This article is more than one year old. Older articles may contain outdated content. Check that the information in the page has not become incorrect since its publication.
We're happy to announce that dl.k8s.io, home of the official Kubernetes binaries, will soon be powered by Fastly.
Fastly is known for its high-performance content delivery network (CDN) designed to deliver content quickly and reliably around the world. With its powerful network, Fastly will help us deliver official Kubernetes binaries to users faster and more reliably than ever before.
The decision to use Fastly was made after an extensive evaluation process in which we carefully evaluated several potential content delivery network providers. Ultimately, we chose Fastly because of their commitment to the open internet and proven track record of delivering fast and secure digital experiences to some of the most known open source projects (through their Fast Forward program).
If you think you may be impacted or want to know more about this change, please keep reading.
The official Kubernetes binaries site, dl.k8s.io, is used by thousands of users all over the world, and currently serves more than 5 petabytes of binaries each month. This change will allow us to improve access to those resources by leveraging a world-wide CDN.
Only dl.k8s.io will be affected by this change.
No, the domain name (dl.k8s.io) will remain the same: no change will be
necessary, and access to the Kubernetes release binaries site should not be
affected.
If IP-based filtering is in place, it’s possible that access to the site will be affected when the new IP addresses become active.
No, the switch to the CDN should be transparent.
No, it is a cutover. You can, however, test your networks right now to check
if they can route to the new public IP addresses from Fastly. You should add
the new IPs to your network's allowlist before July 24th. Once the transfer is
complete, ensure your networks use the new IP addresses to connect to
the dl.k8s.io service.
If you need to manage an allow list for downloads, you can get the ranges to match from the Fastly API, in JSON: public IP address ranges. You don't need any credentials to download that list of ranges.
If you have IP-based filtering in place, we recommend the following course of action before July, 24th:
After the change is made, we recommend double-checking that HTTP calls are accessing dl.k8s.io with the new IP addresses.
If you encounter any weirdness during binaries download, please open an issue.