Cilium 1.4, BPF-based network system yeLinux midziyo

Cilium Linux

Kuvhurwa kweprojekti kunoitwa Cilium 1.4, umo, nekutora chikamu kweGoogle, Facebook, Netflix uye Red Hat, iri kukura sisitimu yekusimbisa kudyidzana kwenetiweki uye nekushandisa marongero ekuchengetedza emidziyo yakasarudzika uye maitiro.

Kusiyanisa pakati peseti yekubata muCilium, eBPF inoshandiswa (Berkeley Packet Firita) uye XDP (eXpress Dhata Nzira). Iyo kodhi yezvinhu zvevashandisi-chikamu zvakanyorwa muGo uye zvinogoverwa pasi peiyo Apache 2.0 rezinesi.

Iwo maBPF zvinyorwa zvakatakurwa muLinux kernel zviripo pasi peGPLv2 rezinesi.

About Cilium

Cilium hwaro inzira yekumashure iyo inoshanda munzvimbo yemushandisi uye inoita basa rekugadzira uye kunyora zvirongwa zveBPF, pamwe nekudyidzana nenguva yekumhanya yakapihwa nemidziyo.

Mune fomu zvirongwa zveGMP, masisitimu anoitwa kuti ave nechokwadi chekubatana kwemidziyo, Kubatanidzwa pamwe nehurongwa hwetaneti (hwepanyama uye chaiwo network, VXLAN, Geneve) uye mutoro kuenzanisa.

Maitiro ekumashure ari yakazadzikiswa neyekutungamira interface, iyo repository yemitemo yekuwana, yekutarisa system uye yekubatanidza ma module ane rutsigiro rweKubernetes, Mesos, Istio uye Docker.

Iko kuita kweCilium-kwakavakirwa mhinduro ine hombe nhamba yemasevhisi uye kubatana kuri pamberi pamberi pe iptables-based mhinduro nekuda kwekutsvaga kwepamusoro pamusoro pemitemo.

Main kugadziridza

cilium une kugona kufambisa uye kuendesa mberi traffic traffic pakati pemasumbu mazhinji eKubernetes.

Pfungwa yemasevhisi epasirese (musiyano weKubernetes yakazara-sevhisi masevhisi ane akawanda-masumbu kumashure) inokurudzirwa zvakare.

Uyewo ine maturusi ekumisikidza iyo mitemo yekugadzirisa DNS zvikumbiro uye mhinduro pamwe nemapoka emidziyo (pods), ichikubvumidza iwe kuti uwedzere kutonga pamusoro kwekunze kwekushandisa zviwanikwa zvemidziyo.

Uyewo, kune rutsigiro rwekutema zvese zvikumbiro zveDNS uye mhinduro pamwe nemapodhi. Kuwedzera kune yekuwana mitemo padanho reIP kero, ikozvino iwe unogona kuona kuti ndeipi mibvunzo yeDNS uye mhinduro dzeDNS dzinoshanda uye ndedzipi dzinofanira kuvharwa.

Semuenzaniso, unogona kuvharira kupinda kune mamwe madomeni kana kubvumira zvikumbiro zvedunhu remuno chete, pasina chikonzero chekutarisa shanduko mukusungwa kwenzvimbo kuIP.

cilium

Izvi zvinosanganisira kugona kushandisa yakadzoserwa IP kero mukuita kwechikumbiro cheDNS kudzora zvinotevera network mashandiro (semuenzaniso, iwe unogona chete kubvumidza kuwana kune IP kero idzo dzakadzorerwa panguva yeDNS resolution.

Main makuru maficha eiyo vhezheni 1.4 yeCilium

Mune vhezheni itsva Rutsigiro rwekuyedza rwakawedzerwa kuitira pachena kunyorera kwetraffic yese pakati pemasevhisi. Encryption inogona kushandiswa kwetraffic pakati pemasumbu akasiyana, uyezve mukati meboka rimwe chete.

Yakawedzerwawo iko kugona kusimbisa node, kubvumira kuti sumbu riiswe pane isina kuvimbwa network.

Iko kushanda kutsva kunotendera, kana zvikakundikana zve backend zvinovimbisa mashandiro ebasa musumbu, zvinongoerekana zvadzoreredza traffic kune maprosesa ebasa iri mune rimwe sumbu.

Yakawedzerwa rutsigiro rwekuyedza rweIPVLAN network inopindirana, Kubvumira kuita kwepamusoro uye kunonoka kudzika mukudyidzana pakati pemidziyo miviri yemuno;

Wakawedzera module yekubatanidzwa kweFlannel, sisitimu yekugadzirisa kusanganisa kwekubatana kwenetiweki pakati penzvimbo musumbu reKubernetes, zvichikubvumidza kuti ushande pamwe chete kana kumhanya Cilium pamusoro peFlannel (Flannel network kudyidzana, Cilium kuenzanisa uye mapindiro ekuwana).

Rubatsiro rwekuyedza rwakapihwa kutsanangura yekuwana mitemo zvichienderana neAWS metadata (Amazon Web Services), senge maEEC2 tag, mapoka ekuchengetedza, uye mazita eVPC.

Mukana wekutanga Cilium paGKE (Google Kubernetes Injini paGoogle Cloud) uchishandisa COS (Container Optimized Operating System) yakurudzirwawo;

Izvi zvinopa mukana wekuyedza kushandisa Sockmap BPF kuti ikurumidze kutaurirana pakati pezviitiko zvemuno (semuenzaniso, zvinobatsira kumhanyisa kudyidzana pakati pevamiririri padivi nemaitiro emuno).


Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako