Nov 2, 2025 · 4 min read · Kubernetes is a powerful platform for managing containerized applications, but with that power comes the responsibility of securing your deployments. One crucial aspect of Kubernetes security is controlling network traffic between pods. That's where ...
Join discussion
Sep 27, 2025 · 5 min read · Kubernetes (K8s) has become the backbone of modern cloud infrastructure. In the last parts, we discussed Pods, ReplicaSets, Deployments, and Namespaces — all essential for deploying and managing applications. But how do these applications communicate...
Join discussionAug 3, 2025 · 5 min read · Dynamic Egress Controller for Kubernetes Overview This blog covers the journey of implementing a dynamic egress controller in Kubernetes to securely manage outbound traffic from pods. The solution is built using Python and Kopf (Kubernetes Operator F...
Join discussionJan 10, 2025 · 2 min read · Check following two networkpolicy yaml file, np1.yaml and np2.yaml: # np1.yaml apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: np namespace: space1 spec: podSelector: {} policyTypes: - Egress egress: - to: - nam...
Join discussionNov 4, 2024 · 4 min read · This blog is written by Akshat Virmani at KushoAI. We're building the fastest way to test your APIs. It's completely free and you can sign up here. As cloud-based applications scale and serve more traffic, developers and businesses often focus on ens...
Join discussionJun 26, 2024 · 5 min read · Introduction In Kubernetes we can deploy as many as pods which is for different application or have specific usage, by default in Kubernetes cluster all pods can communicate to each other but If we want some specific pods to not be communicated by ot...
Join discussion
Jun 22, 2024 · 3 min read · 🗼Introduction In the world of Kubernetes, managing and securing network traffic between pods is crucial for maintaining a robust and secure application environment. This is where Network Policies come into play. This blog will delve into the concept...
Join discussionAug 24, 2018 · 3 min read · Istio 还是早期版本的时候，我曾经有个蒙事的混蛋设想：在网格里面搭建一个反向代理，用于代理网格甚至是集群之外的存量应用，让这些改不得甚至动不得又正在赚钱的应用，以网格内成员的身份对网格中的微服务提供服务。后来知道了，Istio 的 Egress Gateway 实现了这一混蛋想法。 原理 根据官方文档的解释： Gateway 描述了一个负载均衡器，用于承载网格边缘的进入和发出连接。这一规范中描述了一系列开放端口，以及这些端口所使用的协议、负载均衡的 SNI 配置等内容。 之前的 Ser...
Join discussionAug 20, 2018 · 3 min read · 上一篇讲了一些入口流量的事情，在实际项目运行中，还有另外一类边界流量，就是出口流量，也常被称为 egress 流量。这一篇结合一点实际需求，设计一些常用场景，讲讲服务网格中对外部服务的调用过程。 这里我们需要几个服务定义，首先是用于模拟客户端服务的工作负载，这里继续使用 dustise/sleep 镜像。外部我们使用两个网站作为我们的外部服务演示，分别代表 http 和 https 两种：http://httpbin.org 和 https://api.jd.com/。 开始之前 根据安装文档的...
Join discussionJun 23, 2018 · 7 min read · 原文：Monitoring and Access Policies for HTTP Egress Traffic 作者：VADIM EISENBERG 和 RONEN SCHAFFER Istio 的主要功能就是在服务网格内部管理微服务之间的通信，除此之外，Istio 还能对 Ingress（从外部进入网格） 和 Egress（从网格发出到外部） 流量进行管理。不管是网格内部流量，还是 Ingress 或者 Egress 流量，Istio 都能够在其中进行访问策略的控制，并完成遥测数据的聚合工...
Join discussion