SlideShare a Scribd company logo

Networks, Linux, Containers, Pods

Matt Turner, profile picture
Matt Turner

The document presents a detailed discussion on networking in Linux containers, particularly focusing on Docker and Kubernetes. It covers various topics such as network interfaces, IP binding, and proxy configurations with Envoy as well as sidecar injection processes. Additionally, it highlights command examples and configurations relevant to setups involving NGINX and multiple network interfaces.

Technology
1 of 51
Downloaded 13 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
Networks, Linux, Containers, and Pods Matt Turner Docker Meetup, London UK | January 2020 @mt165 | mt165.co.uk
Interfaces and Bridges
Networks, Linux, Containers, Pods
eth0 enp0s2
eth0 enp0s2 192.168.0.10
eth0 enp0s2 192.168.0.10 ping connect(“google.com”);
eth0 enp0s2 192.168.0.10 nginx bind(“*:80”);
eth0 192.168.0.10 nginx eth1 172.16.0.10 bind(“192.168.0.10:80”);
eth0 192.168.0.10 nginx bind(“172.16.0.10:80”); eth1 172.16.0.10
eth0 192.168.0.10e1000
e1000 eth0 192.168.0.10 hardware software
eth0 192.168.0.10e1000 foo0
eth0 192.168.0.10e1000 foo0
eth0 192.168.0.10e1000 foo0 packetd
eth0 192.168.0.10e1000 tun0 packetd172.16.0.10
eth0 192.168.0.10e1000 ping tun0 packetd172.16.0.10
eth0 192.168.0.10e1000 tap0 packetd 172.16.0.10 DE:AD:BE:EF:00:00
eth0 e1000 tap0 packetd br0
br0 eth0 e1000 tap0 packetd
br0 eth0 e1000 tap0 packetd br0 192.168.0.10
br0 eth0 e1000 tap0 br0 192.168.0.10 qemu [+ kvm]
br0 eth0 e1000 tap0 br0 192.168.0.10 e1000 eth0 qemu 192.168.0.11 C0:FF:EE:C0:FF:EE
br0 eth0 e1000 br0 192.168.0.10
br0 eth0 e1000 br0 192.168.0.10 nginx ping
br0 eth0 e1000 br0 192.168.0.10 nginx ping
br0 eth0 e1000 br0 192.168.0.10 nginx ping veth0 veth1
br0 eth0 e1000 br0 192.168.0.10 nginx ping veth0 veth1 172.16.0.1 172.16.0.2
br0 eth0 e1000 br0 192.168.0.10 nginx ping veth0 veth1 172.16.0.2
br0 eth0 e1000 br0 192.168.0.10 nginx ping veth0 veth1 172.16.0.2 ftpd
br0 eth0 e1000 br0 192.168.0.10 nginx ping veth0 eth0 172.16.0.2 ftpd
br0 eth0 e1000 br0 192.168.0.10 nginx ping eth0 172.16.0.2 ftpd
“Containers” nginx nginx net
“Containers” nginx nginx mnt pid uts user ipc net
Kubernetes Pods nginx nginx mnt pid uts user ipc net proxy envoy mnt pid
Kubernetes Pods nginx nginx mnt uts user ipc net proxy envoy mnt pid
Kubernetes Pods nginx nginx mnt uts user ipc net proxy envoy mnt 192.168.0.42 eth0 lo sockets iptables routes pid
Kubernetes Pods nginx nginx mnt uts user ipc net proxy envoy mnt 192.168.0.42 eth0 lo sockets iptables routes :8080/tcp pid
Kubernetes Pods nginx nginx mnt uts user ipc net proxy envoy mnt 192.168.0.42 eth0 lo sockets iptables routes :8080/tcp pid
Sidecar Injection uts user ipc net 192.168.0.42 eth0 lo sockets iptables routes pid
Sidecar Injection uts user ipc net 192.168.0.42 eth0 lo sockets iptables routes docker.io/istio/proxyv2 /istio-iptables -p 15001 -u 1337 ... pid mnt
pid Sidecar Injection nginx nginx mnt uts user ipc net docker.io/istio/proxyv2 envoy mnt 192.168.0.42 eth0 lo sockets iptables routes :15001/tcp
Networks, Linux, Containers, Pods
Networks, Linux, Containers, Pods
Networks, Linux, Containers, Pods
foofoobarfoo ContainerPort
foofoobarfoo ContainerPort
foofoobarfoo Cluster IP ContainerPort Port
foofoobarfoo kube-proxy kube-proxy Cluster IP ContainerPort Port etcd iptables
foofoobarfoo kube-proxy kube-proxy Cluster IP iptables TargetPort ContainerPort Port etcd
foofoobarfoo kube-proxy kube-proxy Cluster IP iptables TargetPort ContainerPort Port etcd ipset
Thanks! @mt165 Slides Videos Demo code mt165.co.uk

