Networking & Ingress
20 articles from official documentation
CiliumCon Returns: Scaling eBPF Networking at KubeCon 2026
CiliumCon is back, and it's crucial for anyone involved in Kubernetes networking. With Cilium as the de facto CNI, understanding its eBPF foundation is key to managing workloads at scale. Don't miss out on the insights that could elevate your cloud-native architecture.
- →Understand Cilium as the de facto CNI for cloud-native networking.
- →Leverage eBPF for enhanced networking capabilities and observability.
OVHcloud Joins CNCF: What This Means for Kubernetes in Europe
The CNCF's new partnership with OVHcloud marks a significant shift for Kubernetes in Europe. With OVHcloud operating thousands of production Kubernetes clusters using Cilium, this collaboration promises enhanced networking and security for multi-tenant environments.
- →Leverage OVHcloud's Managed Kubernetes Service for scalable production clusters.
- →Utilize Cilium for enhanced networking and security in multi-tenant environments.
Migrating to ALB: Mastering oauth2-proxy in Kubernetes
Switching from NGINX Ingress to ALB can be tricky, especially when handling oauth2-proxy. Learn how to configure oauth2-proxy to work seamlessly with ALB's OIDC authentication capabilities.
- →Configure oauth2-proxy with `--reverse-proxy=true` to trust ALB headers.
- →Use `--pass-authorization-header=true` to forward tokens to your backend.
Navigating KubeCon + CloudNativeCon North America 2026: Your Path as an Infrastructure Engineer
KubeCon + CloudNativeCon North America 2026 is a pivotal event for infrastructure engineers. With sessions like Platform Engineering Day and CiliumCon, you'll dive into real-world challenges and advanced networking techniques. This is where your journey to mastering cloud-native infrastructure begins.
- →Attend Platform Engineering Day to tackle real-world challenges in building internal developer platforms.
- →Explore CiliumCon for advanced insights into cloud-native networking and observability.
AWS Dominates Container Management: Insights from the 2026 Gartner Magic Quadrant
AWS has been named a Leader in the 2026 Gartner Magic Quadrant for Container Management, and for good reason. With services like Amazon EKS and ECS, AWS simplifies the deployment and management of containerized applications at scale.
- →Utilize Amazon EKS for managed tooling that reduces operational burden.
- →Leverage Amazon ECS Express Mode for quick deployment of production-ready services.
Automate Proxy Injection in EKS Fargate with Kyverno
Tired of manually injecting proxy settings into your EKS Fargate pods? Kyverno's MutatingPolicy can automate this process, ensuring your applications route traffic through the corporate proxy seamlessly. Discover how to set this up effectively.
- →Leverage Kyverno's MutatingPolicy to automate proxy injection for EKS Fargate pods.
- →Use the `proxy-injection: enabled` label to trigger automatic environment variable injection.
Mastering Ingress: The Key to Kubernetes Networking
Ingress is your gateway to managing external access to services in Kubernetes. It allows you to define HTTP and HTTPS routes with precision, leveraging rules that dictate traffic flow. Get ready to dive into the specifics of how to configure and use Ingress effectively in production.
- →Define clear rules in your Ingress resource to manage traffic effectively.
- →Specify `ingressClassName` to ensure the correct Ingress controller is used.
Deploying Dragonfly Lightweight: P2P Distribution Without the Database Overhead
Tired of heavyweight database stacks slowing down your deployments? Discover how a lightweight Dragonfly deployment leverages Kubernetes primitives like ConfigMaps and headless Services for efficient P2P distribution. This approach simplifies your architecture while maintaining performance.
- →Leverage ConfigMaps to manage dynamic configurations efficiently.
- →Utilize headless Services for direct communication between Clients and Schedulers.
K8gb: Elevating Global Load Balancing in Kubernetes
K8gb is now a CNCF incubating project, marking a significant step in cloud-native global server load balancing. It automates traffic management and ensures seamless failover using Kubernetes-native health checks and CoreDNS.
- →Leverage K8gb's GSLB Custom Resource for global traffic management across clusters.
- →Utilize Kubernetes Native Health Checks to enhance routing decisions.
TCPRoute and UDPRoute in Gateway API v1.6: What You Need to Know
The Gateway API v1.6 marks a significant step forward with TCPRoute and UDPRoute graduating to standard status. These resources allow you to route traffic based solely on protocol and port, simplifying your networking configurations in Kubernetes.
- →Utilize TCPRoute to route traffic based on protocol and port without Layer 7 awareness.
- →Define a Gateway with listeners to attach TCPRoute and UDPRoute for efficient traffic management.
