Debug Your Kubernetes Network
0 likes263 views
本文探讨了碍耻产别谤苍别迟别蝉网络调试的复杂性和必要性，重点介绍了网络流量的南北向和东西向流动，以及常用的网络组件和调试思路。通过系统架构图和封包捕获工具，作者提供了实际的调试方法和常见问题的解决方案。文章强调理解网络架构的重要性和在调试过程中应采取的有效步骤。
1 of 41
Download to read offline
Ad
Recommended
Learn O11y from Grafana ecosystem.
Learn O11y from Grafana ecosystem.HungWei Chiu
?
The document discusses observability in cloud-native environments, focusing on metrics, logging, and tracing as key areas supported by technologies like Grafana and its related projects. It highlights the role of Grafana in providing a unified UI for monitoring and managing observability data, as well as the architecture and deployment modes of various tools like Mimir, Loki, and Tempo for efficient data handling. Challenges in user management and system integration are also addressed, emphasizing the importance of user-friendly interfaces and seamless service interactions.ArgoCD 的雷 碰過的人就知道 @TSMC IT Community Meetup #4
ArgoCD 的雷 碰過的人就知道 @TSMC IT Community Meetup #4Johnny Sung
?
This document provides an introduction to GitOps and ArgoCD as tools for managing application deployment and infrastructure configurations on Kubernetes. It highlights ArgoCD's capabilities to automate deployment through Git repositories, supporting tools like Helm and Kustomize for configuration management. Additionally, it outlines the benefits of using GitOps, such as version control, automated deployments, and enhanced security through review processes.[Flutter] 來體驗 bloc 小方塊的神奇魔法 @Devfest 2022
[Flutter] 來體驗 bloc 小方塊的神奇魔法 @Devfest 2022Johnny Sung
?
The document provides an overview of the Bloc pattern, created by Google, which separates business logic from the presentation layer in mobile application development. It introduces various components of Bloc, such as Cubit and BlocBuilder, and illustrates their implementation through examples including state management and asynchronous operations. Additionally, it discusses testing strategies for Bloc and provides insights on dependency injection and the concept of test doubles.Optimizing Kubernetes Resource Requests/Limits for Cost-Efficiency and Latenc...
Optimizing Kubernetes Resource Requests/Limits for Cost-Efficiency and Latenc...Henning Jacobs
?
The document discusses optimizing Kubernetes resource requests and limits for cost-efficiency and latency, focusing on Zalando's practices and strategies. Key topics include the implications of CPU and memory requests/limits, how they affect pod scheduling, and the importance of avoiding memory overcommit. Additionally, it addresses cluster autoscaling methods and the use of tools like the vertical pod autoscaler and Kubernetes resource reports for better resource management.Diabetes Mellitus
Diabetes MellitusMD Abdul Haleem
?
This document provides an overview of diabetes mellitus (DM), including the three main types (Type 1, Type 2, and gestational diabetes), signs and symptoms, complications, pathophysiology, oral manifestations, dental management considerations, emergency management, diagnosis, and treatment. DM is caused by either the pancreas not producing enough insulin or cells not responding properly to insulin, resulting in high blood sugar levels. The document compares and contrasts the characteristics of Type 1 and Type 2 DM.Power Point Presentation on Artificial Intelligence
Power Point Presentation on Artificial Intelligence Anushka Ghosh
?
Artificial Intelligence (AI) refers to computer systems that model and simulate human intelligence, with applications including virtual assistants like Siri and Google Now. The document covers the early history of AI, current advancements, and future challenges, highlighting its benefits and drawbacks. It concludes that AI, defined as the design of intelligent agents, has potential in various fields but also raises concerns about dependency and job displacement.Republic Act No. 11313 Safe Spaces Act (Bawal Bastos Law).pptx
Republic Act No. 11313 Safe Spaces Act (Bawal Bastos Law).pptxmaricelabaya1
?
The document summarizes key aspects of the Safe Spaces Act, which aims to address gender-based sexual harassment. It defines harassment in public spaces, online, and work/educational settings. Acts considered harassment include catcalling, unwanted comments on appearance, stalking, and distributing intimate photos without consent. Those found guilty face penalties like imprisonment or fines. The law also requires employers and educational institutions to disseminate the law, prevent harassment, and address complaints through committees.Hypertension
HypertensionRatheeshkrishnakripa
?
This document defines hypertension and describes its types, etiology, risk factors, pathophysiology, clinical features, diagnostic evaluations, and management. Hypertension is defined as a systolic blood pressure of 140 mmHg or higher and/or a diastolic blood pressure of 90 mmHg or higher. It is managed primarily through lifestyle modifications like diet and exercise changes as well as pharmacological therapies including diuretics, beta blockers, ACE inhibitors, and calcium channel blockers. Nursing care involves monitoring the patient's condition, educating on lifestyle changes, and ensuring proper treatment adherence.Introduction to CNI (Container Network Interface)
Introduction to CNI (Container Network Interface)HungWei Chiu
?
The document explores the complexities of the Container Network Interface (CNI) in Kubernetes and its implementations, detailing the functions of flannel and other networking solutions. It provides an overview of how Docker and Kubernetes manage container networking through configurations and command settings, as well as the step-by-step setup of a Kubernetes cluster using CNI. Key elements discussed include network namespaces, Linux bridges, vxlan overlays, and integration with configuration management tools like etcd and daemonsets.Getting Started with Kubernetes
Getting Started with Kubernetes VMware Tanzu
?
The document provides an overview of Kubernetes, an open-source container management platform that enables the management and scaling of containerized applications. It outlines key concepts such as nodes, pods, and various Kubernetes objects (e.g., deployments, replicasets, statefulsets). Additionally, it covers cluster components, networking models, security features, and tools for managing Kubernetes stacks.An overview of the Kubernetes architecture
An overview of the Kubernetes architectureIgor Sfiligoi
?
The document provides an overview of Kubernetes architecture, including its history, basic building blocks like containers and pods, and features such as deployment, configuration management, and networking. It discusses orchestration, pod scheduling, user permissions, and the importance of YAML for interactions with Kubernetes. The presentation highlights the system's capabilities in managing containerized applications across various platforms and emphasizes its flexibility and ease of configuration.Kubernetes Basics
Kubernetes BasicsEueung Mulyana
?
This document provides an overview of Kubernetes including:
1) Kubernetes is an open-source platform for automating deployment, scaling, and operations of containerized applications. It provides container-centric infrastructure and allows for quickly deploying and scaling applications.
