{"id":526,"date":"2016-08-11T17:56:12","date_gmt":"2016-08-11T09:56:12","guid":{"rendered":"http:\/\/julyclyde.org\/?p=526"},"modified":"2017-11-25T11:36:51","modified_gmt":"2017-11-25T03:36:51","slug":"kubernetes%e5%86%85%e7%9a%84%e7%bd%91%e7%bb%9c%e9%80%9a%e4%bf%a1%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"https:\/\/julyclyde.org\/?p=526","title":{"rendered":"Kubernetes\u5185\u7684\u7f51\u7edc\u901a\u4fe1\u95ee\u9898"},"content":{"rendered":"

\u9996\u5148\u590d\u4e60\u4e00\u4e0bKubernetes\u5185\u7684\u5bf9\u8c61\u7c7b\u578b<\/h1>\n
    \n
  1. Node\uff1a\u8fd0\u884ckubelet\uff08\u53e4\u4ee3\u53ebminion\uff09\u7684\u8ba1\u7b97\u673a<\/li>\n
  2. Pod\uff1a\u6700\u5c0f\u8c03\u5ea6\u5355\u4f4d\uff0c\u5305\u542b\u4e00\u4e2apause\u5bb9\u5668\u3001\u81f3\u5c11\u4e00\u4e2a\u8fd0\u884c\u5e94\u7528\u7684\u5bb9\u5668<\/li>\n
  3. RC\uff1a\u590d\u672c\u63a7\u5236\u5668\uff0c\u7528\u4e8e\u4fdd\u6301\u540c\u7c7bPod\u7684\u5e76\u884c\u8fd0\u884c\u7684\u6570\u91cf<\/li>\n
  4. Svc\uff1a\u66b4\u9732\u670d\u52a1\u7684\u53ef\u8bbf\u95ee\u901a\u4fe1\u63a5\u53e3<\/li>\n<\/ol>\n

     <\/p>\n

    \u5bf9\u8c61\u4e4b\u95f4\u7684\u901a\u4fe1\u5173\u7cfb<\/h1>\n
    \n\n\n\n\n\n\n\n\n\n\n
    \n
    \u5ba2\u6237\u7aef<\/div>\n<\/th>\n
    		\n
    \u670d\u52a1\u5668<\/div>\n<\/th>\n
    		\n
    \u8bbf\u95ee\u65b9\u5f0f<\/div>\n<\/th>\n<\/tr>\n<\/thead>\n
    master<\/td>\nkubelet<\/td>\nNode\u768410250\/TCP\u7aef\u53e3\u3002Node\u62a5\u5230\u540e\uff0cMaster\u5f97\u77e5Node\u7684IP\u5730\u5740<\/td>\n<\/tr>\n
    kubelet<\/p>\n

    &<\/p>\n

    kube_proxy<\/td>\n

    		apiserver<\/td>\nmaster:8080\/TCP HTTP<\/p>\n

    \u914d\u7f6e\u6587\u4ef6\u5199\u660emaster\u5730\u5740<\/td>\n<\/tr>\n

    kubectl\u547d\u4ee4\u884c<\/td>\napiserver<\/td>\nlocalhost:8080\/TCP\u6216\u547d\u4ee4\u884c\u53c2\u6570\u6307\u5b9a<\/td>\n<\/tr>\n
    other ALL<\/td>\napiserver<\/td>\nClusterIP_of_kubernetes:443\/TCP HTTPS<\/p>\n

    \u4e0a\u8ff0IP\u548c\u7aef\u53e3\u53f7\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u901a\u77e5\u5230\u5bb9\u5668<\/p>\n

    \u9700\u8981\u51fa\u793a\u8eab\u4efd\u4fe1\u606f<\/p>\n

    kubernetes\u662f\u4e00\u4e2aClusterIP\u6a21\u5f0f\u7684Service\u3002\u53c2\u89c1\u4e0b\u9762\u8be6\u8ff0<\/td>\n<\/tr>\n

    pod<\/td>\npod<\/td>\n\u8de8Node\u7684\u591a\u4e2apod\u76f8\u4e92\u901a\u4fe1\uff0c\u9700\u8981\u901a\u8fc7overlay network\uff0c\u4e0b\u9762\u8be6\u8ff0<\/td>\n<\/tr>\n
    ALL<\/td>\nservice<\/td>\n\u4e09\u79cd\u6a21\u5f0f\uff0c\u4e0b\u9762\u8be6\u8ff0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

