In Windows Server 2012, there is a new feature: IP address management, referred to as ipam (IP addresses Management), with the increase of DNS and DHCP servers in the enterprise, although the graphical interface allows us to easily manage, however, As servers become more and more likely to be dispersed in different divisions or regions, if we can take advantage of Ipam's management tool, we can reduce our administrative burden and monitor our services
If your company still uses workbooks to manage tens of thousands of IP addresses, pay attention to the fact that many smart engineers have begun purchasing IP Address Management (IPAM) solutions. This seems strange, but IPAM and IPv6 projects have many things in common-they are both essential, but they are not a high-priority IT job. However, there are also differences: the advantages of IPv6 cannot offset
, but the overall performance is stable and there is no jitter. This is acceptable.
Based on Macvlan, we developed our own Ipam Driver plugin-based on consul.
When Docker creates a Macvlan network, it drives a consul that is designated for its own development. The IP of free and used is recorded in the consul. Such as:
The IPAM driver is present on each host and is exposed to the Docker call via the socke
, then what do I do? I need to map the first container and host 80 ports, the second and host 81 ports to do the mapping, and so on, to the last found very chaotic, no way to manage. This thing Stone Age network model, basically cannot be adopted by enterprise.Later evolved to the next stage, we call it the hero of the solution, very good, such as rancher IPSec-based network implementation, such as flannel based on the three-tier routing network implementation, including our domestic also have s
, providing DNS query services in the cluster
Provides DNS caching to improve query performance
Reduces pressure and improves stability of kubedns vessels
Dockerfile is located in the DNSMASQ directory in the contrib warehouse of kubernetes organization on GitHub.
As you can see in the Kube-dns plugin's orchestration file, DNSMASQ specifies upstream as Kubedns through the parameter--server=127.0.0.1:10053.
Exechealthz
A health check function is provided in the Kube-dns plugi
Host
Let's take a closer look at the details of the three networks:The name is network, and the user can define it arbitrarily.IDs are network internal UUID, globally unique.Scope currently has two values "local", "remote", indicating whether it is a native network or a multiple-machine network.Driver refers to the name of network driver.Ipam is the driver name and configuration information (which we can see in the Bridge Network) for IP management issues.Information about cont
segment. For example, a bridge network segment 192.168.0.0/24 can have up to 253 virtual devices connected to this bridge.
Port (device communication port)Between router and router, the communication interface between router and bridge.
Route (Route)Routing rules, which define the rules for router traffic-packet forwarding ports.
Rule (filter rules)Defines the package filter criteria. Similar to iptables.
Image
Midonet-based kubernetes of the implementation of the MLM plugin
Midone
; This IP address management is not unique to the container, the traditional network such as DHCP is actually a IPAM, to the container time we talk about IPAM, the mainstream of two methods: based on CIDR IP address segment allocation or accurate for each of the containers assigned IP. But in short, once a container host cluster is formed, the above container assigns it a globally unique IP address, which i
Failed to create Calico network using Docker.# docker network create --driver calico --ipam-driver calico-ipam testcalicoError response from daemon: failed to update store for object type *libnetwork.endpointCnt: client: response is invalid json. The endpoint is probably not valid etcd cluster endpoint.To view Docker logs:# Journalctl-fu Docker--Logs begin at Sun 2018-05-06 10:42:10 CST. -- May10:51:11 gpu1
In a Microsoft environment, tools for unified management of IP addresses (deploying Microsoft virtualization Hyper-V) are recommended to useManaging Microsoft DHCP and DNSand AD Domain integrationDo not need to deploy agentsIpam FeaturesIpam DiscoveryWith the adds environment, Windows Server 2008 and aboveDHCP and DNS servicesIpam address SpaceDHCP address space Check, managementMulti-server management and monitoringManage across multiple serversOperational audits and IP address trackingDHCP Lea
IPAM: Driver: Default config:-subnet: 172.16.238.0/24 PID: 'host' # process space (PID) of the shared host) ports # establishes the port ing between the host and container. Ports supports two syntax formats:-"3000" # expose port 3000 of the container, the host machine port is randomly mapped to an unused port by docker-"3000-3005" # expose ports 3000 to 3005 of the container, the host machine port is randomly mapped to the unused port by docker-"8000
Routing encapsulation (GRE) tunneling, and new features of existing technologies, including IP address management (IPAM), Dns,dhcp.
For more information about the new technologies available for these networks: GRE tunnels in Windows Server Technology Preview. This preview release introduces a new feature that enables Universal Routing Encapsulation (GRE) for Windows Server gateways.
What is the Windows Server Technology Preview for
of the network to bring complexity and loss of performance, because when we have a large business cluster, these complexity and performance loss can not be ignored. The plugin principle is as follows :1. creating a Docker custom networkDocker Network Create--opt=com.docker.network.bridge.enable_icc=true--opt=com.docker.network.bridge.enable_ip_masquerade=false--opt=com.docker.network.bridge.host_binding_ipv4=0.0.0.0--opt=com.docker.network.bridge.name=br0--opt=com.docker.network.driver.mtu=1500
In many cases within the enterprise, you will encounter the following events:
1. Need to track the use of the overall IP address space;
2. Need to be urgently aware of which address is idle for quick allocation to a new device or a DNS SRV record;
3. When the address range of the DHCP server is exhausted, it is expected to have an emergency address space;
4. If you change some of the parameter options on the DHCP server (such as proxy server), I hope to be able to apply it to all servers as
official website: https://docker.github.io/engine/userguide/networking/#/the-default-bridge-network-in-detailYou can also refer to some examples in this chapter, most of which are also from the network, as follows:
One, specify the network bridgeI. 1.1 Creating a Network Bridge
[Root@linuxea ~]# Docker Network Create linuxea.comaf4526e387772f33b053ff2ab47e601ddf9618bc2d444770775723d76d3a1010[Root@linuxea ~]# Docker Network lsNetwork ID NAME DRIVER SCOPE3EBF99E55DB8 Bridge Bridge7eb855581296 H
application container IP fixed (reference online information)The convenience of Docker 1.9 to support Contiv Netplugin,contiv is that users can access it directly from the instance IP.The Docker 1.10 version supports the designation of IP boot containers, and it is necessary to study the design of the container IP fixed scheme because some database applications have a need for instance IP pinning.In the default kubernetes + contiv network environment, the container pod IP network connection is
--network= Wordpress_net--ip=172.18.0.2 mysql:5.7
da497e56bd4b0f3434dd4f81534096574d167354dc508b657ceb390ba8e63771
docker:error response from Daemon:user specified IP address are supported only if connecting to networks with User Configured subnets.
Prompted an error, to configure IP, you need to assign a subnet to the network. So get a new network.
Docker Network create--driver bridge--subnet 172.25.0.0/16 wordpress_net [Root@vultrvpn conf.d]# Docker-network
INS Pect wordpress_ne
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.