2) The main components of Kubernetes include Pods (groups of containers), Services (abstract access to pods), ReplicationControllers (maintain pod replicas), and a master node running key components like etcd, API server, scheduler, and controller manager.
3) The document demonstrates getting started with Kubernetes by enabling the master on one node and a worker on another node, then deploying and exposing a sample nginx application across the cluster.Docker and kubernetes
Docker and kubernetesDongwon Kim
?
Docker allows building portable software that can run anywhere by packaging an application and its dependencies in a standardized unit called a container. Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications. It groups containers that make up an application into logical units for easy management and discovery. Kubernetes can replicate containers, provide load balancing, coordinate updates between containers, and ensure availability. Defining applications as Kubernetes resources allows them to be deployed and updated easily across a cluster.Hands-On Introduction to Kubernetes at LISA17
Hands-On Introduction to Kubernetes at LISA17Ryan Jarvinen
?
This document provides an agenda and instructions for a hands-on introduction to Kubernetes tutorial. The tutorial will cover Kubernetes basics like pods, services, deployments and replica sets. It includes steps for setting up a local Kubernetes environment using Minikube and demonstrates features like rolling updates, rollbacks and self-healing. Attendees will learn how to develop container-based applications locally with Kubernetes and deploy changes to preview them before promoting to production.Introduction to kubernetes
Introduction to kubernetesGabriel Carro
?
This document provides an introduction to Kubernetes including:
- What Kubernetes is and what it does including abstracting infrastructure, providing self-healing capabilities, and providing a uniform interface across clouds.
- Key concepts including pods, services, labels, selectors, and namespaces. Pods are the atomic unit and services provide a unified access method. Labels and selectors are used to identify and group related objects.
- The Kubernetes architecture including control plane components like kube-apiserver, etcd, and kube-controller-manager. Node components include kubelet and kube-proxy. Optional services like cloud-controller-manager and cluster DNS are also described. Kubernetes Architecture
Kubernetes ArchitectureKnoldus Inc.
?
The document presents a detailed introduction to Kubernetes, an open-source container management tool that automates container deployment and load balancing, originally developed by Google. It covers Kubernetes architecture, including master and node components, key terminology like pods and services, and networking challenges, as well as various installation options. The presentation includes resources for further learning about Kubernetes.Kubernetes Architecture | Understanding Kubernetes Components | Kubernetes Tu...
Kubernetes Architecture | Understanding Kubernetes Components | Kubernetes Tu...Edureka!
?
The document outlines a Kubernetes certification training agenda covering fundamental concepts such as Kubernetes architecture, master and worker nodes, and the key components involved. It highlights Kubernetes as an open-source container management tool that automates deployment, scaling, and load balancing across various cloud environments. Additionally, it discusses features like self-healing, service discovery, and storage orchestration, as well as challenges associated with network setup and communication.Kubernetes: An Introduction to the Open Source Container Orchestration Platform
Kubernetes: An Introduction to the Open Source Container Orchestration PlatformMichael O'Sullivan
?
Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications. It operates on a cluster model with master and worker nodes, allowing for features like self-healing, automated updates, and service discovery. The document provides an overview of its architecture, components, and comparisons with other container orchestration tools like Docker Swarm.Introduction to kubernetes
Introduction to kubernetesRaffaele Di Fazio
?
The document is an introduction to Kubernetes, an open-source container orchestration system developed by Google. It covers Kubernetes architecture, main concepts such as pods, deployments, services, and the reconciler pattern. The presentation also touches on advanced topics and resources for further learning about Kubernetes.Introduction to kubernetes
Introduction to kubernetesMichal Cwienczek
?
This document provides an introduction to Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications. It first reviews what Docker is and its features like isolation and compatibility across platforms. It then explains that container orchestration is needed to manage thousands of containers across a cluster, ensure efficient resource use, and automate container lifecycles. Kubernetes is recommended because it is actively developed by major companies, makes scheduling and managing workloads easy through features like rolling updates, and has many extensions available.Learned from KIND
Learned from KIND HungWei Chiu
?
The document discusses 'kind' (Kubernetes in Docker), a tool for running Kubernetes clusters within Docker containers, originally designed for CI testing but also popular for local development. It highlights various challenges related to managing IP addresses and DNS resolutions within this setup, and how 'kind' addresses these issues to ensure stable operation of Kubernetes. Overall, the document emphasizes the ongoing improvements and functionalities of 'kind' in enhancing Kubernetes' capabilities in containerized environments.OpenStack Ironic - Bare Metal-as-a-Service
OpenStack Ironic - Bare Metal-as-a-ServiceRamon Acedo Rodriguez
?
The document outlines the process for creating and managing networks and instances using OpenStack, particularly focusing on both virtual and bare metal nodes. It details the steps for networking configuration, introspection rule creation, and node management, including the setting of IPMI credentials and vendor drivers. Additionally, it provides examples of commands to create and introspect nodes, as well as manage network configurations.Kubernetes - introduction
Kubernetes - introductionSparkbit
?
Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications. It coordinates activities across a cluster of machines by defining basic building blocks like pods (which contain containers), replication controllers (which ensure a specified number of pods are running), and services (which define logical groups of pods). Kubernetes provides tools for running applications locally on a single node as well as managing resources in the cluster, including creating, deleting, viewing, and updating resources from configuration files.Kubernetes 101
Kubernetes 101Crevise Technologies
?
Kubernetes is an open source container orchestration system that automates the deployment, maintenance, and scaling of containerized applications. It groups related containers into logical units called pods and handles scheduling pods onto nodes in a compute cluster while ensuring their desired state is maintained. Kubernetes uses concepts like labels and pods to organize containers that make up an application for easy management and discovery.01. Kubernetes-PPT.pptx
01. Kubernetes-PPT.pptxTamalBanerjee16
?
Kubernetes is an open-source platform for managing containerized applications across multiple hosts. It provides tools for deployment, scaling, and management of containers. Kubernetes handles tasks like scheduling containers on nodes, scaling resources, applying security policies, and monitoring applications. It ensures containers are running and if not, restarts them automatically.Container Networking Deep Dive
Container Networking Deep DiveOpen Networking Summit
?
The document discusses container networking and microservices architecture, highlighting the need for service discovery, load balancing, and multi-tenancy in cloud environments. It explains how containers are lightweight units of software that help reduce conflicts in development environments, while microservices allow for autonomous and scalable applications. Additionally, it elaborates on networking models such as CNM and CNI, which facilitate container communication and management, particularly in platforms like Docker and Kubernetes.Kubernetes
Kuberneteserialc_w
?
