KubeCon + CloudNativeCon Europe 2020

Finding the fault for k8s connectivity issues can be a daunting task and require several teams (DevOps, networking) to do their own due diligence. The best way to track down a connectivity error from the perspective of  a DevOps team is to deep-dive into packets’ journey through the Linux Network Stack.  In this session, we will walk through the following challenges for various open-source CNI providers, in real-time with the audience: If packets from your pods aren’t reaching their destination - how would you use tcpdump to determine where in the packet’s trajectory? Do you know what destination NAT’ing is, and at which step and how it happens (via iptables or IPVS)  for bridged and non-bridged CNI plugins? What about existing network policies and routes on your hardware - are there iptables rules conflicting with the rules added by kube-proxy?