Cilium
Hard
Networking
Which Cilium resource defines the IP ranges that Cilium hands out to Services of type LoadBalancer?
Select your answer:
Show answer and explanation
Answer: CiliumLoadBalancerIPPool
Explanation
LB IPAM assigns external IPs to LoadBalancer Services from the CiliumLoadBalancerIPPool resources you create, and a pool can be limited to certain Services with a serviceSelector. Assigning an IP doesn't make it reachable. Cilium announces it with the BGP control plane or with L2 announcements over ARP and NDP.
More hard Cilium questions
- You install Cilium with kubeProxyReplacement=true on a cluster without kube-proxy. Why do you have to set k8sServiceHost and k8sServicePort?
- In Cilium's default cluster-pool IPAM mode, what assigns each node its pod CIDR?
- What is the purpose of Cilium's egress gateway feature?
- What is the purpose of Cilium's 'prefilter' feature?
- In Cilium's tunnel mode (VXLAN or Geneve), how does the receiving node learn the security identity of a packet sent by a pod on another node?
- A CiliumNetworkPolicy contains HTTP rules, such as allowing only GET requests to /api. Which component enforces those rules?