     <\/p>\n

    overlay network<\/h1>\n

    kubernetes\u4e0d\u63d0\u4f9bpod\u4e4b\u95f4\u901a\u4fe1\u7684\u529f\u80fd\uff0c\u9700\u8981\u88c5\u989d\u5916\u7684\u8f6f\u4ef6\u6765\u914d\u5408\u3002\u6211\u9009\u7684\u662f\u51fa\u81eaCoreOS\u7684flannel\u8f6f\u4ef6\uff1a<\/p>\n

    flannel\u662f\u4e13\u95e8\u4e3adocker\u8de8Host\u901a\u4fe1\u800c\u8bbe\u8ba1\u7684overlay network\u8f6f\u4ef6\uff0c\u4eceETCd\u83b7\u53d6\u914d\u7f6e\uff0c\u63d0\u4f9b\u5bf9docker\u7f51\u7edc\u53c2\u6570\u8fdb\u884c\u914d\u7f6e\u7684\u811a\u672c\uff0c\u4f7f\u7528UDP\u3001VXLAN\u7b49\u591a\u79cd\u534f\u8bae\u627f\u8f7d\u6d41\u91cf\u3002<\/p>\n

    \u7ecf\u5b9e\u9a8c\uff0cflannel\u5728\u529e\u516c\u4e91\uff08\u65b0\uff09\u4e0a\u4f1a\u5bfc\u81f4kernel panic<\/p>\n

    flannel\u914d\u7f6e<\/h2>\n

    \u5728\/etc\/sysconfig\/flanneld \u914d\u7f6e\u6587\u4ef6\u4e2d\u5199\u597detcd\u7684\u5730\u5740<\/p>\n

    \u7528etcdctl mk \/coreos.com\/network\/config \u547d\u4ee4\u5c06\u4e0b\u5217\u914d\u7f6e\u5199\u5165etcd\uff1a<\/p>\n

    \n
    \n
    \n
    \n\n\n\n
    \n
    \n
    {<\/code><\/div>\n
    \"Network\"<\/code>: <\/code>\"172.17.0.0\/16\"<\/code>,<\/code><\/div>\n
    \"SubnetLen\"<\/code>: 24,<\/code><\/div>\n
    \"Backend\"<\/code>: {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"Type\"<\/code>: <\/code>\"vxlan\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"VNI\"<\/code>: 7890<\/code><\/div>\n
    \u00a0<\/code>}<\/code><\/div>\n
    \u00a0<\/code>}<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    Network\u4ee3\u8868flannel\u7ba1\u7406\u7684\u603b\u7684\u7f51\u7edc\u8303\u56f4\uff1bSubnetLen\u662f\u5176\u4e2d\u6bcf\u4e2a\u8282\u70b9\u7684\u5b50\u7f51\u63a9\u7801\u957f\u5ea6\uff1bBackend\u89c4\u5b9a\u4e86\u5404\u8282\u70b9\u4e4b\u95f4\u4ea4\u6362\u6570\u636e\u7684\u5e95\u5c42\u627f\u8f7d\u534f\u8bae\u3002<\/p>\n

    \u518d\u5404Node\u6267\u884c systemctl start flanneld \u542f\u52a8\u670d\u52a1\u3002<\/p>\n

     <\/p>\n

    flannel\u5bf9docker\u4f5c\u7528\u7684\u539f\u7406<\/h2>\n

    flannel \u5e76\u975e\u201c\u795e\u5947\u5730\u201d\u5bf9docker\u4ea7\u751f\u4f5c\u7528\u3002<\/p>\n

    \u67e5\u770b\/usr\/lib\/systemd\/system\/flanneld.service\u914d\u7f6e\u6587\u4ef6\u53ef\u77e5\uff0c\u5728flanneld\u542f\u52a8\u6210\u529f\u4e4b\u540e\uff0csystemd\u8fd8\u4f1a\u53bb\u6267\u884c\u4e00\u6b21\/usr\/libexec\/flannel\/mk-docker-opts.sh\u811a\u672c\uff0c\u751f\u6210\/run\/flannel\/docker\u73af\u5883\u53d8\u91cf\u6587\u4ef6\u3002<\/p>\n

