This subsection describes the architecture of the Network subsystem of Deckhouse Platform (DP).

The Network subsystem includes the following modules:

  • kube-dns: Installs CoreDNS components for DNS management in the Kubernetes cluster.
  • node-local-dns: Deploys a caching DNS server on each cluster node and exports DNS metrics to Prometheus for analyzing DNS operation in the cluster on the Grafana dashboard.
  • kube-proxy: Manages the kube-proxy components responsible for networking and load balancing within the cluster.
  • cni-cilium: Provides cluster networking using the CNI Cilium plugin.
  • cni-flannel: Provides a network between multiple nodes in a cluster using the Flannel project.
  • cni-simple-bridge: Provides basic networking for pods, with limited functionality compared to the platform’s other CNI modules.
  • cilium-hubble: Provides visualization of the cluster network stack if the Cilium CNI is enabled.
  • ingress-nginx: Installs and manages the Ingress NGINX Controller using custom resources.
  • metallb: Implements the LoadBalancer mechanism for Services in bare-metal clusters.
  • istio: Implements a Service Mesh based on Istio for centralized management of network traffic in the cluster.
  • alb: Implements an Application Load Balancer (ALB) based on the Kubernetes Gateway API.
  • sdn: Provides software-defined networking (SDN) functions in the cluster — node network interface configuration, additional networks for pods and VMs, underlay networks, and system networks.
  • service-with-healthchecks: Provides an internal load balancer with independent health checks for each port, unlike the standard Kubernetes Service load balancer.
  • static-routing-manager: Manages static routes and ip rule entries on cluster nodes.

The subsection also describes: