---
title: "Everything you need to know about Kubernetes Services networking"
source: "https://www.tigera.io/blog/everything-you-need-to-know-about-kubernetes-services-networking/"
---

[Technical Blog](https://www.tigera.io/category/technical-blog/)

# Everything you need to know about Kubernetes Services networking

By [Alex Pollitt](https://www.tigera.io/blog/author/alexpollitt/) on Apr 22, 2020 • 2 min read



Services are one of the key Kubernetes primitives you need to understand to glue microservices together and expose your applications outside of the cluster. The Service resource provides an abstract way to expose an application running on a set of Pods as a network service. Sounds simple, but what’s the difference between a Cluster IP, Node Port, and Load Balancer service? And how do all these abstractions translate to real under the covers networking behavior?





I created this short 7-minute video that explains all this and more!






In the video you’ll learn:








- How pods consume services within the cluster (Cluster IPs).

- The different ways a service can be consumed outside of the cluster (Node Ports, Load Balancers, and Service IP advertisement).

- What is External Traffic Policy and how does it impact a service?

- How Services and Network Policy interact.

- How all this works under the covers in concrete networking terms.

- What differences Calico’s native service handling capabilities bring to the picture compared to kube-proxy.






Happy watching!






If you enjoyed this video then you may also like:








- [Everything you need to know about Kubernetes Ingress networking](https://www.tigera.io/blog/everything-you-need-to-know-about-kubernetes-ingress-networking/)

- [Everything you need to know about Kubernetes networking on AWS](https://www.tigera.io/blog/everything-you-need-to-know-about-kubernetes-pod-networking-on-aws/)

- [Everything you need to know about Kubernetes networking on Azure](https://www.tigera.io/blog/everything-you-need-to-know-about-kubernetes-networking-on-azure/)

- [Everything you need to know about Kubernetes networking on Google Cloud](https://www.tigera.io/blog/everything-you-need-to-know-about-kubernetes-networking-on-google-cloud/)

- Free online training at [projectcalico.org/events](http://projectcalico.org/events) or subscribe to [Calico Essentials](https://info.tigera.io/rs/805-GFH-732/images/Calico-Essentials-Datasheet.pdf) for personalized training & workshops



[Products](https://www.tigera.io/tags/products/)

## Related posts

[![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

#### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/)
on Sep 3, 2026

A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale...

[Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/)

[![The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/app/uploads/2026/08/The-Safest-Place-to-Run-an-AI-Agent-Is-On-a-Cluster-That-Doesnt-Trust-It.png)](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)

#### [The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)

By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/)
on Aug 27, 2026

Every organization running AI agents has already made a hosting decision. Most made it by accident. The sales team switched on the agent built into their CRM. Engineering is piloting a coding agent in a...

[Read more](https://www.tigera.io/blog/the-safest-place-to-run-an-ai-agent-is-on-a-cluster-that-doesnt-trust-it/)

[![AI Red Team Agents Automate Attacks on your AI Agents. Runtime Policies Automate their Defense.](https://www.tigera.io/app/uploads/2026/08/AI-Red-Team-Agents-Automate-Attacks-on-your-AI-Agents.-Runtime-Policies-Automate-their-Defense.png)](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)

#### [AI Red Team Agents Automate Attacks on your AI Agents. Runtime Policies Automate their Defense.](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)

By [Alister Baroi](https://www.tigera.io/blog/author/alister-baroi/)
on Aug 24, 2026

The AI red teaming market grew up fast this year. OpenAI bought Promptfoo, Cisco and Microsoft shipped automated attack suites, and a seed-stage startup publicly compromised 50 of 55 live customer service bots. These platforms...

[Read more](https://www.tigera.io/blog/ai-red-team-agents-automate-attacks-on-your-ai-agents-runtime-policies-automate-their-defense/)

<!-- plugin=object-cache-pro client=phpredis metric#hits=3179 metric#misses=33 metric#hit-ratio=99.0 metric#bytes=1532845 metric#prefetches=0 metric#store-reads=172 metric#store-writes=14 metric#store-hits=164 metric#store-misses=22 metric#sql-queries=31 metric#ms-total=563.30 metric#ms-cache=35.27 metric#ms-cache-avg=0.1907 metric#ms-cache-ratio=6.3 sample#redis-hits=5116219 sample#redis-misses=2040284 sample#redis-hit-ratio=71.5 sample#redis-ops-per-sec=69 sample#redis-evicted-keys=0 sample#redis-used-memory=98783120 sample#redis-used-memory-rss=93671424 sample#redis-memory-fragmentation-ratio=0.9 sample#redis-connected-clients=1 sample#redis-tracking-clients=0 sample#redis-rejected-connections=0 sample#redis-keys=53542 -->
