Gateway High Availability Deployment Architecture

Gateway High Availability Deployment Architecture An architecture diagram generated by Archify. Gateway Pod 1 (Leader) · Node ip-10-0-1-100 · eni-abc123 · Availability Zone A · leader Gateway Pod 1 (Leader) Node ip-10-0-1-100 · eni-abc123 leader Gateway Pod 2 (Standby) · Node ip-10-0-2-200 · eni-def456 · Availability Zone B · standby Gateway Pod 2 (Standby) Node ip-10-0-2-200 · eni-def456 standby Kubernetes Lease · Instance identity; not just Pod name · Architecture component Kubernetes Lease Instance identity; not just Pod name CiliumVTEPConfig · spec.endpoints · Architecture component CiliumVTEPConfig spec.endpoints VPC Route Table · 10.100.0.0/20 → eni-abc123 · Architecture component VPC Route Table 10.100.0.0/20 → eni-abc123 Holds Manages Programs Monitors Availability Zone A Availability Zone B Legend Backend Cloud Security

Leader

  • • Holds hybrid-gateway-leader Lease
  • • Programs aggregate AWS routes, then VTEP endpoints
  • • Local tunnel state is maintained by every replica

Standby

  • • Required host anti-affinity and preferred AZ anti-affinity
  • • Prepared local state; no normal takeover reconstruction
  • • Recovery time must be measured, not inferred from lease settings