More Related Content

PDF
Software Networking and Interfaces on Linux
Matt Turner
 
PDF
Istio - The life of a packet
Matt Turner
 
PDF
Matt Turner: Istio, The Packet's-Eye View (DevSecOps - London Gathering, Janu...
Michael Man
 
PDF
The Life of a Packet through Istio - DevExperience Romania, April 2019
Matt Turner
 
PDF
The life of a packet through Istio - QCon London 2019
Matt Turner
 
PDF
The life of a packet through Istio
Matt Turner
 
PDF
LF_OVS_17_OVN and Containers - An update.
LF_OpenvSwitch
 
PDF
LF_OVS_17_OVS-DPDK Installation and Gotchas
LF_OpenvSwitch
 
Software Networking and Interfaces on Linux
Matt Turner
 
Istio - The life of a packet
Matt Turner
 
Matt Turner: Istio, The Packet's-Eye View (DevSecOps - London Gathering, Janu...
Michael Man
 
The Life of a Packet through Istio - DevExperience Romania, April 2019
Matt Turner
 
The life of a packet through Istio - QCon London 2019
Matt Turner
 
The life of a packet through Istio
Matt Turner
 
LF_OVS_17_OVN and Containers - An update.
LF_OpenvSwitch
 
LF_OVS_17_OVS-DPDK Installation and Gotchas
LF_OpenvSwitch
 

What's hot (17)

PDF
LF_OVS_17_OVS/OVS-DPDK connection tracking for Mobile usecases
LF_OpenvSwitch
 
PDF
Offloading TC Rules on OVS Internal Ports
Netronome
 
PDF
Nxll16 basic asa v8.2
Netwax Lab
 
PDF
Nat
Mohamed Gamel
 
PDF
Quality of Service Ingress Rate Limiting and OVS Hardware Offloads
Netronome
 
PDF
Nxll09 access list
Netwax Lab
 
PDF
Nxll12 zone based firewall
Netwax Lab
 
PDF
LF_OVS_17_OVS-DPDK: Embracing your NUMA nodes.
LF_OpenvSwitch
 
PDF
Ubuntu: Setup development environment for ruby on rails
Ganesh Kunwar
 
PDF
Eincop Netwax Lab: EIGRP ii
Netwax Lab
 
PDF
Docker-OVS
snrism
 
PPTX
Neutron Deep Dive
Joern Stenkamp
 
PDF
Eincop Netwax Lab: Access List ii
Netwax Lab
 
PDF
Eincop Netwax Lab: EIGRP iii
Netwax Lab
 
PPTX
Reference CNF development journey and outcomes
Victor Morales
 
PDF
Nxll23 i pv6
Netwax Lab
 
PDF
Nxll25 hsrp with failover
Netwax Lab
 
LF_OVS_17_OVS/OVS-DPDK connection tracking for Mobile usecases
LF_OpenvSwitch
 
Offloading TC Rules on OVS Internal Ports
Netronome
 
Nxll16 basic asa v8.2
Netwax Lab
 
Nat
Mohamed Gamel
 
Quality of Service Ingress Rate Limiting and OVS Hardware Offloads
Netronome
 
Nxll09 access list
Netwax Lab
 
Nxll12 zone based firewall
Netwax Lab
 
LF_OVS_17_OVS-DPDK: Embracing your NUMA nodes.
LF_OpenvSwitch
 
Ubuntu: Setup development environment for ruby on rails
Ganesh Kunwar
 
Eincop Netwax Lab: EIGRP ii
Netwax Lab
 
Docker-OVS
snrism
 
Neutron Deep Dive
Joern Stenkamp
 
Eincop Netwax Lab: Access List ii
Netwax Lab
 
Eincop Netwax Lab: EIGRP iii
Netwax Lab
 
Reference CNF development journey and outcomes
Victor Morales
 
Nxll23 i pv6
Netwax Lab
 
Nxll25 hsrp with failover
Netwax Lab
 
Ad

Similar to Networks, Linux, Containers, Pods (20)

PDF
Linux router
Miguel E Arellano Quezada
 
PDF
Understanding docker networking
Lorenzo Fontana
 
PDF
WebRTC 101 - How to get started building your first WebRTC application
Dan Jenkins
 
