Evolution
- 8:58Cluster Mesh
- 11:36Service Load Balancing
- 13:03Massive observability
- 14:05Kubernetes Network Policy
- 15:19Service Map
- 16:03Questions
- 19:28Service Discovery
- 21:26MTLS
- 23:32Stateless
- 24:48Scale
- 28:39DDOS protection
related talks
27mCilium Cluster Mesh: The eBPF-Powered Multicluster Solution for Kubernetes
35mNext-level Kubernetes Networking with Cilium - Nico Meisenzahl and Philip Welz
32mBreaking Boundaries: Multi-cluster with Cilium cluster mesh
24mThe Cilium Story - Why We Created Cilium
28mConnecting the World: Your Hands-on Guide To Cilium ClusterMesh and MCS-API
28mA Decade of Cilium Around the World
05mUnlocking Next-Gen Networking and Security with Cilium Service Mesh
36mCilium: Welcome, Vision and Updates