Thanks for the pictures Tim, I like what you are showing in slide 5 and 6, specially if you combine it with slide 3.
The gRPC and XDs adapters are really just two other local built in adapters with this thinking.
I agree with you that we need to look at the dependencies and version management of the remote protocols/APIs
//per
[You don't often get email from
tho...@google.com. Learn why this is important at
https://aka.ms/LearnAboutSenderIdentification ]
On Fri, Oct 14, 2022 at 4:37 PM Varun Marupadi <
varu...@google.com> wrote:
>
> Thanks for the drawings, Tim! It definitely helps those of us that need the block diagrams to make sense of the parts.
>
> I missed the first part of the meeting, so apologies if I'm just rehashing what was said explicitly - it sounds like your concerns are twofold:
> 1) The gRPC API is elevated to the position of being the main (only?) contract between the front and back ends, and you are not convinced it needs to be.
> 2) For simpler backends, the downside of having to import/bundle the
> entire gRPC library is a significant burden
> 3) Introducing a golang interface to be the main contract between the components addresses both the above, and additionally allows additional remote wire formats (like xDS) in an architecturally cohesive way.
>
> Did I summarize correctly?
Yeah, pretty much. We didn't talk about dep-management on the call but it struck me as I was drawing these. Having the main API be gRPC brings a lot of deps. They are deps we already use, for the most port so it's not a HUGE deal - FOR US. I wonder, still if it could be avoided, and libkpng layer made as svelte as possible.
> -Varun
>
>
> On Fri, Oct 14, 2022 at 3:08 PM Tim Hockin <
tho...@google.com> wrote:
>>
>> OK, I slapped some drawings together, hopefully this makes sense?
>>
>>
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdoc
>>
s.google.com%2Fpresentation%2Fd%2F1Y-tZ4fFC9L2NvtBeiIXD1MiJ0ieg_zg4Q6
>> SlFmIax8w%2Fedit%3Fhl%3Den%26resourcekey%3D0-SFhIGTpnJT5fo6ZSzQC57g%2
>> 3slide%3Did.g16976fedf03_0_221&data=05%7C01%7Cper%
40kaloom.com%7C
>> dd849340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7
>> C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwM
>> DAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&
>> ;sdata=5KKyd3iCSyS%2B%2B0O6DtkvBJhWWNUt9jwCY3XTlyCfjtI%3D&reserve
>> d=0
>> >
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fv
>> >
mware.zoom.us%2Fj%2F94048611817%3Fpwd%3DeTNHNHVVRnFSMDJXRXBSRndxbkJ
>> > sdz09%26from%3Daddon&data=05%7C01%7Cper%
40kaloom.com%7Cdd849340
>> > af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0
>> > %7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiL
>> > CJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&s
>> > data=Q2GqzQCGv8Syjf8f1QlV1n%2B9HqUgljpiO0mEkQZHclM%3D&reserved=
>> > 0
>> >
>> > still going on reached some conclusions tim can summarize.
>> >
>> > On Fri, Oct 14, 2022 at 4:11 PM Varun Marupadi <
varu...@google.com> wrote:
>> >>
>> >> Did this meeting already happen?
>> >>
>> >> I would like to add my voice to Per's use case as well. I am also interested in potentially running an upstream control plane with a data plane that is loosely coupled.
>> >>
>> >>
>> >> On Fri, Oct 14, 2022, 9:58 AM Per Andersson <
p...@kaloom.com> wrote:
>> >>>
>> >>> This is why I want/need KPNG.
>> >>> Separation of the control plane and the dataplane/backend implementations.
>> >>>
>> >>>
>> >>>
>> >>> I want full control of the data plane implementation, we typically implement the data plane using P4 or with DPDK/IPDK (to implement the full stack in the Linux kernel is a not an option for us).
>> >>> What I do not want to do is to copy/fork the existing proxy and
>> >>> start from there. I want to use an upstream common control plane and then plugin the different backend components we develop towards it We plan to develop three different backends during 2023, Linux DPDK, Nvidia Bluefield 3 and Intel Mt Evans.
>> >>> KPNG is intentionally designed to make this easy.
>> >>>
>> >>>
>> >>>
>> >>> We should aim to have one control plane and not a set of similar control planes, KPNG makes this easy.
>> >>>
>> >>>
>> >>>
>> >>> //Per
>> >>>
>> >>>
>> >>>
>> >>> From:
kubernetes-...@googlegroups.com
>> >>> <
kubernetes-...@googlegroups.com> On Behalf Of jay vyas
>> >>> Sent: Friday, October 14, 2022 11:38
>> >>> To: kubernetes-sig-network
>> >>> <
kubernetes-...@googlegroups.com>
>> >>> Subject: Re: [k8s-sig-net] Re: KPNG... should we do it, or just keep it as a POC ? hangout tomorrow!!!!
