Submariner: gateways tunnel, the broker shares metadata

Scroll or pinch to zoom, drag to move, double-click to zoom in 100% SVG PNG Back to the post

Submariner architecture: two clusters each run a Lighthouse service discovery component, a Gateway Engine, Route Agents on every node and ordinary workloads; the gateways publish their endpoints and the Lighthouse components publish service exports to a Broker in one cluster; the two gateways build an encrypted tunnel; pod traffic goes from a pod through the Route Agent to the gateway, across the tunnel, and through the remote gateway and Route Agent to the remote pod.