This document provides an overview of Kubernetes, a container orchestration system. It begins with background on Docker containers and orchestration tools prior to Kubernetes. It then covers key Kubernetes concepts including pods, labels, replication controllers, and services. Pods are the basic deployable unit in Kubernetes, while replication controllers ensure a specified number of pods are running. Services provide discovery and load balancing for pods. The document demonstrates how Kubernetes can be used to scale, upgrade, and rollback deployments through replication controllers and services.CyberAgentのインフラについて メディア事業編 #catechchallenge
CyberAgentのインフラについて メディア事業編 #catechchallengewhywaita
?
talked by Raspberry Pi4で始めるおうちKubernetesクラスタ自作入門企業導入微服務實戰 - updated
企業導入微服務實戰 - updatedPaul Chao
?
本文件探讨了微服务架构的兴起原因与概念，分析单体架构的瓶颈及其对应的解决方案。通过实际案例，强调微服务在开发与运维中的优势，包括高交付频率与灵活性，并提供相关实施建议与最佳实践。还讨论了碍耻产别谤苍别迟别蝉在微服务架构中的应用，以增强系统的可扩展性与管理方便性。廣宣學堂: 企業導入微服務實戰
廣宣學堂: 企業導入微服務實戰Paul Chao
?
本文件探讨了微服务架构的兴起及其相对于单体架构的优势，分析了开发与运维的挑战，以及微服务在实践中的应用。它详细讨论了微服务的高交付频率、独立部署能力和团队协作模式，同时也强调了容器化和碍耻产别谤苍别迟别蝉在微服务管理中的重要性。在实施微服务的过程中，需要充分评估现状、规划服务切割、自动化测试和监控，以实现高效且灵活的系统开发与运营。More Related Content
What's hot (20)
Introduction to CNI (Container Network Interface)
Introduction to CNI (Container Network Interface)HungWei Chiu
?
The document explores the complexities of the Container Network Interface (CNI) in Kubernetes and its implementations, detailing the functions of flannel and other networking solutions. It provides an overview of how Docker and Kubernetes manage container networking through configurations and command settings, as well as the step-by-step setup of a Kubernetes cluster using CNI. Key elements discussed include network namespaces, Linux bridges, vxlan overlays, and integration with configuration management tools like etcd and daemonsets.Getting Started with Kubernetes
Getting Started with Kubernetes VMware Tanzu
?
The document provides an overview of Kubernetes, an open-source container management platform that enables the management and scaling of containerized applications. It outlines key concepts such as nodes, pods, and various Kubernetes objects (e.g., deployments, replicasets, statefulsets). Additionally, it covers cluster components, networking models, security features, and tools for managing Kubernetes stacks.An overview of the Kubernetes architecture
An overview of the Kubernetes architectureIgor Sfiligoi
?
The document provides an overview of Kubernetes architecture, including its history, basic building blocks like containers and pods, and features such as deployment, configuration management, and networking. It discusses orchestration, pod scheduling, user permissions, and the importance of YAML for interactions with Kubernetes. The presentation highlights the system's capabilities in managing containerized applications across various platforms and emphasizes its flexibility and ease of configuration.Kubernetes Basics
Kubernetes BasicsEueung Mulyana
?
This document provides an overview of Kubernetes including:
1) Kubernetes is an open-source platform for automating deployment, scaling, and operations of containerized applications. It provides container-centric infrastructure and allows for quickly deploying and scaling applications.
2) The main components of Kubernetes include Pods (groups of containers), Services (abstract access to pods), ReplicationControllers (maintain pod replicas), and a master node running key components like etcd, API server, scheduler, and controller manager.
3) The document demonstrates getting started with Kubernetes by enabling the master on one node and a worker on another node, then deploying and exposing a sample nginx application across the cluster.Docker and kubernetes
Docker and kubernetesDongwon Kim
?
Docker allows building portable software that can run anywhere by packaging an application and its dependencies in a standardized unit called a container. Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications. It groups containers that make up an application into logical units for easy management and discovery. Kubernetes can replicate containers, provide load balancing, coordinate updates between containers, and ensure availability. Defining applications as Kubernetes resources allows them to be deployed and updated easily across a cluster.Hands-On Introduction to Kubernetes at LISA17
Hands-On Introduction to Kubernetes at LISA17Ryan Jarvinen
?
This document provides an agenda and instructions for a hands-on introduction to Kubernetes tutorial. The tutorial will cover Kubernetes basics like pods, services, deployments and replica sets. It includes steps for setting up a local Kubernetes environment using Minikube and demonstrates features like rolling updates, rollbacks and self-healing. Attendees will learn how to develop container-based applications locally with Kubernetes and deploy changes to preview them before promoting to production.Introduction to kubernetes
Introduction to kubernetesGabriel Carro
?
This document provides an introduction to Kubernetes including:
- What Kubernetes is and what it does including abstracting infrastructure, providing self-healing capabilities, and providing a uniform interface across clouds.
- Key concepts including pods, services, labels, selectors, and namespaces. Pods are the atomic unit and services provide a unified access method. Labels and selectors are used to identify and group related objects.
- The Kubernetes architecture including control plane components like kube-apiserver, etcd, and kube-controller-manager. Node components include kubelet and kube-proxy. Optional services like cloud-controller-manager and cluster DNS are also described. Kubernetes Architecture
Kubernetes ArchitectureKnoldus Inc.
?
The document presents a detailed introduction to Kubernetes, an open-source container management tool that automates container deployment and load balancing, originally developed by Google. It covers Kubernetes architecture, including master and node components, key terminology like pods and services, and networking challenges, as well as various installation options. The presentation includes resources for further learning about Kubernetes.Kubernetes Architecture | Understanding Kubernetes Components | Kubernetes Tu...
Kubernetes Architecture | Understanding Kubernetes Components | Kubernetes Tu...Edureka!
?
The document outlines a Kubernetes certification training agenda covering fundamental concepts such as Kubernetes architecture, master and worker nodes, and the key components involved. It highlights Kubernetes as an open-source container management tool that automates deployment, scaling, and load balancing across various cloud environments. Additionally, it discusses features like self-healing, service discovery, and storage orchestration, as well as challenges associated with network setup and communication.Kubernetes: An Introduction to the Open Source Container Orchestration Platform
Kubernetes: An Introduction to the Open Source Container Orchestration PlatformMichael O'Sullivan
?
Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications. It operates on a cluster model with master and worker nodes, allowing for features like self-healing, automated updates, and service discovery. The document provides an overview of its architecture, components, and comparisons with other container orchestration tools like Docker Swarm.Introduction to kubernetes
Introduction to kubernetesRaffaele Di Fazio
?
The document is an introduction to Kubernetes, an open-source container orchestration system developed by Google. It covers Kubernetes architecture, main concepts such as pods, deployments, services, and the reconciler pattern. The presentation also touches on advanced topics and resources for further learning about Kubernetes.Introduction to kubernetes
Introduction to kubernetesMichal Cwienczek
?
This document provides an introduction to Kubernetes, an open-source system for automating deployment, scaling, and management of containerized applications. It first reviews what Docker is and its features like isolation and compatibility across platforms. It then explains that container orchestration is needed to manage thousands of containers across a cluster, ensure efficient resource use, and automate container lifecycles. Kubernetes is recommended because it is actively developed by major companies, makes scheduling and managing workloads easy through features like rolling updates, and has many extensions available.Learned from KIND
Learned from KIND HungWei Chiu
?
The document discusses 'kind' (Kubernetes in Docker), a tool for running Kubernetes clusters within Docker containers, originally designed for CI testing but also popular for local development. It highlights various challenges related to managing IP addresses and DNS resolutions within this setup, and how 'kind' addresses these issues to ensure stable operation of Kubernetes. Overall, the document emphasizes the ongoing improvements and functionalities of 'kind' in enhancing Kubernetes' capabilities in containerized environments.OpenStack Ironic - Bare Metal-as-a-Service
OpenStack Ironic - Bare Metal-as-a-ServiceRamon Acedo Rodriguez
?
The document outlines the process for creating and managing networks and instances using OpenStack, particularly focusing on both virtual and bare metal nodes. It details the steps for networking configuration, introspection rule creation, and node management, including the setting of IPMI credentials and vendor drivers. Additionally, it provides examples of commands to create and introspect nodes, as well as manage network configurations.Kubernetes - introduction
Kubernetes - introductionSparkbit
?
Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications. It coordinates activities across a cluster of machines by defining basic building blocks like pods (which contain containers), replication controllers (which ensure a specified number of pods are running), and services (which define logical groups of pods). Kubernetes provides tools for running applications locally on a single node as well as managing resources in the cluster, including creating, deleting, viewing, and updating resources from configuration files.Kubernetes 101
Kubernetes 101Crevise Technologies
?
Kubernetes is an open source container orchestration system that automates the deployment, maintenance, and scaling of containerized applications. It groups related containers into logical units called pods and handles scheduling pods onto nodes in a compute cluster while ensuring their desired state is maintained. Kubernetes uses concepts like labels and pods to organize containers that make up an application for easy management and discovery.01. Kubernetes-PPT.pptx
01. Kubernetes-PPT.pptxTamalBanerjee16
?
Kubernetes is an open-source platform for managing containerized applications across multiple hosts. It provides tools for deployment, scaling, and management of containers. Kubernetes handles tasks like scheduling containers on nodes, scaling resources, applying security policies, and monitoring applications. It ensures containers are running and if not, restarts them automatically.Container Networking Deep Dive
Container Networking Deep DiveOpen Networking Summit
?
The document discusses container networking and microservices architecture, highlighting the need for service discovery, load balancing, and multi-tenancy in cloud environments. It explains how containers are lightweight units of software that help reduce conflicts in development environments, while microservices allow for autonomous and scalable applications. Additionally, it elaborates on networking models such as CNM and CNI, which facilitate container communication and management, particularly in platforms like Docker and Kubernetes.Kubernetes
Kuberneteserialc_w
?
This document provides an overview of Kubernetes, a container orchestration system. It begins with background on Docker containers and orchestration tools prior to Kubernetes. It then covers key Kubernetes concepts including pods, labels, replication controllers, and services. Pods are the basic deployable unit in Kubernetes, while replication controllers ensure a specified number of pods are running. Services provide discovery and load balancing for pods. The document demonstrates how Kubernetes can be used to scale, upgrade, and rollback deployments through replication controllers and services.CyberAgentのインフラについて メディア事業編 #catechchallenge
CyberAgentのインフラについて メディア事業編 #catechchallengewhywaita
?
talked by Raspberry Pi4で始めるおうちKubernetesクラスタ自作入門Similar to Debug Your Kubernetes Network (20)
企業導入微服務實戰 - updated
企業導入微服務實戰 - updatedPaul Chao
?
本文件探讨了微服务架构的兴起原因与概念，分析单体架构的瓶颈及其对应的解决方案。通过实际案例，强调微服务在开发与运维中的优势，包括高交付频率与灵活性，并提供相关实施建议与最佳实践。还讨论了碍耻产别谤苍别迟别蝉在微服务架构中的应用，以增强系统的可扩展性与管理方便性。廣宣學堂: 企業導入微服務實戰
廣宣學堂: 企業導入微服務實戰Paul Chao
?
本文件探讨了微服务架构的兴起及其相对于单体架构的优势，分析了开发与运维的挑战，以及微服务在实践中的应用。它详细讨论了微服务的高交付频率、独立部署能力和团队协作模式，同时也强调了容器化和碍耻产别谤苍别迟别蝉在微服务管理中的重要性。在实施微服务的过程中，需要充分评估现状、规划服务切割、自动化测试和监控，以实现高效且灵活的系统开发与运营。企業導入微服務實戰 - updated
企業導入微服務實戰 - updatedPaul Chao
?
该文档探讨了微服务架构的崛起原因及其与单体架构的比较，分析了技术应用场景和系统开发维度的不同特性。微服务架构通过高交付频率和短迭代周期提高开发效率，适用于需求不稳定或需要兼容不同技术的项目。implementation and deployment methods, including the use of Kubernetes and automated tests, are discussed to support smooth transitions to microservices.開發人員必須知道的 Kubernetes 核心技術 - Kubernetes Summit 2018
開發人員必須知道的 Kubernetes 核心技術 - Kubernetes Summit 2018Will Huang
?