    flannel\u7684RPM\u4e2d\u5305\u542b\u7684\u00a0\/usr\/lib\/systemd\/system\/docker.service.d\/flannel.conf \u00a0\uff0c\u4f5c\u4e3adocker\u670d\u52a1\u7684\u914d\u7f6e\u7247\u6bb5\uff0c\u5f15\u7528\u4e86\u4e0a\u8ff0\u73af\u5883\u53d8\u91cf\u6587\u4ef6 \/run\/flannel\/docker \uff0c\u6545 flannel \u5fc5\u987b\u5728 docker \u4e4b\u524d\u542f\u52a8\uff0c\u5982\u679c\u5728docker\u5df2\u7ecf\u8fd0\u884c\u7684\u60c5\u51b5\u4e0b\u542f\u52a8flannel\uff0c\u5219docker\u4e5f\u5fc5\u987b\u91cd\u542f\u624d\u80fd\u751f\u6548\u3002\u3002\u901a\u8fc7 systemctl status docker \u53ef\u4ee5\u770b\u5230<\/p>\n

    \n
    \n
    \n
    \n\n\n\n
    \n
    \n
    # systemctl status docker<\/code><\/div>\n
    docker.service - Docker Application Container Engine<\/code><\/div>\n
    \u00a0\u00a0\u00a0<\/code>Loaded: loaded (<\/code>\/usr\/lib\/systemd\/system\/docker<\/code>.service; enabled)<\/code><\/div>\n
    \u00a0\u00a0<\/code>Drop-In: <\/code>\/usr\/lib\/systemd\/system\/docker<\/code>.service.d<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\u2514\u2500flannel.conf<\/code><\/div>\n
    \u00a0\u00a0\u00a0<\/code>Active: active (running) since \u4e00 2015-12-14 15:53:06 CST; 19h ago<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0<\/code>Docs: http:<\/code>\/\/docs<\/code>.docker.com<\/code><\/div>\n
    \u00a0<\/code>Main PID: 149365 (docker)<\/code><\/div>\n
    \u00a0\u00a0\u00a0<\/code>CGroup: <\/code>\/system<\/code>.slice<\/code>\/docker<\/code>.service<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\u2514\u2500149365 <\/code>\/usr\/bin\/docker<\/code> daemon --selinux-enabled -s btrfs --bip=172.17.33.1<\/code>\/24<\/code> --mtu=1450 --insecure-registry docker.sankuai.com<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    flannel\u4f5c\u7528\u4e8edocker\uff0c\u6700\u7ec8\u8868\u73b0\u4e3a\u8bbe\u7f6e\u4e86\u5176\u2013bip \u53c2\u6570\uff0c\u4e5f\u5c31\u662f docker0 \u8bbe\u5907\u7684IP\u5730\u5740\u3002\u5982\u91cd\u542f\u65f6\u5931\u8d25\uff0c\u53ef\u4ee5\u7528ip addr\u547d\u4ee4\u5220\u9664docker0\u4e0a\u7684IP\u7136\u540e\u518d\u91cd\u65b0\u542f\u52a8docker\u670d\u52a1\u3002<\/p>\n

    \u53e6\u5916\uff0cflannel\u4f1a\u5728\u5404\u8282\u70b9\u4e0a\u751f\u6210\u4e00\u4e2a\u540d\u4e3aflannel.7890\u7684\u865a\u62df\u63a5\u53e3\uff08\u5176\u4e2d7890\u5c31\u662f\u4e0a\u9762\u914d\u7f6e\u6587\u4ef6\u91cc\u7684VNI\u53f7\u7801\uff09\u5176\u63a9\u7801\u4e3a\/16\uff0c\u4f46IP\u548cdocker0\u7684IP\u5730\u5740\u76f8\u8fd1\u3002\u8fd9\u79cd\u914d\u7f6e\u751f\u6210\u7684\u8def\u7531\u8868\u5982\u4e0b\uff1a<\/p>\n

    \u5373\uff1a\u4e0e172.17.33.0\/24 \u901a\u4fe1\uff0c\u901a\u8fc7docker0\uff1b\u4e0e172.17.0.0\/16 \u901a\u4fe1\uff08\u4e0d\u542b172.17.33.0\/24\uff09\uff0c\u901a\u8fc7flannel.7890 \u53d1\u5f80overlay network<\/p>\n

