wireless_purposely832

@ wireless_purposely832 @lemmy.world

Posts

1
Comments

24
Joined

1 yr. ago

1y ago

Multiple Kubernetes Services Using Same Port Without SNI
Jump
2

wireless_purposely832 @lemmy.world 1y ago
I am unsure if I understood everything correctly, but I believe I am already doing everything that you mentioned. I followed the Kube-VIP's ARP daemonset's documentation. The leader election works. I am not using Kube-VIP for load balancing though. Instead, I am using Traefik, which is using the same IP address that was assigned to the control plane during both k3s's and Kube-VIP's setup. However, I am unable to get any additional VIP addresses to properly route to Traefik.
Even if I did get the additional VIP addresses working, I think I still have one last issue to overcome. I can control the local network's DNS so that service#1 is assigned VIP#1 and service#2 assigned VIP#2. However, how would this be handled for traffic received externally? If the external/public DNS has service#1 and service#2 assigned to the network's public IP address, both service's traffic would be received by the router/firewall on port 22. The router/firewall could forward traffic on port 22 to (presumably) a single IP address, which would only allow service#1 or service#2 (but not both) to receive traffic publicly, correct?

1y ago

Multiple Kubernetes Services Using Same Port Without SNI

wireless_purposely832 @lemmy.world 1y ago

I think I can avoid using metallb since I'm already using Kube-VIP.

I do not think that I am using Virtual IPs correctly as I tried setting it up, but it did not work. I assume the Virtual IP would just become the Load Balancer IP and I would need to configure Traefik and Kube-VIP (as well as my network) to use the Virtual IPs?

1y ago

Multiple Kubernetes Services Using Same Port Without SNI

Jump

wireless_purposely832 @lemmy.world 1y ago

I guess I need to dig in a little deeper. I am currently only using Kube-VIP to provide a single IP address for the control plane. I think I may have it configured wrong though since that same IP address is the single load balancer IP used by Traefik.

I have struggled finding good documentation, hints, tutorials, etc. setting up Kube-VIP with Virtual IPs. Is there anything that you are aware of that might provide some assistant in setting that up correctly?

1y ago

Multiple Kubernetes Services Using Same Port Without SNI

Jump

wireless_purposely832 @lemmy.world 1y ago

Thanks - I appreciate the response. However, for the services I'm asking about (eg: SSH, SFTP, etc.) do not support SSL/TLS and forcing SSL/TLS with a wrapper would likely cause incompatibility with clients.

I agree though - for other the services connecting via HTTP/HTTPS, there would likely either be some incompatibility or at least warning messages about not using SSL/TLS.