weblogtag
networking
7 posts with this tag, newest first.
Tags, archive, series1 active
Tags
Archive
More
Posts 7
-
Cilium L2 LoadBalancer on bare-metal k3s
No cloud controller, no MetalLB — Cilium's built-in L2 announcements assign LoadBalancer IPs on bare-metal k3s using ARP.
-
Cilium NetworkPolicy: default-deny and DNS-aware rules
Default-deny ingress per namespace, allow from APISIX, CiliumNetworkPolicy toFQDNs for external APIs, L7 HTTP path rules, cluster-wide Prometheus scrape policy.
-
APISIX as Kubernetes ingress: rate limiting, JWT routing, and Lua plugins
APISIX Ingress Controller with ApisixRoute, limit-count for rate limiting per consumer, JWT claim-based routing for A/B testing, serverless Lua plugin for request transformation, canary releases.
-
Cilium network policy: default-deny and workload isolation
Default-deny CiliumNetworkPolicy per namespace, selective allow rules for DNS, ingress controller, inter-service traffic, FQDN-based egress policies, and L7 HTTP policy for path-level control.
-
APISIX as a Kubernetes ingress: global rules, TLS, and OpenTelemetry
ApisixGlobalRule for Elasticsearch logging, OpenTelemetry tracing, gzip, and real-ip. ApisixTls for wildcard certs. Two ingress classes: internal and external.
-
Hubble: network observability built into Cilium
Hubble UI and Relay setup in Cilium, flow inspection with hubble observe, DNS query visibility, policy verdict monitoring, and building Grafana dashboards from Hubble Prometheus metrics.
-
Cilium as kube-proxy replacement with L2 LoadBalancer on k3s
k3s installation without kube-proxy, Cilium Helm values for kube-proxy replacement mode, L2 announcement CiliumLoadBalancerIPPool and CiliumL2AnnouncementPolicy, and BGP alternative comparison.
No posts match the selected filters.