    Docker\u548c\u5bb9\u5668\u7684\u7f51\u7edc<\/h1>\n

    \u7528ip link add vethX peer name vethY\u547d\u4ee4\u6dfb\u52a0\u4e00\u5bf9\u865a\u62df\u4ee5\u592a\u7f51\u63a5\u53e3\u3002<\/p>\n

    veth\u548c\u666e\u901aeth\u63a5\u53e3\u7684\u533a\u522b\u5728\u4e8e\uff1aveth\u4e00\u6b21\u5c31\u8981\u914d\u7f6e\u4e00\u5bf9\uff0c\u8fd9\u4e00\u5bf9veth\u63a5\u53e3\u6709\u80cc\u5bf9\u80cc\u7684\u9690\u542b\u8fde\u63a5\u5173\u7cfb<\/strong>\uff0c\u53ef\u4ee5\u901a\u8fc7tcpdump\u548cping\u6765\u9a8c\u8bc1\u3002<\/p>\n

    \u7136\u540e\u628a\u5176\u4e2d\u4e00\u4e2a\u7f51\u5361\u79fb\u5230\u5bb9\u5668\u7684namespace\u91cc\uff0c\u53e6\u4e00\u4e2a\u52a0\u5165docker0 bridge\uff0c\u5373\u5b8c\u6210\u5c06\u5bb9\u5668\u8fde\u63a5\u5230docker0 bridge\u7684\u5de5\u4f5c\u3002<\/p>\n

    \u67e5\u770bnamespace\u5185\u60c5\u51b5\u7684\u65b9\u6cd5\uff0c\u8bf7\u53c2\u89c1https:\/\/gist.github.com\/vishvananda\/5834761<\/a><\/p>\n

    Kubernetes Pod\u7684\u7f51\u7edc\u914d\u7f6e<\/h1>\n

    \u4e00\u4e2aPod\u6700\u5c11\u5305\u542b\u4e24\u4e2a\u5bb9\u5668\uff0c\u5176\u4e2d\u4e00\u4e2a\u53ebpause\uff0c\u5b83\u4ec0\u4e48\u90fd\u4e0d\u6562\uff0c\u53ea\u201c\u6301\u6709\u201dIP\u5730\u5740\u3002\u901a\u8fc7docker inspect\u53ef\u4ee5\u770b\u5230\uff1a<\/p>\n

    \n
    \n
    \n
    \n\n\n\n
    \n
    \n
    [<\/code><\/div>\n
    {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"Id\"<\/code>: <\/code>\"2b36d6cb2f2d822473aa69cacb99d8c21e0d593a3e89df6c273eec1d706e5be8\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"NetworkSettings\"<\/code>: {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"Bridge\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"EndpointID\"<\/code>: <\/code>\"2c1e17f3fd076816d651e62a4c9f072abcc1676402fb5eebe3a8f84548600db0\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"Gateway\"<\/code>: <\/code>\"172.17.33.1\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"GlobalIPv6Address\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"GlobalIPv6PrefixLen\"<\/code>: 0,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"HairpinMode\"<\/code>: <\/code>false<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IPAddress\"<\/code>: <\/code>\"172.17.33.2\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IPPrefixLen\"<\/code>: 24,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IPv6Gateway\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"LinkLocalIPv6Address\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"LinkLocalIPv6PrefixLen\"<\/code>: 0,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"MacAddress\"<\/code>: <\/code>\"02:42:ac:11:21:02\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"NetworkID\"<\/code>: <\/code>\"6a23154bd393b4c806259ffc15f5b719ca2cd891502a1f9854261ccb17011b07\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"PortMapping\"<\/code>: <\/code>null<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"Ports\"<\/code>: {},<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"SandboxKey\"<\/code>: <\/code>\"\/var\/run\/docker\/netns\/2b36d6cb2f2d\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"SecondaryIPAddresses\"<\/code>: <\/code>null<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"SecondaryIPv6Addresses\"<\/code>: <\/code>null<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>},<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"HostConfig\"<\/code>: {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"NetworkMode\"<\/code>: <\/code>\"default\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IpcMode\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>}<\/code><\/div>\n
    ]<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \u800c\u771f\u6b63\u8fd0\u884c\u5e94\u7528\u7684\u90a3\u4e2a\u5bb9\u5668\uff0c\u7f51\u7edc\u914d\u7f6e\u5219\u662f\u8fd9\u6837\uff1a<\/p>\n

