VPC CNI + Calico Integration Architecture

VPC CNI + Calico Integration Architecture An architecture diagram generated by Archify. Kubernetes API Server · AWS managed · Control Plane (AWS managed) Kubernetes API Server AWS managed etcd · AWS managed · Control Plane (AWS managed) etcd AWS managed Application Container · application workload · Worker Node (customer managed) › Pod Application Container application workload Pause Container · holds the pod network namespace · Worker Node (customer managed) › Pod Pause Container holds the pod network namespace aws-node (IPAMD) · IP address management · Worker Node (customer managed) › VPC CNI aws-node (IPAMD) IP address management CNI Plugin · pod networking setup · Worker Node (customer managed) › VPC CNI CNI Plugin pod networking setup Felix · Policy Agent · Worker Node (customer managed) › Calico Felix Policy Agent iptables / eBPF Rules · Network Policy enforcement · Worker Node (customer managed) › Calico iptables / eBPF Rules Network Policy enforcement EC2 ENI · Secondary IP · Worker Node (customer managed) EC2 ENI Secondary IP AWS VPC · Subnet CIDR · Architecture component AWS VPC Subnet CIDR attach pod interface program rules enforce policy VPC routing watch policy watch Control Plane (AWS managed) Worker Node (customer managed) Pod VPC CNI Calico Legend Backend Database Cloud Security