Pod-to-Pod Communication (Same Node)

Pod-to-Pod Communication (Same Node) A sequence diagram generated by Archify. send packet (veth) lookup connection · policy allowed forward directly In-kernel direct path · bypasses the network stack receive packet (veth) Connection and policy check inside the kernel Direct delivery without the network stack Pod A · source pod · Sequence participant Pod A source pod eBPF Ingress (TC) · Pod A veth hook · Sequence participant eBPF Ingress (TC) Pod A veth hook CT + Policy Maps · eBPF maps · Sequence participant CT + Policy Maps eBPF maps eBPF Egress (TC) · Pod B veth hook · Sequence participant eBPF Egress (TC) Pod B veth hook Pod B · destination pod · Sequence participant Pod B destination pod Legend request return security default message