    \n
    \n
    \n
    \n\n\n\n
    \n
    \n
    [<\/code><\/div>\n
    {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"Id\"<\/code>: <\/code>\"eba0d3c4816fd67b10bcf078fb93f68743f57fa7a8d32c731a6dc000db5fafe8\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"NetworkSettings\"<\/code>: {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"Bridge\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"EndpointID\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"Gateway\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"GlobalIPv6Address\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"GlobalIPv6PrefixLen\"<\/code>: 0,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"HairpinMode\"<\/code>: <\/code>false<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IPAddress\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IPPrefixLen\"<\/code>: 0,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IPv6Gateway\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"LinkLocalIPv6Address\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"LinkLocalIPv6PrefixLen\"<\/code>: 0,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"MacAddress\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"NetworkID\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"PortMapping\"<\/code>: <\/code>null<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"Ports\"<\/code>: <\/code>null<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"SandboxKey\"<\/code>: <\/code>\"\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"SecondaryIPAddresses\"<\/code>: <\/code>null<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"SecondaryIPv6Addresses\"<\/code>: <\/code>null<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>},<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>\"HostConfig\"<\/code>: {<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"NetworkMode\"<\/code>: <\/code>\"container:2b36d6cb2f2d822473aa69cacb99d8c21e0d593a3e89df6c273eec1d706e5be8\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>\"IpcMode\"<\/code>: <\/code>\"container:2b36d6cb2f2d822473aa69cacb99d8c21e0d593a3e89df6c273eec1d706e5be8\"<\/code>,<\/code><\/div>\n
    \u00a0\u00a0\u00a0\u00a0<\/code>}<\/code><\/div>\n
    ]<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \u6ce8\u610f\u5bf9\u6bd4NetworkMode\u548cIpcMode\u7684\u503c\uff0c\u540e\u8005\u7684NetworkMode\u548cIpcMode\u7684\u503c\u4e3a\u524d\u8005\u7684Id\u3002<\/p>\n

    Kubernetes\u8fd9\u79cd\u8bbe\u8ba1\uff0c\u662f\u4e3a\u4e86\u5b9e\u73b0\u5355\u4e2aPod\u91cc\u7684\u591a\u4e2a\u5bb9\u5668\u5171\u4eab\u540c\u4e00\u4e2aIP\u7684\u76ee\u7684\u3002\u9664\u4e86IP\u4ee5\u5916\uff0cVolume\u4e5f\u662f\u5728Pod\u7c92\u5ea6\u7531\u591a\u4e2a\u5bb9\u5668\u5171\u7528\u7684\u3002<\/p>\n

    Kube-Proxy\u670d\u52a1<\/h1>\n

    kubernetes\u5404\u8282\u70b9\u7684kube-proxy\u670d\u52a1\u542f\u52a8\u540e\uff0c\u4f1a\u4eceapiserver\u62c9\u56de\u6570\u636e\uff0c\u7136\u540e\u8bbe\u7f6e\u6240\u5728\u673a\u5668\u7684iptables\u89c4\u5219\u3002<\/p>\n

    \u5bf9\u4e8e\u5982\u4e0b\u7684svc\uff1a<\/p>\n

    # kubectl describe svc\/mysql
    \nName: mysql
    \nNamespace: default
    \nLabels: name=mysql
    \nSelector: name=newdeploy
    \nType: ClusterIP
    \nIP: 10.16.59.77
    \nPort: <unnamed> 3306\/TCP
    \nEndpoints: 172.17.29.35:3306
    \nSession Affinity: None
    \nNo events.<\/p>\n

    \u751f\u6210\u7684iptables\u89c4\u5219\u5982\u4e0b\uff1a<\/p>\n

    -A PREROUTING -m comment –comment “handle ClusterIPs; NOTE: this must be before the NodePort rules” -j KUBE-PORTALS-CONTAINER
    \n-A PREROUTING -m addrtype –dst-type LOCAL -m comment –comment “handle service NodePorts; NOTE: this must be the last rule in the chain” -j KUBE-NODEPORT-CONTAINER
    \n-A OUTPUT -m comment –comment “handle ClusterIPs; NOTE: this must be before the NodePort rules” -j KUBE-PORTALS-HOST
    \n-A OUTPUT -m addrtype –dst-type LOCAL -m comment –comment “handle service NodePorts; NOTE: this must be the last rule in the chain” -j KUBE-NODEPORT-HOST<\/p>\n

