Kubernetes DoS Protection at Google Scale - Andrew Sy Kim, Google
Channel: CNCF [Cloud Native Computing Foundation]
Date: 22/11/2023

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon Europe in Paris from March 19-22, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

Kubernetes DoS Protection at Google Scale - Andrew Sy Kim, Google

There’s a thousand ways to DoS (denial-of-service) your Kubernetes cluster. The workloads running in your clusters, the traffic patterns they generate and the underlying infrastructure are all factors that can contribute to overloading the control plane. While Kubernetes provides configurable limits to prevent these scenarios, it becomes impossible to apply a one-size-fits-all configuration when managing clusters at Google scale. In this talk, Andrew Sy Kim will do a deep dive on the capabilities currently available in Kubernetes for DoS protection and some approaches to tune them appropriately. Next, he’ll cover some denial-of-service scenarios and key learnings from his experience working on GKE. And lastly, he’ll discuss recent and on-going developments in the Kubernetes project to further advance DoS protection for the control plane.