>> >>>
>> >>>
>> >>>
>> >>> Cool , yeah, we cobbled together a Motivation section just now for this .... based partially on lar's original blog post
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkubernetes.io%2Fblog%2F2021%2F10%2F18%2Fuse-kpng-to-write-specialized-kube-proxiers%2F&data=05%7C01%7Cper%40kaloom.com%7Cdd849340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=1Srku1O8SwMaD3wyG5lrxrKxsrZ0FW3qDpDlH1LD1rE%3D&reserved=0 , and some asks from Per and others at the mtng today...
>> >>>
>> >>>
>> >>>
>> >>>
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2
>> >>> Fgithub.com%2Fkubernetes%2Fenhancements%2Fpull%2F2094%2Ffiles%23d
>> >>> iff-f710ebab82ca5cb8d75e7711841fe743804f425fb40b9ac522529ff71ee41
>> >>> 04eR182&data=05%7C01%7Cper%
40kaloom.com%7Cdd849340af8a46dfe24
>> >>> 308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013
>> >>> 892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoi
>> >>> V2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=
>> >>> 0%2BoFx396%2BG6rkfVLWuWxPnJJenxoXpq%2BC4K7Q9XpAmo%3D&reserved
>> >>> =0
>> >>>
>> >>> If folks want to suggest more along those lines feel free to - -
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>> On Friday, October 14, 2022 at 11:16:56 AM UTC-4
bo...@google.com wrote:
>> >>>
>> >>> Agreed with Shane on really focusing on the requirements before talking about "the what".
>> >>>
>> >>>
>> >>>
>> >>> For example:
>> >>>
>> >>>
>> >>>
>> >>> - Better componentization
>> >>>
>> >>> - Better extensibility
>> >>>
>> >>> - Enable consistency if someone wanted to have an external (e.g. their own) implementation.
>> >>>
>> >>> - ?Decoupling from K8s release?
>> >>>
>> >>> - ?Better scalability?
>> >>>
>> >>>
>> >>>
>> >>> Then the discussion becomes much clearer around what needs to be done.
>> >>>
>> >>>
>> >>> Thanks,
>> >>>
>> >>> Bowei
>> >>>
>> >>>
>> >>>
>> >>> On Fri, Oct 14, 2022 at 6:56 AM jay vyas <
jayunit1...@gmail.com> wrote:
>> >>>
>> >>> Ah yeah, we can actually add some of the original notes
>> >>> (component config, diffs, vendorability, developer experience,
>> >>> decoupling from apiserver "watch" etc... )
>> >>>
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2
>> >>>
Fdocs.google.com%2Fdocument%2Fd%2F1yW3AUp5rYDLYCAtZc6e4zeLbP5HPLX
>> >>> dvuEFeVESOTic%2Fedit%23&data=05%7C01%7Cper%
40kaloom.com%7Cdd8
>> >>> 49340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%
>> >>> 7C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4w
>> >>> LjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%
>> >>> 7C%7C&sdata=h%2B8N5zTJDDmikpMw2JEZ5OozEfVB9PSZTeo287EQZ1k%3D&
>> >>> amp;reserved=0 to the motivation section today in the kpng
>> >>> meeting (Starting in 30) .... good idea thx shane
>> >>>
>> >>>
>> >>>
>> >>> On Friday, October 14, 2022 at 9:41:49 AM UTC-4
sh...@konghq.com wrote:
>> >>>
>> >>> Thanks for bringing this up Jay. One thing that I think is missing for me to feel more confident in providing feedback is more clear motivation. Perhaps we can take some of the time at the upcoming meeting to fill in the currently missing motivation section of the KEP?
>> >>>
>> >>> On Thursday, October 13, 2022 at 5:08:50 PM UTC-4
jayunit1...@gmail.com wrote:
>> >>>
>> >>> hey folks ! So, we need to brainstorm a little bit about, what we should do , now that KPNG is "working" for the most part.... No wrong answers here, just... that we need to know how to prioritize work.
>> >>>
>> >>>
>> >>>
>> >>> As mentioned today - it now works on all backends (windows, nft,
>> >>> iptables, ipvs, and even ebpf)... and so, as a POC , we can say
>> >>> "yup, it works".... now... we have to decide
>> >>>
>> >>>
>> >>>
>> >>> - Should it be a project that lives, separate from core sig-network in-tree proxy roadmap?
>> >>>
>> >>> - Should it be something that gets integrated over time, into sig-network /s main repos?
>> >>>
>> >>> - Should it just be a really cool, living POC of what you *could* do for a kube proxy impl?
