Container networking lightning talk featuring Project Calico

This is the lightning talk I gave at the Kubernetes London launch party at Skill Matter on 6th August 2015.

Transcript

1. Oh No - Not another networking pitch! Ed Harrison (@eepyaich) Project Calico
2. Most Container Networks
3. Virtual L2 segments, implemented in software by virtual switch vSwitch vSwitch vSwitch Linux Linux Linux Encap / de- encap (& flooding!) Outer MAC Outer IP Outer UDP VXLAN VM MAC VM IP VM TCP/UDP VM Data Router services required to hop between tenants NAT required for public Internet access On/off-ramp required to get to NAS, etc. Virtual L2 segments, implemented in software by virtual switch
4. That seems a bit complicated
5. All I need is IP…
6. … and security
7. IP App IP App IP App IP App IP App IP App IP App IP App Router Router Router BGP BGP Hosts What if we built a data center like the internet?
8. What if we built a data center like the internet? IP App IP App IP App IP App IP App IP App IP App IP App BGP BGP Compute Node Compute Node Containers Router Router Router Containers
9. This is Project Calico Simple Scalable Open Thousands of servers, 100k’s of workloads Don’t demand users to be networking experts Open source and open standards
10. Project Calico – key Principles IP  Perform layer 3 forwarding at each compute node  Leverage Linux kernel’s efficient IP forwarding engine – no separate vSwitch BGP  Distribute routes using proven Border Gateway Protocol, with route reflectors for scale  Program routes into Linux kernel on each host (and into physical fabric if required)  Separate policy decisions from routing information  Translate global policy into distributed firewall on each host, enabling tenant isolation & more
11. Works with Kubernetes! http://www.projectcalico.org/calico-networking-for-kubernetes/
12. More Information  Main project website: www.projectcalico.org  Github  https://github.com/projectcalico  Mailing list info:  http://www.projectcalico.org/contact/  Download & try it out  We welcome your feedback and contributions  Follow us @projectcalico or me @eepyaich