    -A KUBE-PORTALS-CONTAINER -d 10.16.59.77\/32 -p tcp -m comment –comment “default\/mysql:” -m tcp –dport 3306 -j REDIRECT –to-ports 53407
    \n-A KUBE-PORTALS-HOST -d 10.16.59.77\/32 -p tcp -m comment –comment “default\/mysql:” -m tcp –dport 3306 -j DNAT –to-destination 10.16.59.13:53407<\/p>\n

    \uff08\u4e4b\u6240\u4ee5\u5728PREROUTING\u548cOUTPUT\u8bbe\u7f6e\u76f8\u540c\u7684\u89c4\u5219\uff0c\u662f\u4e3a\u4e86\u5339\u914d\u4ece\u5916\u90e8\u6765\u7684\u8bbf\u95ee\u548c\u53d1\u81ea\u672c\u673a\u7684\u8bbf\u95ee\u4e24\u79cd\u60c5\u51b5\uff09<\/p>\n

    \u4e0a\u8ff0\u89c4\u5219\u628a\u8bbf\u95ee 10.16.59.77:3306\/TCP\u7684\u8bf7\u6c42\uff0c\u8f6c\u5230\u4e86\u672c\u673a\u768453407\u7aef\u53e3\u3002\u7528lsof\u68c0\u67e5\u53ef\u4ee5\u53d1\u73b0\u8be5\u7aef\u53e3\u4e3akube-proxy\u8fdb\u7a0b\u3002kube-proxy\u5728\u5404\u673a\u5668\u4e0a\u4f1a\u9009\u62e9\u4e0d\u540c\u7684\u7aef\u53e3\u4ee5\u907f\u514d\u51b2\u7a81\u3002kube-proxy\u6536\u5230\u8bf7\u6c42\u540e\uff0c\u4f1a\u8f6c\u53d1\u7ed9Service\u91cc\u5b9a\u4e49\u7684Endpoints<\/p>\n

    1.1\u7248\u672c\u5f00\u59cb\uff0c\u65b0\u589e–proxy-mode=iptables\u6a21\u5f0f\uff0c\u76f4\u63a5\u6309\u76f8\u540c\u6bd4\u4f8b\u628a\u8bf7\u6c42DNAT\u5230\u6307\u5b9a\u7684endpoint\u53bb\u3002<\/p>\n

    Kubernetes Service\u7684\u4e09\u79cd\u6a21\u5f0f<\/h1>\n
      \n
    1. ClusterIP\u6a21\u5f0f<\/li>\n
    2. NodePort\u6a21\u5f0f<\/li>\n
    3. LoadBalancer\u6a21\u5f0f<\/li>\n<\/ol>\n

      ClusterIP\u6a21\u5f0f<\/h2>\n

      \u751f\u6210\u4e00\u4e2a \u53ea\u5728\u672ccluster\u5185\u6709\u6548\u7684IP:port \u7ec4\u5408\uff0c\u4e5f\u5c31\u662f\u4ec5\u5bf9\u5185\u66b4\u9732\u8be5\u670d\u52a1\u3002\u751f\u6210\u7684IP\u8303\u56f4\u7531apiserver\u7684–service-cluster-ip-range\u53c2\u6570\u89c4\u5b9a\u3002<\/p>\n

      \u5c06\u751f\u6210\u7684IP\u7ed1\u5728\u4e00\u53f0\u8fd0\u884c\u7740kube-proxy\u7684\u673a\u5668\u4e0a\u65f6\uff0c\u4e5f\u53ef\u4ee5\u5bf9\u5916\u63d0\u4f9b\u670d\u52a1\u3002<\/s>1.1\u7248\u672c\u7684kube-proxy –proxy-mode=iptables\u65f6\u4e0d\u80fd\u652f\u6301\u5c06clusterIP\u7ed1\u5728Node\u4e0a\u5bf9\u5916\u670d\u52a1\u7684\u505a\u6cd5\u3002<\/p>\n

      NodePort\u6a21\u5f0f<\/h2>\n

      \u5728\u6240\u6709Node\u4e0a\uff0c\u7528\u76f8\u540c\u7684\u7aef\u53e3\u53f7\u66b4\u9732\u670d\u52a1\u3002\u5982Node\u7684IP\u5bf9cluster\u4ee5\u5916\u53ef\u89c1\uff0c\u5219\u5916\u90e8\u4e5f\u53ef\u4ee5\u8bbf\u95ee\u8be5\u670d\u52a1\u3002<\/p>\n