DOCX
Useful Linux commands
Sukanta Pradhan
 
PDF
Cncf k8s_network_part1
Erhwen Kuo
 
PPT
Linux networking
Armando Reis
 
PDF
Virtual IoT Meetup: Connecting Sensor Networks
Matthias Kovatsch
 
PDF
BGP Prime
KHNOG
 
PPTX
103 Basic network concepts
SsendiSamuel
 
PDF
Kamery, światło, akcja!
Matthias Hryniszak
 
ODP
Networking
Marian Marinov
 
PPTX
IoT with openHAB on pcDuino3B
Jingfeng Liu
 
PDF
Zenoh: The Genesis
Angelo Corsaro
 
PDF
Chap 18 net
Kenny (netman)
 
PDF
High-performance packet filtering with Pflua (FOSDEM 2015)
Igalia
 
PDF
Howto ethereal-wireshark-trace en
JORGE GOMEZ
 
PDF
HTTP and 5G (fixed1)
dynamis
 
PPTX
Building IoT infrastructure on edge with .net, Raspberry PI and ESP32 to conn...
Marco Parenzan
 
PDF
Handy Networking Tools and How to Use Them
Sneha Inguva
 
TXT
Dp lan wnt6-x86_1112_vista-7-x86
Victoria Cebotari
 
Linux router
Miguel E Arellano Quezada
 
Understanding docker networking
Lorenzo Fontana
 
WebRTC 101 - How to get started building your first WebRTC application
Dan Jenkins
 
Useful Linux commands
Sukanta Pradhan
 
Cncf k8s_network_part1
Erhwen Kuo
 
Linux networking
Armando Reis
 
Virtual IoT Meetup: Connecting Sensor Networks
Matthias Kovatsch
 
BGP Prime
KHNOG
 
103 Basic network concepts
SsendiSamuel
 
Kamery, światło, akcja!
Matthias Hryniszak
 
Networking
Marian Marinov
 
IoT with openHAB on pcDuino3B
Jingfeng Liu
 
Zenoh: The Genesis
Angelo Corsaro
 
Chap 18 net
Kenny (netman)
 
High-performance packet filtering with Pflua (FOSDEM 2015)
Igalia
 
Howto ethereal-wireshark-trace en
JORGE GOMEZ
 
HTTP and 5G (fixed1)
dynamis
 
Building IoT infrastructure on edge with .net, Raspberry PI and ESP32 to conn...
Marco Parenzan
 
Handy Networking Tools and How to Use Them
Sneha Inguva
 
Dp lan wnt6-x86_1112_vista-7-x86
Victoria Cebotari
 
Ad

More from Matt Turner (19)

PDF
The Life of a Packet through Istio III
Matt Turner
 
PDF
Automated Cloud-Native Incident Response with Kubernetes and Service Mesh
Matt Turner
 
PDF
apiserver-Only "Clusters" for fun and profit
Matt Turner
 
PDF
Istio + SPIRE for cross-domain traffic trust in hybrid-cloud scenarios
Matt Turner
 
PDF
Why Is Istio That Shape?
Matt Turner
 
PDF
Dynamically Testing Individual Microservice Releases In Production
Matt Turner
 
PDF
Gateway APIs, Envoy Gateway, and API Gateways
Matt Turner
 
PDF
The Life of a Packet III - Service Mesh London
Matt Turner
 
PDF
Cloud-Native Progressive Delivery
Matt Turner
 
PDF
An Introduction to Bazel
Matt Turner
 
PDF
What is a Service Mesh and what can it do for your Microservices
Matt Turner
 
PDF
Debugging an RBAC Problem in Istio
Matt Turner
 
PDF
Running Resillient Workloads with Istio - KubeCon China 2019
Matt Turner
 
PDF
Running Resillient Workloads with Istio - OpenInfra Days 2019
Matt Turner
 
PDF
Do You Need a Service Mesh? @ London Devops, January 2019
Matt Turner
 
PDF
Istio, The Packet's-Eye View - KubeCon NA 2018
Matt Turner
 
PDF
Bash is Testing
Matt Turner
 
PDF
Fluency
Matt Turner
 
PDF
An Introduction to User Space Filesystem Development
Matt Turner
 
The Life of a Packet through Istio III
Matt Turner
 
Automated Cloud-Native Incident Response with Kubernetes and Service Mesh
Matt Turner
 
apiserver-Only "Clusters" for fun and profit
Matt Turner
 
Istio + SPIRE for cross-domain traffic trust in hybrid-cloud scenarios
Matt Turner
 
