Tagged: Kubernetes

4 posts · browse all tags

• 23 July 2026 LinuxContainer NetworkingNetworkingDockerTroubleshootingKubernetes

  Container Networking Deep Dive Part 10: A Full Walkthrough, Chasing a Cross-Node Connectivity Bug

  A checkout service scales out, starts failing calls to a payment gateway on a different node, and the failure turns out to be two separate problems stacked on top of each other. A start-to-finish walkthrough using every technique from this series.

• 23 July 2026 LinuxContainer NetworkingNetworkingCNIKubernetes

  Container Networking Deep Dive Part 5: What CNI Actually Is

  Kubernetes doesn't use Docker's networking model. It defines a plugin interface instead, CNI, with a lifecycle of exactly two verbs. Why one-IP-per-pod forced that split, and what a CNI plugin actually does when a pod starts.

• 23 July 2026 LinuxContainer NetworkingNetworkingCiliumeBPFKubernetes

  Container Networking Deep Dive Part 7: eBPF-Native Networking and the End of kube-proxy

  kube-proxy's default iptables mode chain-walks a rule per backend, per packet. Cilium's kube-proxy replacement skips that entirely, at the socket layer, before a packet is even built. What kube-proxy actually does, and what changes when eBPF replaces it.

• 30 June 2026 LinuxKuberneteseBPFSecurityNetworking

  Cilium: Kubernetes Networking and Security Built on eBPF

  Cilium replaces iptables-based kube-proxy and overlay CNIs with eBPF programs on the kernel datapath. Connects back to namespaces, veth pairs, nftables, and eBPF/XDP, then covers identity-based network policy and Hubble observability.