How to configure VPN connection between 2 Kubernetes clusters

4/4/2019

How to configure VPN connection between 2 Kubernetes clusters.

The case is: - 2 kubernetes clusters running on different sites - OpenVPN connectivity between 2 clusters - In both kubernetes clusters are installed openvpn running in separate container.

How to configure kubernetes clusters (vpn, routing, firewall configurations) so, the Nodes and Containers of any of the kubernetes clusters to have connectivity through VPN to nodes and services to the other cluster?

Thank you for the answers !!!

-- Bozhidar Ignatov
kubernetes
networking

1 Answer

4/4/2019

What you need in Kubernetes is called federation.

Deprecated

Use of Federation v1 is strongly discouraged. Federation V1 never achieved GA status and is no longer under active development. Documentation is for historical purposes only.

For more information, see the intended replacement, Kubernetes Federation v2.

As for using a VPN in Kubernetes, I recommend Exposing Kubernetes cluster over VPN. It describes how to connect VPN node to kuberentes cluster or Kubernetes services.

You might be also interested in reading Kubernetes documentation regarding Running in Multiple Zones. Also Kubernetes multi-cluster networking made simple, which explains different use cases of VPNs across number of clusters and is strongly encouraging to use IPv6 instead of IPv4.

Why use IPv6? Because “we could assign a — public — IPv6 address to EVERY ATOM ON THE SURFACE OF THE EARTH, and still have enough addresses left to do another 100+ earths[SOURCE]

Lastly Introducing kEdge: a fresh approach to cross-cluster communication, which seems to make live easier and helps with configuration and maintenance of VPN services between clusters.

-- Crou
Source: StackOverflow