How deeply does Google Anthos in Action cover gke dataplane v1?

Explains API watching, ClusterIP mapping, destination NAT, and port remapping, but does not detail individual iptables rules.

Gke dataplane v1

As explained in Google Anthos in Action

GKE Dataplane v1 is the GKE networking implementation based on kube-proxy, iptables, and Calico.

GKE Dataplane v1 implements Service routing with kube-proxy and Kubernetes NetworkPolicies with Calico. Both rely on Linux iptables rules, making the node’s rule set central to traffic handling. section 10.2.1

The components have distinct jobs:

kube-proxy watches the Kubernetes API server and updates destination NAT rules that map a Service’s stable ClusterIP to healthy Pods. It also manages Service port remapping. section 10.2.1
Calico implements Kubernetes NetworkPolicies using iptables-based components. section 10.2.1

Service port remapping

A Service with port 80 and targetPort 8080 accepts client traffic on port 80 and forwards it to an application listening on port 8080 in a Pod; kube-proxy maintains the corresponding node rules. section 10.2.1

Table 10.1

Network feature	Existing	New Dataplane
ClusterIP service resolution	kube-proxy using iptables	`cilium-agent` using eBPF on sockets
NodePort service resolution	kube-proxy using iptables	`cilium-agent` using eBPF on eth0 TC hooks
Load balancer service resolution	kube-proxy using iptables redirecting to service chain	`cilium-agent` using eBPF on eth0 TC hooks (same hook as previously)
Network policy enforcement	Calico using iptables	`cilium-agent` using eBPF on socket as well as eth0 TC hooks

Compare Dataplane v1’s kube-proxy and Calico iptables paths with Dataplane v2’s eBPF paths across Service resolution and policy enforcement. section 10.2.1

How Google Anthos in Action covers it

liveBook manning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Related concepts

kube-proxyuses · kube-proxy is a Kubernetes node component that maintains network rules forwarding service traffic to appropriate application pods.
Calicouses · Calico is an open-source networking and network-security platform for connecting and enforcing policies among containers, virtual machines, and hosts.
Dataplane v2alternative to · Dataplane V2 is a GKE networking dataplane architecture based on eBPF and Cilium for implementing pod networking and network policy.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.