Why Is Istio That Shape?
Matt Turner
 
Dynamically Testing Individual Microservice Releases In Production
Matt Turner
 
Gateway APIs, Envoy Gateway, and API Gateways
Matt Turner
 
The Life of a Packet III - Service Mesh London
Matt Turner
 
Cloud-Native Progressive Delivery
Matt Turner
 
An Introduction to Bazel
Matt Turner
 
What is a Service Mesh and what can it do for your Microservices
Matt Turner
 
Debugging an RBAC Problem in Istio
Matt Turner
 
Running Resillient Workloads with Istio - KubeCon China 2019
Matt Turner
 
Running Resillient Workloads with Istio - OpenInfra Days 2019
Matt Turner
 
Do You Need a Service Mesh? @ London Devops, January 2019
Matt Turner
 
Istio, The Packet's-Eye View - KubeCon NA 2018
Matt Turner
 
Bash is Testing
Matt Turner
 
Fluency
Matt Turner
 
An Introduction to User Space Filesystem Development
Matt Turner
 

Recently uploaded (20)

PPT
What is a Computer? Input Devices /output devices
GulJan8
 
PDF
DP Operators-handbook-extract for the Mautical Institute
LeonelMejiaLarios
 
PPTX
cloud_computing_Infrastucture_as_cloud_p
mainakbhattacharya20
 
PDF
STKI Israel Market Study 2025 version august
Dr. Jimmy Schwarzkopf
 
PDF
A comparative study of natural language inference in Swahili using monolingua...
IAESIJAI
 
PDF
NewMind AI Weekly Chronicles - August'25-Week II
NewMind AI
 
PPTX
observCloud-Native Containerability and monitoring.pptx
anupsingh76937
 
PDF
gpt5_lecture_notes_comprehensive_20250812015547.pdf
Chinchu40
 
PPTX
TechTalks-8-2019-Service-Management-ITIL-Refresh-ITIL-4-Framework-Supports-Ou...
bonakiduza1024
 
PDF
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
ssuser28425f
 
PDF
Univ-Connecticut-ChatGPT-Presentaion.pdf
ry7r52mzb4
 
PDF
Web App vs Mobile App What Should You Build First.pdf
KodekX
 
PDF
Architecture types and enterprise applications.pdf
ChristopherTHyatt
 
PDF
project resource management chapter-09.pdf
ssuser00e6e21
 
PDF
NewMind AI Weekly Chronicles – August ’25 Week III
NewMind AI
 
PDF
Microsoft Solutions Partner Drive Digital Transformation with D365.pdf
Microsoft Dynamics
 
PDF
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
Libreria ERP
 
PDF
August Patch Tuesday
Ivanti
 
PDF
2021 HotChips TSMC Packaging Technologies for Chiplets and 3D_0819 publish_pu...
KeXue5
 
PDF
WOOl fibre morphology and structure.pdf for textiles
Rajendrakumar868651
 
What is a Computer? Input Devices /output devices
GulJan8
 
DP Operators-handbook-extract for the Mautical Institute
LeonelMejiaLarios
 
cloud_computing_Infrastucture_as_cloud_p
mainakbhattacharya20
 
STKI Israel Market Study 2025 version august
Dr. Jimmy Schwarzkopf
 
A comparative study of natural language inference in Swahili using monolingua...
IAESIJAI
 
NewMind AI Weekly Chronicles - August'25-Week II
NewMind AI
 
observCloud-Native Containerability and monitoring.pptx
anupsingh76937
 
gpt5_lecture_notes_comprehensive_20250812015547.pdf
Chinchu40
 
TechTalks-8-2019-Service-Management-ITIL-Refresh-ITIL-4-Framework-Supports-Ou...
bonakiduza1024
 
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
ssuser28425f
 
Univ-Connecticut-ChatGPT-Presentaion.pdf
ry7r52mzb4
 
Web App vs Mobile App What Should You Build First.pdf
KodekX
 
Architecture types and enterprise applications.pdf
ChristopherTHyatt
 
project resource management chapter-09.pdf
ssuser00e6e21
 
NewMind AI Weekly Chronicles – August ’25 Week III
NewMind AI
 
Microsoft Solutions Partner Drive Digital Transformation with D365.pdf
Microsoft Dynamics
 
Profit Center Accounting in SAP S/4HANA, S4F28 Col11
Libreria ERP
 
August Patch Tuesday
Ivanti
 
2021 HotChips TSMC Packaging Technologies for Chiplets and 3D_0819 publish_pu...
KeXue5
 
WOOl fibre morphology and structure.pdf for textiles
Rajendrakumar868651
 

Networks, Linux, Containers, Pods