Hacker News Reader

Ah I see aws has their own cni that does that via eni. I never realized that it allowed for native pod addressing (and it was never brought up during their pitches). Might be worse performance for big clusters because it’s still using calico (iptables)

View on HN

> Might be worse performance for big clusters because it’s still using calico (iptables)

I'm curious why you think that Calico's use of iptables will have performance impacts for large clusters, and what type of performance impacts you expect (bandwidth / latency / cpu / something else?).

From my experience, Calico performs rather well in large clusters (e.g. 2k nodes, appx 100 pods / node, several hundred network policies).

I think Calico is only used for network policy on the AWS VPC CNI plugin.

Reply on news.ycombinator.com