      LoadBalancer\u6a21\u5f0f<\/h2>\n

      \u901a\u77e5\u5916\u90e8LoadBalancer\u751f\u6210 \u5916\u90e8IP:port\u7ec4\u5408 \uff0c\u5e76\u5c06\u8bf7\u6c42\u8f6c\u53d1\u8fdb\u6765\uff0c\u53d1\u7ed9NodeIP:NodePort\u4eec\u3002\u8be5\u884c\u4e3a\u542c\u8d77\u6765\u4f1a\u628a\u6570\u636e\u8f6c\u53d1\u5f88\u591a\u6b21\u3002<\/p>\n

      \u8be5\u529f\u80fd\u9700\u8981\u5916\u90e8\u73af\u5883\u652f\u6301\u3002\u76ee\u524dGCE\/GKE\u3001AWS\u3001OpenStack\u6709\u63d2\u4ef6\u652f\u6301\u8be5\u6a21\u5f0f\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

      \u9996\u5148\u590d\u4e60\u4e00\u4e0bKubernetes\u5185\u7684\u5bf9\u8c61\u7c7b\u578b Node\uff1a\u8fd0\u884ckubelet\uff08\u53e4\u4ee3\u53ebminion\uff09\u7684\u8ba1\u7b97\u673a Pod\uff1a\u6700\u5c0f\u8c03\u5ea6\u5355\u4f4d\uff0c\u5305\u542b\u4e00\u4e2apause\u5bb9\u5668\u3001\u81f3\u5c11\u4e00\u4e2a\u8fd0\u884c\u5e94\u7528\u7684\u5bb9\u5668 RC\uff1a\u590d\u672c\u63a7\u5236\u5668\uff0c\u7528\u4e8e\u4fdd\u6301\u540c\u7c7bPod\u7684\u5e76\u884c\u8fd0\u884c\u7684\u6570\u91cf Svc\uff1a\u66b4\u9732\u670d\u52a1\u7684\u53ef\u8bbf\u95ee\u901a\u4fe1\u63a5\u53e3   \u5bf9\u8c61\u4e4b\u95f4\u7684\u901a\u4fe1\u5173\u7cfb \u5ba2\u6237\u7aef \u670d\u52a1\u5668 \u8bbf\u95ee\u65b9\u5f0f master kubelet Node\u768410250\/TCP\u7aef\u53e3\u3002Node\u62a5\u5230\u540e\uff0cMaster\u5f97\u77e5Node\u7684IP\u5730\u5740 kubelet & kube_proxy apiserver master:8080\/TCP HTTP \u914d\u7f6e\u6587\u4ef6\u5199\u660emaster\u5730\u5740 kubectl\u547d\u4ee4\u884c apiserver localhost:8080\/TCP\u6216\u547d\u4ee4\u884c\u53c2\u6570\u6307\u5b9a other ALL apiserver ClusterIP_of_kubernetes:443\/TCP HTTPS \u4e0a\u8ff0IP\u548c\u7aef\u53e3\u53f7\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u901a\u77e5\u5230\u5bb9\u5668 \u9700\u8981\u51fa\u793a\u8eab\u4efd\u4fe1\u606f kubernetes\u662f\u4e00\u4e2aClusterIP\u6a21\u5f0f\u7684Service\u3002\u53c2\u89c1\u4e0b\u9762\u8be6\u8ff0 pod pod \u8de8Node\u7684\u591a\u4e2apod\u76f8\u4e92\u901a\u4fe1\uff0c\u9700\u8981\u901a\u8fc7overlay network\uff0c\u4e0b\u9762\u8be6\u8ff0 ALL service \u4e09\u79cd\u6a21\u5f0f\uff0c\u4e0b\u9762\u8be6\u8ff0   overlay … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[65],"class_list":["post-526","post","type-post","status-publish","format-standard","hentry","category-default","tag-kubernetes"],"_links":{"self":[{"href":"https:\/\/julyclyde.org\/index.php?rest_route=\/wp\/v2\/posts\/526","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/julyclyde.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/julyclyde.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/julyclyde.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/julyclyde.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=526"}],"version-history":[{"count":0,"href":"https:\/\/julyclyde.org\/index.php?rest_route=\/wp\/v2\/posts\/526\/revisions"}],"wp:attachment":[{"href":"https:\/\/julyclyde.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=526"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/julyclyde.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=526"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/julyclyde.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}