Calico network traffic Process Analysis

1. The Calico node container runs in the daemonset mode in kubernetes. The container network mode is hostnetwor. It shares the network stack with the host and has the same IP address and hostname.

 

2. view a pod: [email protected] ~] # Kubectl get pods-O wide-N Kube-system | grep-I Tiller

Tiller-deploy-5dfffddb8d-n4vp6 1/1 running 0 3D 10.233.122.4 bserver42

 

3. view the NIC and IP address of a pod

Use calicoctl to view the workloadendpoint: -- workload = <namespace>. <podname> of container.

[[Email protected] ~] # Calicoctl get workloadendpoint -- workload = kube-system.tiller-deploy-5dfffddb8d-n4vp6-O yaml
-Apiversion: V1
Kind: workloadendpoint
Node: bserver42
Workload: kube-system.tiller-deploy-5dfffddb8d-n4vp6
SPEC:
Interfacename: cali2185315f9c4
Ipnetworks:
-10.233.122.4/32
Mac: 52: Fe: 19: E7: 5b: 14

Calico Network Architecture:

Calico network traffic Process Analysis