Hey folks, I had a question about adding nodes to a K3S cluster which are on different networks. I have tried searching online but haven't really seen anything discussions around this. What I want to do is dynamically add a node similar to the way we can add gitlab workers on a host (if this makes sense?) Any ideas or directions to the right resources/docs would be really appreciated!
09/11/2022, 1:25 AM
Just join the agents to the cluster. If they are not on the same network then the vxlan flannel backend probably won't work, and you'd need to build the cluster with the wireguard or ipsec flannel backend.
09/11/2022, 10:52 AM
Thanks @creamy-pencil-82913, I will look this up and very likely come back with more questions 😅
Hey @creamy-pencil-82913, I have few newbie questions
1. Would setting up a cluster using Wireguard have any costs in terms of network (data transfer speeds) etc?
2. Would the data transfer between nodes which are on the same network (on prem) slow down as result of using Wireguard?
09/13/2022, 5:05 PM
Encrypting everything is almost certainly going to be more expensive in terms of cpu time than just encapsulating it in a vxlan header.
But vxlan is not secure and won't work across NAT or most ISPs, so you really need to use either wireguard or ipsec if all of the nodes aren't hosted in the same place.