This document discusses Kubernetes networking and security. It covers Docker networking and how all containers can communicate without NAT. It also discusses Kubernetes networking using Kubenet, Flannel, and Calico. Specifically, it explains how Kubenet provides networking between pods, how Flannel assigns each host a subnet and routes traffic between nodes, and how Calico uses IPIP encapsulation or routing to provide connectivity between pods.

1. Kubernetes Networking &
Security
Quân Hoàng
DevOps Engineer @ Fossil Group

2. Agenda

3. Docker Networking

4. Docker Networking

5. Docker Networking

6. Kubernetes networking
All containers can communicate with all other containers without NAT
All nodes can communicate with all containers (and vice-versa) without NAT
The IP that a container sees itself as is the same IP that others see it as

7. Pod Network

8. Kubernetes Networking - kubenet

9. Kubernetes Networking - kubenet

10. Kubernetes Networking - kubenet

11. Kubernetes Networking - Flannel

12. Kubernetes Networking - Flannel

13. Kubernetes Networking - Calico - IPIP

14. Kubernetes Networking - Calico - IPIP

15. Kubernetes Networking - Calico - Routing