UKUmair Khanini-umairkhan.hashnode.dev·Jun 6, 2024 · 2 min readReplacing kube-proxykube-proxy adjusts the iptables ruleset controlling load balancing of Kubernetes services to pods acting as service endpoints using forwarding rules for virtual IP addresses. kube-proxy installs multiple iptables rules for each backend a service is ...00
UKUmair Khanini-umairkhan.hashnode.dev·Jun 6, 2024 · 2 min readTransparent EncryptionCilium supports both IPsec and WireGuard to transparently encrypt traffic between nodes. What is Transparent Encryption Microservices inside cluster typically communicate across Kubernetes nodes that may be physically separated over a network that...00
UKUmair Khanini-umairkhan.hashnode.dev·Jun 6, 2024 · 4 min readPrometheus and Grafana with CiliumCilium and Hubble can both be configured to serve prometheus metrics. Cilium metrics show how Cilium components are operating and Hubble metrics provide information about network flows and network performance. Metrics Types Cilium Operator Metric...00
UKUmair Khanini-umairkhan.hashnode.dev·Jun 6, 2024 · 6 min readNetwork Observability using HubbleHubble Hubble is a fully distributed networking observability platform. Its built on top of Cilium and eBPF. Hubble was created and specifically designed to make best use of these new eBPF powers. Hubble Insights Hubbel can provide insights in ...00
UKUmair Khanini-umairkhan.hashnode.dev·Jun 6, 2024 · 6 min readCilium Network PolicyNetwork Policy Types Network Policies allow users to define what traffic is permitted in a Kubernetes cluster. Traditional firewalls permit or deny traffic based on destination IP address and ports but Kubernetes is a dynamic enviroment where IP ch...00