本文件介绍了开发人员在 Kubernetes 中必须了解的核心技术，包括 Docker 的运作方式、Kubernetes 的架构、常用对象和部署方法。强调了容器生命周期管理与监控、各种 Kubernetes 物件及其功能，以及部署应用的标准流程和常见问题的排查技巧。还提供了学习资源和联系方式，帮助开发者更好地掌握 Kubernetes 技术。如何盡量避免 Throttling 在 K8s 中 (How to reduce throttling in k8s)
如何盡量避免 Throttling 在 K8s 中 (How to reduce throttling in k8s)Kiwi Lee
?
本文探讨如何在 Kubernetes (k8s) 中克服 CPU 流量控制 (throttling) 问题，分析物理和虚拟机环境下的 CPU 资源管理。通过调整资源限制、限制容器线程数量及实施静态 CPU 管理策略，可以有效减少流量控制现象。文章提供了多种方法和实际案例，从而显著提高了服务性能和资源利用率。出了问题不要靠猜
出了问题不要靠猜LI Daobing
?
该文档讨论了如何有效定位和解决软件产耻驳，强调不应依赖猜测，而应采用系统的方法，包括使用浏览器、服务器日志和抓包工具。文中分析了多个实际案例，提出了改进日志记录和监控的解决方案，旨在提高问题的可重现性和可追踪性。总结中强调了能再现的产耻驳是好产耻驳，并建议在解决问题时优化日志，以便未来更容易定位问题。Windows Container 101: dotNET, Container, Kubernetes
Windows Container 101: dotNET, Container, KubernetesWill Huang
?
本文介绍了奥颈苍诲辞飞蝉容器和碍耻产别谤苍别迟别蝉的基本概念与其组成部分，包括容器技术的优势、碍耻产别谤苍别迟别蝉的历史及其主要用途。此外，文章还讨论了碍耻产别谤苍别迟别蝉在奥颈苍诲辞飞蝉上的支持情况和已知限制，提供了相关的官方链接和技术交流平台。Ruby 的快与慢
Ruby 的快与慢vincent253
?
本文介绍了 Ruby 语言的优缺点，强调了其快速开发的优势与相对较慢的性能。提供了一系列提高 Ruby 性能和并发的方法，如硬件升级、缓存和异步任务队列，同时强调了控制开发节奏的重要性。总结指出，虽然 Ruby 在性能方面存在欠缺，但通过合理策略和设计可以实现高质量代码和健壮系统。改善 Angular 開發流程：你所不知道的 Schematics 程式碼產生器
改善 Angular 開發流程：你所不知道的 Schematics 程式碼產生器Chieh Kai Yang
?
本文讨论了如何通过使用 Angular 的 schematics 程序生成器来改善开发流程，包括快速初始化项目、重复建立文件结构和团队统一架构。文中介绍了 schematics 的历史和基本概念，以及安装和使用 Angular Material 和其他库的实例。作者提供了对于如何创建和测试自定义 schematics 的详细信息，并强调了其在开发中的重要性和便利性。Kvmopt osforce
Kvmopt osforcemeecheng
?
本文探讨了美团在其云主机产物中通过碍痴惭虚拟化技术进行性能优化的多个方面，包括颁笔鲍、内存、滨/翱、存储和网络的优化策略。详细介绍了上下文切换、缓存绑定、内存地址映射、虚拟设备的使用及滨/翱调度器的选择等技术实现。文档还讨论了如何通过合理配置提高整体性能，确保云服务的高效运行。美团技术团队 - KVM性能优化
美团技术团队 - KVM性能优化美团点评技术团队
?
本文档讨论了美团云主机基于碍痴惭虚拟化技术的性能优化，包括颁笔鲍、内存、滨/翱、存储和网络等方面的具体优化策略。内容涵盖了如上下文切换、缓存绑定、扩展页表、透明大页、内存合并等技术。文档提供了针对每项技术的具体设置和说明，以提高虚拟机的性能和响应能力。A brief introduction to Vagrant – 原來 VirtualBox 可以這樣玩
A brief introduction to Vagrant – 原來 VirtualBox 可以這樣玩Wen-Tien Chang
?
该文档介绍了 Vagrant 的概念和功能，通过虚拟机简化开发和服务器配置的流程。它涵盖了 Vagrant 的优势、安装步骤、基本命令及其在 DevOps 和 Web 开发中的应用场景。最终强调 Vagrant 可以有效提升开发环境的一致性和效率。微服務架構 導入經驗分享 吳剛志 - Community Open Camp
微服務架構 導入經驗分享 吳剛志 - Community Open CampAndrew Wu
?
本文件分享了微服務架構的導入經驗，強調了相較於單體式架構的優勢，包括擴展性、故障隔離和資源利用率的提升。通過使用 Windows 容器技術進行系統佈署，實現了更簡化和高效的服務管理，並提出了將傳統 ASP.NET 系統遷移到微服務架構的具體步驟及實際案例。文中也探討了微服務架構在人才發展管理系統中的應用，闡述了建立良好服務邊界和 API 定義的重要性。主库自动切换 V2.0
主库自动切换 V2.0jinqing zhu
?
本文讨论了基于窜辞辞办别别辫别谤的分布式选举和主库切换的方案，强调了切换过程中的数据一致性和监控机制。介绍了主库切换逻辑、故障条件及故障测试，确保在复杂环境中保持数据库的可靠性。最后总结了实现主从库切换的最佳实践和需要注意的细节。惭测厂蚕尝自动切换设计与实现
惭测厂蚕尝自动切换设计与实现orczhou
?
本文讨论了基于窜辞辞办别别辫别谤的分布式选举和主库切换机制，强调了保证数据一致性的关键和监控方法。探讨了分布式系统主从库的构建，如何利用窜辞辞办别别辫别谤实现主库切换逻辑，以及面临的故障处理与超时限制。最后总结了采用虚滨笔和去中心化顿狈厂的优势，旨在提高系统的可靠性与灵活性。1到100000000 - 分布式大型网站的架构设计
1到100000000 - 分布式大型网站的架构设计RolfZhang
?
本文探讨了大型网站架构设计的关键因素，从前端和后端的基本概念，到面对高访问量时如何优化服务器架构并采用分布式存储解决方案。重点讨论了数据切分策略（水平和垂直切分）、路由机制及其对查询效率的影响，同时介绍了搜索引擎核心原理与架构变化。文末提到未来的发展方向，包括系统解耦和优化数据库使用的建议。从林书豪到全明星 - 虎扑网技术架构如何化解流量高峰
从林书豪到全明星 - 虎扑网技术架构如何化解流量高峰Scourgen Hong
?
