submariner.io

What It Is

Submariner is an open-source project for Kubernetes multi-cluster networking. Its official website states that it enables Pods and Services in different Kubernetes clusters to communicate directly, covering scenarios such as on-premises data centers, cloud-hosted clusters, different cloud providers, and different regions. It is a CNCF Sandbox project. Its role is not as a general-purpose development framework, but as a network connectivity tool at the cloud-native infrastructure layer.

Core Capabilities

Functionally, Submariner provides cross-cluster L3 connectivity, with support for either encrypted or unencrypted connections. It also supports cross-cluster Service Discovery and provides the subctl command-line tool to simplify deployment and management. It emphasizes being CNI agnostic, meaning it does not strongly depend on a specific network plugin, and it supports scenarios where cluster CIDRs overlap. The service discovery component is provided by Lighthouse, based on the Kubernetes Multi-Cluster Service APIs, using ServiceExport, ServiceImport, EndpointSlice, and CoreDNS forwarding to implement clusterset.local domain name resolution.

Deployment, Ecosystem, and Documentation

The documentation is fairly comprehensive, covering components such as the architecture, Broker, Gateway, Engine, Globalnet, Network Plugin Syncer, and OVN Kubernetes Route Agent. It also provides deployment guides for kind sandboxes, GKE, Rancher, OpenShift, AWS, Azure, GCP, vSphere, OpenStack, and hybrid cloud environments. The operations section covers Helm, upgrades, monitoring, NAT Traversal, Network Policy, troubleshooting, known issues, and uninstallation. Community entry points include GitHub, Slack, and mailing lists. The documentation also includes guides for contributing, CI/CD, security reporting, and documentation style, giving the project a relatively mature overall feel.

Pricing and Open Source

The main content clearly states that Submariner is completely open source, so basic usage can be considered free and open source. The page does not provide information about a commercial edition, managed service, enterprise SLA, paid support, or payment methods. If an enterprise needs production-grade assurance, it should evaluate community support, its own internal operations capabilities, or look for services from Kubernetes networking vendors.

Pros, Cons, and Who It’s For

Its strengths are that it addresses a very clear problem: Pod/Service connectivity and service discovery across multiple clusters, clouds, regions, and hybrid cloud environments. It also has CNCF backing, a Kubernetes-native resource model, and fairly complete documentation. The downside is that the technical barrier is not low. Multi-cluster networking involves Broker, Gateway, Globalnet, Lighthouse, CoreDNS, CNI, and differences between cloud provider networks, so deployment and troubleshooting require strong platform engineering capabilities. It is better suited to teams that already have a Kubernetes platform team, SREs, or cloud-native network engineers, and is not ideal for small and mid-sized teams that only need simple application deployment.

Access from China

The collected content does not provide information about access from mainland China, mirrors, download acceleration, or payment options, so its accessibility from China is rated as unknown. If using it in a domestic production environment, you should carefully verify access to GitHub, image registries, the documentation site, and related container images. Comparable alternatives include Cilium Cluster Mesh, Istio multi-cluster, Linkerd multi-cluster, Skupper, and others.