February 2026
Intermediate to advanced
372 pages
10h 2m
Spanish
Content preview from Cilium: en funcionamiento (Spanish Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 11. Salidadel clúster
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
Ahora que ya sabes cómo dirigir el tráfico dentro de tu clúster, centrémonos en cómo controlar los paquetes cuando salen.
La naturaleza « » de las aplicaciones en contenedores y las redes de Kubernetes puede provocar una falta de visibilidad para los ingenieros y operadores que necesitan comprender el origen de un paquete. De hecho, de forma predeterminada, cuando un paquete sale del clúster, Cilium sustituye la dirección IP de origen del pod de origen por la dirección IP del nodo en el que se ejecuta.
Esta característica, conocida como enmascaramiento de salida, es por donde comenzaremos el capítulo. Explicaremos por qué es necesario el enmascaramiento, los dos modos disponibles (eBPF e iptables) y cómo personalizarlo. Dedicaremos la mayor parte del capítulo a Egress Gateway, una función que proporciona una forma determinista de asignar direcciones IP de salida e interfaces al tráfico que sale del clúster. Por último, veremos el administrador de ancho de banda de Cilium, una función de control del tráfico de salida menos conocida que te permite limitar la velocidad del tráfico de los pods que consumen mucho ancho de banda.
Puedes encontrar todos los manifiestos YAML que utilizarás en este capítulo en el directorio chapter11 del repositorio GitHub del libro.
¡Empecemos!
Enmascaramiento
Uno de los principios de diseño de Kubernetes ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.