本文探讨了虎扑网如何使用共享无状态架构、消息队列、微缓存等技术来应对流量高峰的挑战，并分享了相关经验与策略。洪涛作为虎扑网的研发经理，介绍了流量高峰的来源及其对系统的影响，同时提出了六种解决方案来优化网站性能。文章中重点强调保持系统稳定性、利用预先处理与缓存，以及在流量高峰期间调节服务功能的重要性。SACC2015 ”互联网+“任重而道远-白金&高春辉
SACC2015 ”互联网+“任重而道远-白金&高春辉ptcracker
?
本文揭示了中国网络基础设施面临的诸多问题，包括云服务、顿狈厂设置、滨笔库和叠骋笔配置等方面的挑战，强调了标准化和维护的重要性。通过深入分析各种坑以及流量变化与政策影响，指出运营商的垄断和网络质量差的现状。最后，提到技术创新与网络流量管理之间的矛盾。Asp.net core v1.0
Asp.net core v1.0國昭 張
?
.NET Core v1.0 是一个跨平台的开发框架，支持 Windows、Mac 和 Linux，并通过 NuGet 管理额外功能和库。它旨在提高开发速度，提供现代化的配置和依赖注入框架，同时与传统的 .NET Framework 有显著差异，如更小的核心部分和在设计上采用微核心理念。ASP.NET MVC 6 为 .NET Core 的一个重要组成部分，优化了开发体验，同时 Entity Framework Core 也朝向轻量化和可扩展的方向发展。Asp.net core v1.0
Asp.net core v1.0chang kuo-chao
?
本文件概述了ASP.NET Core v1.0框架的差异、核心概念以及命令行操作。内容涵盖了项目结构、数据访问、单元测试及中间件的设计思想，同时强调了.NET Core的跨平台特性与与全.NET框架的区别。还介绍了与Entity Framework Core的整合及其未来的发展方向。Ad
More from HungWei Chiu (20)
以 eBPF 構建一個更為堅韌的 Kubernetes 叢集
以 eBPF 構建一個更為堅韌的 Kubernetes 叢集HungWei Chiu
?
别叠笔贵（扩展的伯克利数据包过滤器）是一种在用户空间编写应用程序并与内核动态交互的框架，提供广泛的功能远超传统数据包过滤。其应用包括网络监测、安全检测和系统性能分析，已在云原生生态系统中被广泛采用。别叠笔贵的开发和部署相对顺畅，且由于其丰富的挂钩点，为系统运维人员提供了更深入的调试能力。Learning how AWS implement AWS VPC CNI
Learning how AWS implement AWS VPC CNIHungWei Chiu
?
The document discusses AWS VPC CNI (Container Network Interface) and how it enables networking connectivity for Kubernetes pods running on Amazon EC2 instances within an AWS VPC (Virtual Private Cloud). It aims to provide high throughput and availability, low latency networking while allowing users to express and enforce network policies and isolation comparable to using native EC2 networking and security groups. AWS VPC CNI assigns pods IP addresses from the same subnet as the EC2 instance so traffic can bypass overlay networking for improved performance and visibility within the VPC.Jenkins & IaC
Jenkins & IaCHungWei Chiu
?
The document discusses the management of multiple Jenkins servers and numerous Jenkins jobs within a DevOps framework, emphasizing the use of Jenkins Job Builder (JJB) for automation. It covers Jenkins architecture, job configuration, and integration with various source control systems. Additionally, it highlights the importance of using YAML files for job definitions and managing CI/CD pipelines in a cloud and on-premises environment.The relationship between Docker, Kubernetes and CRI
The relationship between Docker, Kubernetes and CRIHungWei Chiu
?
Docker, Kubernetes, and CRI standards allow different container solutions to work together. Docker contributed to the OCI specifications for container images and runtimes. Kubernetes uses the Container Runtime Interface (CRI) to support multiple container runtimes like Docker, Containerd, and CRI-O. This allows Kubernetes to work with different container solutions while maintaining compatibility through open standards.Life
LifeHungWei Chiu
?
本文记录了一位工程师在运动与饮食方面的转变过程，强调依靠饮食与运动习惯的持久改变，而非速成方法。作者分享了自己的饮食模式，从关注营养成分到学习烹饪，再到实施低碳高蛋白饮食和间歇性断食，以及运动训练经历的逐步升级。最终，作者反思运动与饮食带来的身体与精神变化，体会到长久效益。Introduction to CRI and OCI
Introduction to CRI and OCIHungWei Chiu
?
The document provides an overview of the Open Container Initiative (OCI) and Container Runtime Interface (CRI), detailing specifications for container runtime and image formats. It discusses the operational workflows involved in downloading and running OCI images, the lifecycle of containers, and various runtimes such as containerd and cri-o optimized for Kubernetes. Additionally, it includes links to resources and demonstrations for practical implementations of these technologies.IP Virtual Server(IPVS) 101
IP Virtual Server(IPVS) 101HungWei Chiu
?
The document provides an overview of IPVS (IP Virtual Server), a transport-layer load balancing solution implemented in the Linux kernel, detailing its architecture, integration with Kubernetes, and load balancing methods. It includes a demonstration of setup and configuration, comparisons with iptables and LVS, and an explanation of associated tools and user commands needed for managing services. It also addresses debugging challenges and features resources for further learning about Kubernetes and cloud-native technologies.Opentracing 101
Opentracing 101HungWei Chiu
?
The document provides an overview of distributed tracing systems, particularly focusing on Dapper, OpenTracing, and Jaeger. It explains the importance of tracing in complex distributed systems, details the architecture and functionality of OpenTracing, and introduces Jaeger as a cloud-native distributed tracing system. Additionally, it discusses OpenTelemetry, which integrates tracing, metrics, and logs to enhance observability in microservices.iptables and Kubernetes
iptables and KubernetesHungWei Chiu
?
This document discusses the integration of iptables and Kubernetes, focusing on iptables operations in a Docker environment, kernel module implementation, and load-balancing strategies using layer 4 and layer 7 functionalities. It explains various technical aspects including packet inspection, service workflow in Kubernetes, and the implementation of custom modules for handling DNS packets and UDP load-balancing. Additionally, it highlights the connection tracking mechanism in Kubernetes and its implications for NAT results in packet processing.IPTABLES Introduction
IPTABLES IntroductionHungWei Chiu
?
The document discusses iptables and its implementation in networking, particularly within containerized environments using Docker and Kubernetes. It covers various aspects like ebtables, connection tracking, and the modification of kernel modules to manage packet flow between hosts and containers. The document also includes practical examples of setting up rules, generating traffic, and debugging network connections.Open vSwitch Introduction
Open vSwitch IntroductionHungWei Chiu
?
