This comprehensive guide explains how kube-proxy drives Service traffic in Kubernetes, compares userspace, iptables, IPVS, nftables and eBPF modes, and provides a four‑dimensional decision framework, migration steps, monitoring practices, and real‑world examples to help operators select the optimal mode for their clusters.
This article provides a systematic, layer‑by‑layer troubleshooting guide for Kubernetes service connectivity problems, covering pod health, service and endpoint configuration, kube‑proxy rules, CNI plugins, Ingress controllers, DNS resolution, and NetworkPolicy, with concrete commands, examples, and preventive scripts.
This article explains how Kubernetes implements load balancing both inside the cluster through Services and kube-proxy, and outside the cluster via Ingress controllers or cloud provider load balancers, covering common algorithms such as round‑robin, least connections, consistent hashing, and weighted strategies.
This article explains Kubernetes' internal and external load‑balancing mechanisms, detailing how Services, kube‑proxy, and IPVS work together and outlining common algorithms such as round‑robin, weighted round‑robin, least connections, IP hash, and consistent hashing.
This article explains the concept of IPVS (IP Virtual Server) as a layer‑4 load balancer, compares ipvs with iptables, details LVS scheduling algorithms, and provides step‑by‑step commands for configuring ipvsadm on both load‑balancer and real‑server nodes, including VIP setup and client testing.
This article explains how kube-proxy and CNI plugins cooperate within a Kubernetes cluster to translate Service ClusterIP requests into real Pod IPs, detailing the Netfilter, iptables/ipvs rule configuration, overlay networking modes, and the emerging proxy‑free approaches using eBPF.
This article provides a comprehensive guide to Kubernetes Service networking, covering container network models, intra‑ and inter‑node pod communication, Service‑Pod relationships, Service types (ClusterIP, NodePort, LoadBalancer, ExternalName), CoreDNS resolution, kube‑proxy operating modes, source IP preservation strategies, and Ingress handling.
This article explains how Kubernetes' kube-proxy component implements service discovery and load balancing using two modes—iptables and ipvs—detailing the underlying packet‑processing chains, NAT rules, probability‑based forwarding, and the performance differences between the two approaches.
This article explains the role of kube-proxy in Kubernetes service discovery and load balancing, compares its iptables and ipvs modes, and walks through real command outputs to show how traffic is routed, NAT‑ed, and balanced across multiple pods.
This article explains what a Kubernetes Service is, why it is needed, how to create one with a Deployment, and details the internal workings of Service controllers, Endpoints, and kube-proxy using iptables and ipvs modes.
This article explains why kube-proxy’s default iptables load-balancing can cause traffic imbalance during rolling updates, round-robin scheduling, and autoscaling, compares ipvs with iptables, and offers practical best-practice recommendations such as using source-hash scheduling and layer-7 proxies to achieve more even load distribution in Kubernetes clusters.
This article explains Kubernetes service discovery by first covering essential network concepts, then detailing how Services, DNS, Endpoints, and kube-proxy work together to provide stable, load‑balanced communication between dynamic Pods in a cluster.
This article explains how Kubernetes enables service‑to‑service communication using three native objects—ClusterIP Service, CoreDNS for DNS‑based discovery, and Kube‑proxy for DNAT—while abstracting the underlying network complexities from applications.
The article explains the workings of kube-proxy in iptables and IPVS modes, compares their differences, describes the use of ipset for efficient rule handling, and defines static Pods in Kubernetes, highlighting their management by the kubelet and lack of API Server involvement.
This article explains the key components of the Kubernetes master control plane, the mechanisms of Replication Controllers and ReplicaSets, and the role of kube-proxy in providing service IPs and load balancing across the cluster.
This article explains how native Kubernetes objects—ClusterIP Services, CoreDNS, and kube‑proxy—work together to provide reliable service‑to‑service communication inside a cluster, contrasting the approach with traditional IP‑based methods and detailing the networking model, service abstraction, DNS resolution, and packet translation.
This article explains how native Kubernetes objects—ClusterIP services, CoreDNS, and kube-proxy—work together to provide reliable service-to-service communication within a cluster, covering traditional IP-based approaches, the Kubernetes network model, DNS-based service discovery, and traffic routing via DNAT.
This article explains the core components of the Kubernetes control plane—including etcd, the API Server, Controller Manager, Scheduler—as well as key worker‑node components like Kubelet, kube‑proxy, and the container runtime, detailing their roles, interactions, and essential functions.
