Hey!
Does DO have any plans on releasing VPC-Native Kubernetes clusters like GCP’s VPC-Native clusters [1] or AWS’s CNI [2] where pods and services’ internal IPs are reserved in the VPC network and you can connect to them from any resource in the VPC? (A Droplet could connect to a pod’s IP).
The issue I’m having is: I have to connect a process running in an external VM (not on DO) to several ClusterIP services running in my K8s cluster on DO. Making them public isn’t really an option because connections wouldn’t be encrypted and some of them don’t even authenticate.
If I could create VPC-Native clusters, I could spin up a Droplet in the same VPC and host a VPN there. To access the k8s services from anywhere I’d just need to connect to that VPN and it would expose me the VPC interface.
I’ve tried running a VPN container in the cluster but it’d require extensions to be installed to the k8s nodes… I could ssh into them and install it but on updates or scaling, they’d be reset to the default image which doesn’t have the extension.
[1] https://cloud.google.com/kubernetes-engine/docs/how-to/alias-ips [2] https://docs.aws.amazon.com/eks/latest/userguide/pod-networking.html
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi,
This actually sounds like a great idea, though we have released VPC’s and Kubernetes supporting VPC’s the pod IP addresses are not allocated within the VPC as a whole.
Would you be able to submit this to ideas.digitalocean.com? This sounds like a great feature to add to the product in the future.
Regards,
John Kwiatkoski Senior Developer Support Engineer - Kubernetes
Hey everyone! 👋
Just a quick update here to this thread: as of October 15, DigitalOcean has introduced VPC-native networking for all Managed Kubernetes clusters!
This means you can now route traffic directly between your DOKS pods, services, and other resources within your VPC network (such as Droplets and managed databases) without going through public IPs. It’s a great way to keep your traffic secure and minimize latency.
For more details, check out the DOKS Features page here: DigitalOcean VPC-Native Networking.
- Bobby
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.