Mixing
Direct pod networking with Kubernetes
I am trying to move a currently docker based app to Kubernetes.
My app inspects network traffic that passes through it, and because of that it needs an accessible External IP, and it needs to accept traffic on all ports, not just some.
Right now, I am using docker with a macvlan network driver in order to attach docker containers to multiple interfaces and allow them to inspect traffic that way.
After research, I've found that the only way to access pods in Kubernetes is using Services, but services only allow that through some specific ports, because it is mostly intended for "server" type applications, and not "forwarder"/"sniffer" type which is what I am looking for.
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
networking kubernetes
edited Nov 21 '18 at 17:45
Rico
27.9k94966
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
add a comment |
I am trying to move a currently docker based app to Kubernetes.
My app inspects network traffic that passes through it, and because of that it needs an accessible External IP, and it needs to accept traffic on all ports, not just some.
Right now, I am using docker with a macvlan network driver in order to attach docker containers to multiple interfaces and allow them to inspect traffic that way.
After research, I've found that the only way to access pods in Kubernetes is using Services, but services only allow that through some specific ports, because it is mostly intended for "server" type applications, and not "forwarder"/"sniffer" type which is what I am looking for.
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
networking kubernetes
edited Nov 21 '18 at 17:45
Rico
27.9k94966
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
add a comment |
I am trying to move a currently docker based app to Kubernetes.
My app inspects network traffic that passes through it, and because of that it needs an accessible External IP, and it needs to accept traffic on all ports, not just some.
Right now, I am using docker with a macvlan network driver in order to attach docker containers to multiple interfaces and allow them to inspect traffic that way.
After research, I've found that the only way to access pods in Kubernetes is using Services, but services only allow that through some specific ports, because it is mostly intended for "server" type applications, and not "forwarder"/"sniffer" type which is what I am looking for.
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
networking kubernetes
edited Nov 21 '18 at 17:45
Rico
27.9k94966
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
I am trying to move a currently docker based app to Kubernetes.
My app inspects network traffic that passes through it, and because of that it needs an accessible External IP, and it needs to accept traffic on all ports, not just some.
Right now, I am using docker with a macvlan network driver in order to attach docker containers to multiple interfaces and allow them to inspect traffic that way.
After research, I've found that the only way to access pods in Kubernetes is using Services, but services only allow that through some specific ports, because it is mostly intended for "server" type applications, and not "forwarder"/"sniffer" type which is what I am looking for.
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
networking kubernetes
networking kubernetes
edited Nov 21 '18 at 17:45
Rico
27.9k94966
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
edited Nov 21 '18 at 17:45
Rico
27.9k94966
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
edited Nov 21 '18 at 17:45
Rico
27.9k94966
edited Nov 21 '18 at 17:45
Rico
27.9k94966
edited Nov 21 '18 at 17:45
Rico
27.9k94966
27.9k94966
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
asked Nov 21 '18 at 15:33
Roy CohenRoy Cohen
337
337
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
Being a good fit is more of an opinion, the pods in Kubernetes have their own PodCidr that is not exposed to the outside world and a sniffer doesn't quite fit in either a service or a job definition which are the typical workloads in Kubernetes.
Having said, it can be done if you can use your custom CNI plugin that supports macvlan
You can also use something like Multus that supports the macvlan plugin.
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53415466%2fdirect-pod-networking-with-kubernetes%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
Being a good fit is more of an opinion, the pods in Kubernetes have their own PodCidr that is not exposed to the outside world and a sniffer doesn't quite fit in either a service or a job definition which are the typical workloads in Kubernetes.
Having said, it can be done if you can use your custom CNI plugin that supports macvlan
You can also use something like Multus that supports the macvlan plugin.
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
add a comment |
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
Being a good fit is more of an opinion, the pods in Kubernetes have their own PodCidr that is not exposed to the outside world and a sniffer doesn't quite fit in either a service or a job definition which are the typical workloads in Kubernetes.
Having said, it can be done if you can use your custom CNI plugin that supports macvlan
You can also use something like Multus that supports the macvlan plugin.
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
add a comment |
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
Being a good fit is more of an opinion, the pods in Kubernetes have their own PodCidr that is not exposed to the outside world and a sniffer doesn't quite fit in either a service or a job definition which are the typical workloads in Kubernetes.
Having said, it can be done if you can use your custom CNI plugin that supports macvlan
You can also use something like Multus that supports the macvlan plugin.
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
Is Kubernetes a good fit for this type of application? Does it offer tools to cope with this problem?
Being a good fit is more of an opinion, the pods in Kubernetes have their own PodCidr that is not exposed to the outside world and a sniffer doesn't quite fit in either a service or a job definition which are the typical workloads in Kubernetes.
Having said, it can be done if you can use your custom CNI plugin that supports macvlan
You can also use something like Multus that supports the macvlan plugin.
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
answered Nov 21 '18 at 18:32
RicoRico
27.9k94966
27.9k94966
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
add a comment |
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
I've read about Multus and CNI beforehand, but that is not my problem here. I want a pod to recieve all traffic that is sent to a specific IP address, no matter the port. Is there a way to do such a thing with services?
– Roy Cohen
Nov 22 '18 at 7:59
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
could you advise me here?
– Roy Cohen
Nov 24 '18 at 18:55
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53415466%2fdirect-pod-networking-with-kubernetes%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
