Cluster Network Architecture

Cluster Network Architecture An architecture diagram generated by Archify. Cluster Networking · Pod traffic · Discovery · External access · Architecture component Cluster Networking Pod traffic · Discovery · External access Pod Network · Pod-to-pod communication · Networking areas Pod Network Pod-to-pod communication Service Network · Service discovery · Networking areas Service Network Service discovery Ingress · External access · Networking areas Ingress External access Network Policies · Traffic control · Networking areas Network Policies Traffic control CNI Plugin · Calico · Flannel · Cilium · Implementing mechanisms CNI Plugin Calico · Flannel · Cilium Service Types · ClusterIP · NodePort · LoadBalancer · Implementing mechanisms Service Types ClusterIP · NodePort · LoadBalancer Ingress Controller · Implementing mechanisms Ingress Controller Network Security · NetworkPolicy · Implementing mechanisms Network Security NetworkPolicy implemented by exposed via implemented by enforced by Networking areas Implementing mechanisms

CNI plugin comparison

  • • Calico: BGP-based, supports network policies
  • • Flannel: VXLAN, simple setup, no network policies
  • • Cilium: eBPF, L3-L7 policies, high performance
  • • AWS VPC CNI: optimized for AWS EKS