Choose two. After enabling GKE Dataplane V2 (eBPF-based datapath) for a cluster, which behaviors change compared to the traditional kube-proxy iptables datapath?
Choose an answer
Tap an option to check your answer.
Correct answer: kube-proxy is replaced or offloaded by an eBPF-based datapath that programs kernel-level service handling, Service load balancing and network policy enforcement move into kernel/eBPF for lower-latency datapath enforcement.
Why this is the answer
GKE Dataplane V2 leverages eBPF to significantly enhance network performance and observability. The correct options highlight key changes: 1. kube-proxy is replaced or offloaded by an eBPF-based datapath that programs kernel-level service handling: With Dataplane V2, the traditional kube-proxy component, which uses iptables for service load balancing, is largely superseded. eBPF programs directly in the kernel handle service routing, leading to more efficient packet processing. 2. Service load balancing and network policy enforcement move into kernel/eBPF for lower-latency datapath enforcement: By moving these critical functions into the kernel via eBPF, Dataplane V2 reduces latency and improves throughput compared to iptables-based solutions. This also allows for more granular and efficient network policy enforcement. The incorrect options are: "Pod-to-pod traffic is forced through an external proxy VM for visibility" is incorrect because Dataplane V2 aims to keep traffic within the kernel for efficiency, not force it through external VMs. "Dataplane V2 disables all sidecar-based service meshes by design" is incorrect; Dataplane V2 is designed to be compatible with and can even enhance sidecar-based service meshes by offloading some of their functions to eBPF.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed