Kubernetes DoS Protection at Google Scale

Explore the intricacies of Kubernetes Denial-of-Service (DoS) protection at Google scale in this informative conference talk. Delve into the myriad ways a Kubernetes cluster can be subjected to DoS attacks, examining how workloads, traffic patterns, and underlying infrastructure contribute to control plane overload. Learn about the configurable limits Kubernetes offers to prevent such scenarios and understand the challenges of applying a universal configuration when managing clusters at Google's massive scale. Gain insights into the current DoS protection capabilities in Kubernetes and discover approaches for fine-tuning them effectively. Examine real-world denial-of-service scenarios and key learnings from GKE (Google Kubernetes Engine) experiences. Finally, explore recent and ongoing developments in the Kubernetes project aimed at enhancing control plane DoS protection.

Kubernetes DoS Protection at Google Scale - Andrew Sy Kim, Google