>> >>>
>> >>>
>> >>>
>> >>> We tried to pose this question but, instead got bogged down in the "How" of:
>> >>>
>> >>> - what sigs to talk to
>> >>>
>> >>> - how scale testing works
>> >>>
>> >>> - why 1000 nodes is hard
>> >>>
>> >>> etc... which is all totally valid , but... only in context of wether we actually want to replace the in tree kube proxy something like KPNG, which still seems to be up for grabs.....
>> >>>
>> >>>
>> >>>
>> >>> So, we need some opinions from the sig - should we do another
>> >>> round , or if not, find other ways to help out (for example, with
>> >>> more traditional issues, like the EndpointSlice stuff, or
>> >>> component config, etc...)
>> >>>
>> >>>
>> >>>
>> >>> If folks have thoughts - reach out to me or andrew stoyocos or rajas - - on #sig-network-kpng or maybe just add a thought in this thread.
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>> The original KEP is here:
>> >>> .
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%
>> >>> 2Fgithub.com%2Fkubernetes%2Fenhancements%2Fpull%2F2094&data=0
>> >>> 5%7C01%7Cper%
40kaloom.com%7Cdd849340af8a46dfe24308daae412312%7C47
>> >>> d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013892030996193%7CUnk
>> >>> nown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik
>> >>> 1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=dGaWDK8lBtmb0DtrVG
>> >>> Chnt7UHf3sY81I7RF6skadxrA%3D&reserved=0
>> >>>
>> >>>
>> >>>
>> >>> if folks want an invite, ping me / andrew stoyocos / kal / mark rosetti we'll just forward it along! its at 4EST / 1 PST tomorrow!
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>> --
>> >>>
>> >>> jay vyas
>> >>>
>> >>> --
>> >>> You received this message because you are subscribed to the Google Groups "kubernetes-sig-network" group.
>> >>> To unsubscribe from this group and stop receiving emails from it, send an email to
kubernetes-sig-ne...@googlegroups.com.
>> >>> To view this discussion on the web visit
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsgid%2Fkubernetes-sig-network%2F3e77177a-e19c-406f-8aef-3b152a0921dbn%2540googlegroups.com&data=05%7C01%7Cper%40kaloom.com%7Cdd849340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=C4na3Jy94Q2Ocpg2%2BQkam9mQw4b2G6ydR6XZK%2Bi4b3Y%3D&reserved=0.
>> >>>
>> >>> --
>> >>> You received this message because you are subscribed to the Google Groups "kubernetes-sig-network" group.
>> >>> To unsubscribe from this group and stop receiving emails from it, send an email to
kubernetes-sig-ne...@googlegroups.com.
>> >>> To view this discussion on the web visit
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsgid%2Fkubernetes-sig-network%2Fa16db069-3e22-47c1-ac2f-2ee75fe17e24n%2540googlegroups.com&data=05%7C01%7Cper%40kaloom.com%7Cdd849340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=hc98M5uMPT1%2BjX6MOveMhncyE01BQTJxGL3PI9OBqDw%3D&reserved=0.
>> >>>
>> >>> --
>> >>> You received this message because you are subscribed to the Google Groups "kubernetes-sig-network" group.
>> >>> To unsubscribe from this group and stop receiving emails from it, send an email to
kubernetes-sig-ne...@googlegroups.com.
>> >>> To view this discussion on the web visit
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsgid%2Fkubernetes-sig-network%2FYQBPR0101MB4097AF3C02937D0AA1A76CC5D9249%2540YQBPR0101MB4097.CANPRD01.PROD.OUTLOOK.COM&data=05%7C01%7Cper%40kaloom.com%7Cdd849340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=qVBgLItTZUzTptCUDnd0Py0YUahwFX4lrZEWfWemLtU%3D&reserved=0.
>> >
>> >
>> >
>> > --
>> > jay vyas
>> >
>> > --
>> > You received this message because you are subscribed to the Google Groups "kubernetes-sig-network" group.
>> > To unsubscribe from this group and stop receiving emails from it, send an email to
kubernetes-sig-ne...@googlegroups.com.
>> > To view this discussion on the web visit
https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgroups.google.com%2Fd%2Fmsgid%2Fkubernetes-sig-network%2FCACVCA%253Dd9HrACEkLb25h44BRU8NKbXCkGdG3oe4DVYJrksBa1JA%2540mail.gmail.com&data=05%7C01%7Cper%40kaloom.com%7Cdd849340af8a46dfe24308daae412312%7C47d58e26f79648e8ac401c365c204513%7C0%7C0%7C638013892030996193%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=XwT%2FWjWfLOQ1BITKpaqOOUQDdfWdDldaP3dW1IoLvJE%3D&reserved=0.