The document provides an introduction to Open vSwitch (OVS) by Hungwei Chiu, explaining its function in networking and its integration with Kubernetes. It details the differences between routers and switches, outlines the TCP/IP model, and discusses the OpenFlow protocol as a communication interface between control and forwarding layers in a software-defined networking architecture. The document also addresses challenges in Kubernetes networking with OVS, including pod communication and policy management.Load Balancing 101
Load Balancing 101HungWei Chiu
?
This document provides an overview of load balancing, explaining its functionality and different algorithms, particularly in the context of Kubernetes. It covers the distinction between layer 4 and layer 7 load balancing, various implementations, and the role of middleware. Additionally, it discusses real-world applications, including gRPC protocol handling in a Kubernetes environment.How Networking works with Data Science
How Networking works with Data Science HungWei Chiu
?
这份文件探讨了资料科学在网路封包分析中的应用，涵盖了础滨及网路合作的介绍、交通分类、网路安全和性能等主题。文件还详细解释了罢颁笔/滨笔协议的运作原理，包括各层的功能及其比喻，并提出了安全和流量管理的现代方法。最后，还提到了一些机器学习技术在流量分类和安全监测中的应用。Introduction to CircleCI
Introduction to CircleCIHungWei Chiu
?
The document introduces Hung-Wei Chiu, a DevOps professional and Microsoft MVP, detailing his contributions to open source and various tech communities. It provides an overview of CircleCI's hosting, pricing, and features such as SSH debugging, parallelism, and YAML configuration. Additionally, it highlights the use of orbs for packaging commands and jobs, emphasizing the sharing aspect within the developer community.Head First to Container&Kubernetes
Head First to Container&KubernetesHungWei Chiu
?
The document discusses containers and Kubernetes, covering their definition, advantages over virtual machines, and how they integrate into IT processes. It details how to work with Docker, including image preparation, container creation, storage management, networking, and the orchestration provided by Kubernetes. The text also highlights Kubernetes architecture, deployment concepts, and networking challenges that users may face.Kubernetes 1001
Kubernetes 1001HungWei Chiu
?
The document provides an extensive overview of Kubernetes, detailing its architecture, fundamental components, and the advantages of using containers over virtual machines. It covers essential concepts such as pods, services, networking, storage management, and deployment strategies within Kubernetes. Additionally, it discusses limitations and considerations for employing Kubernetes in various infrastructure setups, emphasizing the importance of understanding storage and networking functionalities in a cloud environment.Application-Based Routing
Application-Based RoutingHungWei Chiu
?
The document discusses application-based routing in Software Defined Wide Area Network (SD-WAN) environments, detailing how to optimize traffic routes based on application priority using various Linux kernel techniques. It explains the challenges of implementing deep packet inspection (DPI) and routing decisions through methods like netfilter and iptables. The presentation emphasizes performance improvements by leveraging connection tracking and reducing the need for excessive packet inspections.Build Your Own CaaS (Container as a Service)
Build Your Own CaaS (Container as a Service)HungWei Chiu
?
The document discusses Kubernetes as a container-centric management platform that facilitates agile application deployment and microservices orchestration. It outlines the concept of Container as a Service (CaaS), detailing how to manage container lifecycles using Kubernetes, and emphasizes the importance of CI/CD integration for developers. Additionally, the document describes the necessary steps for building a CaaS platform, testing environments, and continuous integration and deployment processes within Kubernetes.Control Your Network ASICs, What Benefits switchdev Can Bring Us
Control Your Network ASICs, What Benefits switchdev Can Bring UsHungWei Chiu
?
The document discusses the benefits of Switchdev, a Linux kernel interface aimed at controlling network switches that typically require proprietary methods. It highlights challenges in managing physical ports due to embedded switches in devices such as home routers, and advocates for using Switchdev to standardize control methods across hardware. Vendor adoption is also addressed, with examples of companies like Mellanox and Broadcom contributing to the initiative to simplify network management and automation.Automatically Renew Certificated In Your Kubernetes Cluster
Automatically Renew Certificated In Your Kubernetes ClusterHungWei Chiu
?
The document discusses cert-manager, a Kubernetes certificate management tool that automates the issuance and renewal of certificates from various sources, including Let's Encrypt. It outlines the functionality of cert-manager, the architecture, and how to set it up within a Kubernetes cluster, focusing on DNS-based challenges for domain verification. The document provides practical guidance and references for using cert-manager effectively in a private network environment.Ad
Debug Your Kubernetes Network
- 1. HungWei Chiu 09/01/2022 LINE O ffi ce Kubernetes 網路除錯?苦談
- 2. Who ? 矽??耕?筆記 ? CNTUG 志? ? 個?部落格 ? https://hwchiu.com
- 3. 網路除錯之必要性與複雜性 ? Kubernetes 主要三??向 ? 運算/網路/儲存 ? 運算 ? 基本上都基於容器為主，?部分使?者都可以藉由 Docker 等?式本地熟悉與學習，所以熟悉度最? ? 儲存 ? 複雜但非必要，預設環境下不透過外部儲存也是可以正常運作 ? 網路 ? 複雜且必要，但是?部分的操作都被 Kubernetes 給抽象處理 ? 不需要知道細節也可以運作，這是?個雙?刃
- 4. Kubernetes 的網路流量 ? 以叢集為基點去觀看封包流向，?抵上可以分成東?向與南北向 ? 南北向 ? 流量進出叢集 ? 東?向 ? 流量於叢集中竄流
- 5. Kubernetes 的網路流量 ? 南北向 ? 外部服務如何存取叢集內的服務 ? Ingress, API-Gateway, Load-Balancer 等 ? 叢集內服務如何存取外部網路 ? NAT(Network Address Translation)
- 6. Kubernetes 的網路流量 ? 東?向 ? 存取?向 ? Pod to Service ? Pod to Pod ? 存取範圍 ? 同節點 ? 跨節點
- 15. Kubernetes 的網路流量 ? 沒有?個萬解的網路架構 ? 所有網路問題都要根據?標環境攤開來講 ? 前述所有的圖都只是非常粗略不講細節的流向圖 ? 架構為主，不探討實作 ? 實務上除錯與維運則需要把實作給考慮進來
- 16. Kubernetes 的網路元件 ? 基本上可以分成四類 ? 底层基础建设 ? 內建 ? CNI ? 第三?功能 ? 這些網路元件互相整合才使得叢集有基本的網路功能 ? 只要?個出錯，就會造成網路功能不如預期
- 17. Kubernetes 的網路元件 ? 底层基础建设 ? 雲端使?者 ? 就是滿滿的 VPC + Firewall + Routing ? 地端維運?員 ? 節點與節點之間的連線，同時基本的 IP 發放 ? 中間是否牽扯 Router/Switch，是否跨機櫃等 ? 問你家網管
- 18. 底层基础建设
- 19. Kubernetes 的網路元件 ? 內建 ? Kubernetes Service ? Kube-Proxy ? Iptables/ipvs ? Kubernetes Ingress ? 取決於你?哪?套 Ingress，不同套的實作細節不同 ? CoreDNS ? HostNetwork (跳脫 CNI，繼承節點網路) ? Network Policy ? 取決於 CNI 設定
- 21. Kubernetes 的網路元件 ? CNI 很深 ? Calico -> BGP/IPIP ? Flannel -> VXLAN ? Cilium -> eBPF ? OVS -> OpenFlow ? Cloud-Provider speci fi ed ? AWS/Azure
- 22. CNI
- 23. Kubernetes 的網路元件 ? 第三?功能 ? Service Mesh ? Cluster Federation ? ... ? 這些功能都必須要建立於 Kubernetes 之上，同時疊加更多更複雜的功能來處理 網路封包 ? 基礎功不夠，就只能當 YAML ?程師
- 25. Kubernetes 的除錯思路 ? 網路非常複雜，也是最難除錯的 ? 遇到問題第?步都是釐清 ? ?向性 ? 到底是南北向問題還是東?向問題 ? 問題點 ? 基礎建設？ K8s? CNI? 第三?整合?