Injecting Chaos: My LFX Mentorship with kgateway
Chaos engineering is essential for resilient systems, and kgateway makes it easier to implement. I focused on adding HTTP fault injection support, enabling teams to test their services against real-world failures. This article dives into how I achieved this and what you need to know to leverage it effectively.
- →Implement fault injection support by extending TrafficPolicy in kgateway.
- →Use delay and abort injection to simulate real-world failures in your services.
Seamlessly Access Private Git Repositories in EKS with Argo CD
Unlock the power of Argo CD by integrating it with private Git repositories hosted on AWS. Learn how to set up AWS CodeConnections to create a secure network path for your Git server, ensuring smooth deployment workflows.
- →Configure AWS CodeConnections to create a secure network path for your private Git server.
- →Set the GIT_ENDPOINT_URL to your private Git server's URL for seamless access.
Mastering Full Request and Response Logging on Amazon EKS
In a world where compliance is non-negotiable, capturing full request and response data is crucial. Learn how Envoy’s External Processing filter enables this without altering your application code.
- →Utilize Envoy’s External Processing filter to capture full request and response data without modifying application code.
- →Ensure your traffic flows through the Istio Ingress Gateway for proper routing and logging.
Mastering EKS Control Plane Egress: Route Your Traffic with Precision
Amazon EKS now allows you to route Kubernetes control plane traffic through your own VPC, giving you greater control over egress traffic. By enabling CUSTOMER_ROUTED mode, you can ensure that API server calls follow your configured routes and security groups.
- →Enable CUSTOMER_ROUTED mode to control Kubernetes API Server egress traffic.
- →Use Elastic Network Interfaces (ENIs) to bind egress to your VPC subnets.
Zero-Downtime Migration: From Ingress NGINX to Envoy Gateway
Migrating from Ingress NGINX to Envoy Gateway without downtime is crucial for maintaining service continuity. By leveraging weighted DNS records, you can run both systems simultaneously and control traffic flow seamlessly. This article breaks down the practical steps to achieve this migration effectively.
- →Leverage weighted DNS records to manage traffic during migration.
- →Run Ingress and HTTPRoute simultaneously to ensure zero downtime.
Mastering Ingress Request Tracing for Multi-Tenant SaaS on Kubernetes
In a multi-tenant SaaS environment, understanding request flows is crucial for maintaining performance and reliability. By implementing end-to-end ingress request tracing, you can track customer requests through your services using Trace IDs and Span IDs.
- →Implement Trace IDs to group all spans for a single customer request.
- →Use Span IDs to identify individual units of work within each service.
Building a Cloud Native Platform: Kairos, k0rdent, and bindy in Action
Creating a cloud native platform from scratch can be daunting. With Kairos, you get an immutable Linux distribution that boots from OCI images, ensuring consistency. Dive into how k0rdent and bindy enhance your Kubernetes management and DNS operations.
- →Utilize Kairos for immutable, reproducible node configurations using OCI images.
- →Define node behavior and configurations in versioned YAML through FluxCD.
Mastering EKS Container Network Observability for Inter-AZ Traffic
Understanding inter-AZ and NAT gateway traffic is crucial for optimizing your Kubernetes workloads. With EKS Container Network Observability, you gain pod-level insights into network traffic, enabling better performance tuning and troubleshooting. Dive into how to leverage this powerful feature effectively.
- →Leverage the Network Flow Monitor Agent to gain pod-level insights into network traffic.
- →Use the `trafficDistribution` field to control how traffic is routed to service endpoints.
Streamline Your Hybrid Kubernetes Networking with EKS Hybrid Nodes Gateway
Hybrid cloud environments are complex, but the Amazon EKS Hybrid Nodes gateway simplifies networking between on-premises and cloud resources. By leveraging Cilium's VXLAN Tunnel Endpoint feature, it creates seamless connections that keep your applications running smoothly.
- →Utilize the Cilium VXLAN Tunnel Endpoint feature for seamless hybrid networking.
- →Configure the `autoModeConfig` parameter to enable EKS Auto Mode.
Migrating 60+ Resources from Ingress NGINX to Higress in 30 Minutes with AI
Ready to ditch Ingress NGINX? Discover how an AI agent can streamline your migration to Higress, a cloud-native API gateway. With features like zero-downtime reliability and advanced caching, you can transition seamlessly and efficiently.
- →Utilize an AI agent to audit your existing cluster for efficient migration.
- →Generate high-performance WebAssembly (WASM) plugins to replicate existing NGINX logic.
35% off the CKA and other certifications with code OCT26NONCYBER, or 40% off Kubernetes security certs (CKS, KCSA) with OCT26CYBER.
Get the daily digest
One email. 5 articles. Every morning.
No spam. Unsubscribe anytime.