Submariner

Connects pod and service networks of separate Kubernetes clusters over IPsec tunnels.

Provider: default
Kind: VPN gateway
Category: Edge
Official docs: https://submariner.io/getting-started/

Properties · 5 set by this component

property	type	values	required	kind default	this component
activeActive	boolean	—	no	false	▸ false
bgp	boolean	—	no	false	▸ false
cableDriver · component property	enum	libreswan \| wireguard \| vxlan	no	libreswan	inherited
globalnet · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ false
peerType	enum	site-to-site \| point-to-site \| cloud-to-cloud	no	—	▸ cloud-to-cloud
throughputMbps	integer	—	no	—	inherited
tunnelType	enum	ipsec \| ssl \| wireguard	no	—	▸ ipsec

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "submariner", component: "submariner" }

Other VPN gateway products · 18

VPN Gatewayalibaba-vpn-gatewayalibabacloudvpn-gateway AWS Client VPNaws-client-vpnawsvpn-gateway AWS Site-to-Site VPNaws-site-to-site-vpnawsvpn-gateway Azure VPN Gatewayazure-vpn-gatewayazurevpn-gateway NetBirdnetbirdvpn-gateway OpenVPNopenvpnvpn-gateway strongSwanstrongswanvpn-gateway Tailscaletailscalevpn-gateway Generic VPN gatewayvpn-gatewayvpn-gateway WireGuardwireguardvpn-gateway ZeroTierzerotiervpn-gateway Cloud VPNgoogle-cloud-vpngcpvpn-gateway IBM Cloud VPN for VPCibm-vpn-gatewayibmvpn-gateway Client VPN for VPCibm-vpn-serveribmvpn-gateway Site-to-Site VPNoci-site-to-site-vpnocivpn-gateway Neutron VPNaaSopenstack-neutron-vpnaasopenstackvpn-gateway Client Gatewayoutscale-client-gatewayoutscalevpn-gateway Virtual Gatewayoutscale-virtual-gatewayoutscalevpn-gateway

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Submariner: connects the pod and service networks of separate Kubernetes clusters through a
3# gateway node in each cluster. Per the Submariner documentation the default cable driver builds
4# IPsec tunnels with Libreswan, and overlapping CIDRs need Globalnet, which is off by default.
5schemaVersion: "1"
6type: "component"
7id: "submariner"
8kind: "vpn-gateway"
9provider: "default"
10docs: "https://submariner.io/getting-started/"
11defaults:
12  managed: false
13  peerType: "cloud-to-cloud"
14  tunnelType: "ipsec"
15  bgp: false
16  activeActive: false
17properties:
18  cableDriver:
19    type: "enum"
20    values: ["libreswan", "wireguard", "vxlan"]
21    default: "libreswan"
22  globalnet:
23    type: "boolean"
24    default: false

The same page as markdown, for an agent: /catalogue/components/submariner.md