Live data from Hacker News

Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

blog.jetstack.io

11–20 of 58 posts

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#11
post #7
post #2

Is the title peak buzzword-era, or is there more to come?

I remember when load balancing was a case of setting up apache or nginx on a server and letting it handle the upstream connections.

It still is. Proper "global load balancing" is essentially a CDN and nginx with say bind9 running on a bunch of edge nodes from different hosting providers without all those container-native buzzwords is the easiest way to do it.

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#12
post #2

Is the title peak buzzword-era, or is there more to come?

The page greets you with: > Kubernetes Accelerated Your Path to Enterprise Cloud Native I have no idea what they want from me.

They want money!

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#14
This is a decent article on how the load balancing between GCP loadbalancers and kubernetes works.

We use terraform end to end and tried the http/https L7 loadbalancer first in our setup but I had a heck of a time with:

- there is no API for the annotation mentioned in the article so if you miss it while setting up a backend, nothing works - gRPC was hard to get going. Most gRPC examples out there use some port such as 50051 so you assume that is needed. gRPC does work over 443.

We currently use istios ingressgateway as a loadbalancer that you set in your kubernetes setup. It works but I don't know if it is better or not. We had to run an ingressgateway pod as a daemonset on every node so that we could get the real IP addresses from requests for security logging. That was a pain.

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#16

> This means the Service must be created first, then when the corresponding NEG is created the name can be queried and added to the Terraform project. These kind of reverse dependencies, where app level changes have to be reflected in infrastructure are source of endless bugs and headaches. To do it right, you'd want to encode app and infra changes in the same ubiquitous tool, but "infrastructure as a code" tools suc…

We use terraform for our kubernetes app configuration and it works well. Being able to pass values from one resource to another is extremely powerful. For example, the database instance credentials down into cloudsql proxy.

The only and most frustrating missing piece of the terraform kubernetes provider is CRDs. I hacked around it by using some yaml provider bit I would like a cleaner solution.

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#18
post #10

CLOUD NATIVE DEVOPS RAFT-BASED BLOCKCHAIN-ENABLED MULTI CLOUD RESILIENT CONTAINERIZED MULTI-REGION MULTI-AZ static blog generator.

I downvoted this because even though I like it, it belongs at the bottom of the conversation below any real discussion of the actual article.

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#19
post #16

> This means the Service must be created first, then when the corresponding NEG is created the name can be queried and added to the Terraform project. These kind of reverse dependencies, where app level changes have to be reflected in infrastructure are source of endless bugs and headaches. To do it right, you'd want to encode app and infra changes in the same ubiquitous tool, but "infrastructure as a code" tools suc…

We use terraform for our kubernetes app configuration and it works well. Being able to pass values from one resource to another is extremely powerful. For example, the database instance credentials down into cloudsql proxy. The only and most frustrating missing piece of the terraform kubernetes provider is CRDs. I hacked around it by using some yaml provider bit I would like a cleaner solution.

TF kubernetes provider works for simplest cases only. How would you wait for PV to be created, when your TF resources specify PVC? That is to help users to diagnose problems with deployments.

Re: Container-Native Multi-Cluster Global Load Balancing with Cloud Armor on GCP

#20
post #10

CLOUD NATIVE DEVOPS RAFT-BASED BLOCKCHAIN-ENABLED MULTI CLOUD RESILIENT CONTAINERIZED MULTI-REGION MULTI-AZ static blog generator.

I downvoted this because even though I like it, it belongs at the bottom of the conversation below any real discussion of the actual article.

Sarcasm is in the realm of discussion though, see 'Will Any Crap We Put into Graphene Increase Its Electrocatalytic Effect?'

https://pubs.acs.org/doi/10.1021/acsnano.9b00184

Post reply on HN