This article explains Kubernetes service discovery by first covering essential networking concepts, then detailing how Services provide stable endpoints, how they register with cluster DNS, how Endpoints track healthy Pods, and how kube-proxy routes traffic using iptables or IPVS to ensure reliable intra‑cluster communication.
This article explains Kubernetes service discovery by first covering essential networking concepts, then detailing how Services provide stable endpoints, how they register with cluster DNS, and how kube-proxy and iptables/IPVS route traffic to dynamic Pods.
This article explains the fundamental concepts, configuration methods, and underlying mechanisms of Kubernetes Services, covering typical Service definitions, the four Service types, their behavior under kube-proxy's iptables mode, and practical troubleshooting insights drawn from a real production outage.
This guide explains why routing traffic through an Nginx Ingress controller can halve Kubernetes service QPS and provides step‑by‑step instructions—including switching to IPVS, tuning kernel and file‑descriptor limits, and configuring keep‑alive settings—to restore and even exceed the original performance.
This guide explains why IPVS outperforms iptables for large Kubernetes clusters, then walks through installing ipvsadm, loading kernel modules on master and worker nodes, configuring kube-proxy to use IPVS, cleaning iptables rules, and verifying network and DNS functionality with a BusyBox pod.
This article reviews Kubernetes pod architecture, explains how pods obtain external access, and details how Services and kube-proxy provide load balancing and dynamic discovery for pod groups using selectors and virtual IPs.
This article explains Kubernetes service discovery by first covering the underlying pod network concepts, then detailing how Services provide stable endpoints, how they register with cluster DNS, the role of Endpoints and kube-proxy, and the iptables/IPVS mechanisms that route traffic to pods.
Both iptables and IPVS modes let kube-proxy route Service traffic, but iptables relies on a linear rule list that scales poorly, while IPVS uses hash-based O(1) lookups and richer algorithms, offering higher performance and scalability for large Kubernetes clusters.
This article recounts a real‑world Service outage, explains the purpose and principles of Kubernetes Services, details typical and selector‑less configurations, compares all Service types (ClusterIP, LoadBalancer, NodePort, ExternalName, Headless), and dives into the iptables‑based implementation used by kube‑proxy, complete with rule examples and performance considerations.
This article walks through installing Cilium as a CNI on a Kubernetes v1.21.3 cluster, disabling kube-proxy, and verifying network connectivity with an Nginx deployment, providing commands, configuration details, and validation steps for a kube‑proxy‑free setup.
This guide explains how kube-proxy in iptables mode, together with Calico BGP routing, translates service IPs to pod IPs, creates custom iptables chains, and routes traffic from external or node ports to the correct pod across a Kubernetes cluster.
This article details a real-world case where a JD Cloud engineer overcomes Kubernetes service limitations to enable external access to ClusterIP services and pods, exploring service types, network routing, packet capture analysis, and the solution of enabling kube-proxy’s masquerade‑all feature.
This article walks through the complete path of an HTTP request in a GKE Kubernetes cluster, explaining the role of the cloud load balancer, Service and ReplicaSet resources, kube-proxy operation modes, iptables rules, pod networking, and security considerations.
This article explains how Kubernetes provides stable service discovery by using a flat pod network, Service objects with immutable front‑ends and dynamic back‑ends, DNS registration, Endpoints, and kube‑proxy iptables/IPVS rules to route traffic from virtual ClusterIP addresses to healthy pods.
This article provides a detailed source‑code walkthrough of Kubernetes' kube‑proxy IPVS load‑balancing mode, explaining the command‑line setup with cobra, the internal ProxyServer and Proxier structures, the BoundedFrequencyRunner, ServiceConfig handling, and the core syncProxyRules function that generates IPVS, iptables and ipset rules.
This article examines kube-proxy’s three load‑balancing modes, focusing on the IPVS implementation, and walks through its source code, command‑line setup with cobra, core structures like ProxyServer and Proxier, the async BoundedFrequencyRunner, and the detailed service and endpoint synchronization processes.
This article explains how Kubernetes services work as load balancers using per‑node sidecar proxies, the role of kube‑proxy, and the iptables/netfilter mechanisms that implement DNAT for traffic routing within the cluster.
This article explains the role of Kubernetes Service and kube-proxy, details each Service type (ClusterIP, NodePort, LoadBalancer, Ingress), compares iptables‑based and IPVS‑based load‑balancing implementations, and provides configuration examples for both modes.
