kubernetes kubernetes/networking

Core Idea

The Kubernetes network model promises that every pod reaches every other pod across hosts without NAT, and CNI plugins are the components that must deliver those three rules.

  • All containers communicate with each other without NAT.
  • Nodes can communicate with containers without NAT.
  • A container’s IP address is the same as the IP that addresses see outside it.

Kubernetes Network Model

The Kubernetes networking model natively supports multihost cluster networking.
Pods can communicate with each other by default, regardless of which host they are deployed on.
Kubernetes relies on the CNI project to comply with the following requirements:

  • All containers must communicate with each other without NAT.
  • Nodes can communicate with containers without NAT.
  • A container’s IP address is the same as those outside the container that it sees itself as.