- 26. Kubernetes 的除錯思路 ? 網路問題極度不推薦?嘴除錯 ? 推薦做法 ? 畫出整個系統架構圖 ? 標?出你的網路情境(從誰想要透過何種?式存取誰) ? 將??想像成?個封包，於架構圖上解釋你認為封包會怎麼流動 ? 這個步驟沒有辦法就代表你對於整體網路還是有不熟的地? ? 以上述過程的流動?式為基準開始除錯，透過測試的?式來逐漸縮?範圍
- 27. Kubernetes 的除錯思路
- 28. Kubernetes 的除錯思路
- 29. Kubernetes 的除錯思路 ? 假設你聽到有?描述「我的 Pod 不能存取某個 Service 耶?」 ? 你聽到會有什麼反應？ ? 你期望對?告訴你什麼？
- 30. Kubernetes 的除錯思路 ? 我通常會反問對? ? 你做過哪些測試？ ? 你?前排除過哪些問題點？ ? 這也是?個良好的合作?式，不要當無腦伸?牌 ? 問問題請同時敘述??做過什麼嘗試，???前認為卡關在哪裡
- 31. 思路範例 ? 「我的 Pod 不能存取某個 Service 耶?」 ? 跟 DNS 解析有無問題？ 直接使? ClusterIP 試試看 ? 跟 Service 轉換是否有關？ 直接打 Pod IP 試試看？ ? 跟節點是否有關係？ 從同節點上的 Pod 打看看？ ? 從節點直接打看看？ ? 是否有 Network Policy?
- 32. 思路範例 ? 「我的 Pod 不能存取某個 Service 耶?」 ? 縮?範圍後如果還是不能釐清問題點，嘗試錄製封包 ? 封包流向 ? Server 沒收到 ? Server 有收到，沒有回 ? Server 有收到，也有回，但是 Client 沒有收到
- 33. 思路範例 ? 「我的 Pod 不能存取某個 Service 耶?」 ? 錄製的封包是否可以看出問題？ ? 可能封包不如預期，被 Kernel 丟掉？ ? 封包錄製不到？ ? 問題發?於底層架構，請求其他?幫忙
- 34. 擷取封包 ? 當現存?具都沒有辦法幫忙釐清為什麼網路不會通，這時候就可以借助抓取封 包的?式來判斷 ? 問題要有辦法重現搭配擷取封包才好處理，否則事情已經發?，錯誤的封包已 經消失這時候其實也沒有辦法擷取分析 ? 常?問題有 ? 要?什麼?具擷取分析？ ? 要如何從茫茫封包中找到?標封包?
- 35. 什麼?具 ? 常??具如 wireshark/tcpdump/tshark ? ?部分?環境不?定有 GUI 可以?，所以純 CLI ?具要優先熟悉 ? 有了?具下?個就是誰要去運?這些?具來錄製封包？ ? 節點: ? 管理上容易，要安裝?具也相對容易 ? Pod 本?: ? 取決於運?容器，不?定有想要的除錯?具
- 36. 什麼?具 - 解決?式 ? 節點: ??安裝 ? Pod 本?: ? 可以透過 ksni ff 這套?具，該套?具可獨立使?也可以掛到 kubectl plugin 使 ? ? 透過 kubectl 上傳?個事先編譯好的 tcpdump binary 到?標 Pod，並且將節 果給傳回到執?端 ? 執?端如果有 wireshark，會打開變成串流模式
- 37. 尋找封包 ? 假設今天是?個叢集內的東?向請求，該請求封包實際上會經過的落點非常多 ? 不同發?點錄製的封包數量完全不?樣 ? 完美情況是只要錄製跟?標有關的封包 ? 最壞情況下就是錄製??堆封包，然後嘗試從這些封包中找到?標封包
- 38. 寻找封包(精简图)
- 39. 尋找封包 ? 從節點出發錄製封包往往遇到的第?個問題是，我要監聽哪?個網卡？ ? 以 tcpdump 為範例 ? -i any -> 監聽所有網卡，資料量最多，過濾最?煩 ? -i xxxx -> 可以直接找到?標網卡的話，資料最精準 ? CNI 的實作?式不同會使得這個網卡的?式不同 ? 有?些 CNI 還會把封包進??次封裝，如 vxlan, ipip 等，這些都會使得你收到的 封包不是你真的想要看到的封包
- 40. 其他雜錄 ? 除了 Kubernetes 內的基本概念外， Linux 本?的概念也要有 ? 常??具 ? ip/tcpdump ? Conntrack ? 系統有上限，超過就會出現連線問題 ? Iptables/ipvs ? 網卡資訊與控制 ? Ethtool ? rp_ fi lter/routing/NAT ...etc
- 41. Q&A