Fernando Gonzalo Santa Clara

Kubernetes service doesn't load balance. Here is why 👇 By default, the kube-proxy component in Kubernetes uses iptables for routing requests. (Supports IPVS as well) We were curious about how it manages load balancing behind the scenes, and we discovered something interesting: a feature in iptables called 𝘀𝘁𝗮𝘁𝗶𝘀𝘁𝗶𝗰 𝗺𝗼𝗱𝗲 𝗿𝗮𝗻𝗱𝗼𝗺 𝗽𝗿𝗼𝗯𝗮𝗯𝗶𝗹𝗶𝘁𝘆. This feature is part of iptables and is used for packet filtering and network address translation. It allows you to create rules that match a specific percentage of packets at random. For example, we tested a service endpoint pointing to a three-pod deployment. It showed statistic mode random probability as 0.33 , essentially balancing the load across the three pods. It is more of a probabilistic traffic distribution, rather than actual load balancing. - It doesn't consider the actual load on the servers. - It doesn't guarantee an even distribution of traffic over time. - It doesn't maintain session persistence You might wonder, "Is it necessary to understand Kubernetes at this level?" The answer is Yes & No 😀 In one implementation, we encountered a major routing issue. By looking at the iptables rules, we ruled out any cluster configuration issues and pinpointed the problem. We cover many topics like these in our CKA course in bonus sections. 𝗖𝗵𝗲𝗰𝗸 𝗶𝘁 𝗼𝘂𝘁: https://lnkd.in/gGbQ5vYf If you have something to add, please drop a comment. #kubernetes #devops

202

13 comentarios

Your teams shouldn’t have to choose between saving money and delivering great performance. 🌟 In this edition of This Month in Datadog, we spotlight Datadog Kubernetes Autoscaling, which offers workload scaling recommendations and makes it easy to optimize clusters based on resource usage. We also dive into: ➡️ Surfacing anomalies and aligning teams with our new Cloud Cost Management features ➡️ Monitoring and optimizing LLM-powered applications with our LiteLLM integration ➡️ Gaining deeper visibility into your Kubernetes infrastructure with Datadog Workload Protection Plus, learn how you can connect with your peers, grow your skills, and explore the latest innovations at an upcoming Datadog Summit. Watch the full episode ⤵️

95

1 comentario

With Great Access Comes Great Responsibility! Access tokens are powerful - too powerful, if you don’t rein them in. Developer Advocate Andrea Chiarelli's deep dive into OAuth 2.0 explains how to keep those tokens on a tight leash using the Principle of Least Privilege. 👀 Learn how to: ✔️ Scope like a pro (no more scope=*) ✔️ Design granular permissions (e.g., orders:read, not just orders) ✔️ Validate tokens the right way, not just checking if they’re expired ‼️ Bonus: It includes a checklist you can actually use before you ship. 🔗 https://lnkd.in/e9Jacend

63

2 comentarios

Kubernetes on cloud should be fast and easy. Developers should not need to figure out how to use clunky features to get to the real work. Easy self-service makes it possible for developers to quickly: – build OCI-compliant images from source code – deploy containerized workloads — the GitOps way – automatically update container images of workloads – publicly expose applications – get instant access to logs, metrics, and traces – create and manage secrets – store images in a private registry – create private Git repositories and use built-in CI/CD pipelines Check out what ease-of-use looks like in the Akamai App Platform: https://ow.ly/WxJG50WuSn9

43

2 comentarios

Zadara was built from the ground up as a multi-tenant cloud, aligning natively with NVIDIA’s recommendations. Here’s how Zadara meets and exceeds the reference design expectations: -Native Multi-Tenancy -Full-Stack Workload Support -Per-Tenant Kubernetes Environments -Elastic Resource Allocation -Global Edge Presence Read more: https://lnkd.in/eTCu6rTF

31

What if your infrastructure and your editor spoke the same language? That’s what Augment Code and Render MCP server bring into your workflow. In this short demo, you’ll see how you can: • Investigate scaling issues inside your IDE • Access Render metrics and logs in real time • Trace unusual traffic sources Set up Render MCP in Augment in a single click: https://lnkd.in/g6NrNq-r #Render #Augment #MCP #VSCode #DevTools #DeveloperExperience 🎥 Watch the demo 👇

39

O'Reilly Media has just released Apache Polaris: The Definitive Guide—the first-ever book dedicated to the open-source, Iceberg-native catalog powering modern lakehouses. Authored by Dremio’s Alex Merced, this comprehensive guide offers hands-on strategies for building scalable, cloud-native data architectures using Apache Polaris. It covers everything from metadata management and governance to integrating with tools like Apache Spark, Flink, and Dremio. Whether you're a data engineer, architect, or analyst, this book is your roadmap to mastering the open lakehouse ecosystem. https://lnkd.in/givFEUgV

27

AWS' Guillermo Ruiz will dive into Top-Down Microarchitecture Analysis to surface the real causes of latency in containerized applications during a highly technical #P99CONF session. Using real-world examples, attendees will analyze workloads running on modern CPUs, all from within a Kubernetes context. https://lnkd.in/ebDnC332 #ScyllaDB

55

3 comentarios