In Windows Server 2012, there is a new feature: IP address management, referred to as ipam (IP addresses Management), with the increase of DNS and DHCP servers in the enterprise, although the graphical interface allows us to easily manage, however, As servers become more and more likely to be dispersed in different divisions or regions, if we can take advantage of Ipam's management tool, we can reduce our administrative burden and monitor our services
If your company still uses workbooks to manage tens of thousands of IP addresses, pay attention to the fact that many smart engineers have begun purchasing IP Address Management (IPAM) solutions. This seems strange, but IPAM and IPv6 projects have many things in common-they are both essential, but they are not a high-priority IT job. However, there are also differences: the advantages of IPv6 cannot offset
the physical NIC on the host to receive the corresponding VLAN. Docker driver specifies Macvlan when creating the network. The Macvlan network of Docker is measured, and the container running on the Macvlan network is 10~15% about the performance loss of the container running in the host network, but the overall performance is stable and there is no jitter. This is acceptable.
Based on Macvlan, we developed our own Ipam Driver plugin-based on consul
development of the architecture. Two each hill, the remaining players choose their own, I will be specific to talk about these two options.Technical terminologyLet me start with a few technical terms before starting the following topic:IPAM: IP address management; This IP address management is not unique to the container, the traditional network such as DHCP is also a kind of ipam, to the container era we talk about
plugin's orchestration file, DNSMASQ specifies upstream as Kubedns through the parameter--server=127.0.0.1:10053.
Exechealthz
A health check function is provided in the Kube-dns plugin.
The source code is also in the contrib warehouse, located in the Exec-healthz directory.
The new version of the two containers will be a health check, more perfect.
Iv. kubernetes Network Open source components
1. Technical terminology
IPAMIP address management; This IP address management i
Bridge Bridge
f5d11bed22a2 none null
18642f53648f host Host
Let's take a closer look at the details of the three networks:The name is network, and the user can define it arbitrarily.IDs are network internal UUID, globally unique.Scope currently has two values "local", "remote", indicating whether it is a native network or a multiple-machine network.Driver refers to the name of network driver.Ipam is the driver name and configuration inf
concepts:
Router (Router)A tenant corresponds to a router, connected to the same router bridge network. Midonet will create a privierrouter, all tenants router connected to the Privierrouter and extranet. Equivalent to a router intranet interoperability, connect the superior router access to the public network.
Bridge (Bridge)A tenant can have multiple bridges, each with a different network segment. For example, a bridge network segment 192.168.0.0/24 can have up to 253 virtual devices
container network has a double-hung pattern. A CNM architecture led and developed by Docker, and another CNI architecture led by Google, Kubernetes and CoreOS. Two of the hills, the remaining warlords choose their own, I will specifically to talk about these two options.
Technical terminology
Before I start the following topic I'll do a few technical terms to explain:
IPAM:IP address management; This IP address management is not unique to the container, the traditional network such as DHCP
Failed to create Calico network using Docker.# docker network create --driver calico --ipam-driver calico-ipam testcalicoError response from daemon: failed to update store for object type *libnetwork.endpointCnt: client: response is invalid json. The endpoint is probably not valid etcd cluster endpoint.To view Docker logs:# Journalctl-fu Docker--Logs begin at Sun 2018-05-06 10:42:10 CST. -- May10:51:11 gpu1
In a Microsoft environment, tools for unified management of IP addresses (deploying Microsoft virtualization Hyper-V) are recommended to useManaging Microsoft DHCP and DNSand AD Domain integrationDo not need to deploy agentsIpam FeaturesIpam DiscoveryWith the adds environment, Windows Server 2008 and aboveDHCP and DNS servicesIpam address SpaceDHCP address space Check, managementMulti-server management and monitoringManage across multiple serversOperational audits and IP address trackingDHCP Lea
docker run -- log-oPt) max-size # Set the size of a single log file, when this value is reached, log scrolling is performed. Max-file # Number of log files retained. netwo Rk_mode # specify the network mode (equivalent to docker run -- net, which is ignored when swarm is used for deployment) networks # Add containers to a specified network (equivalent to docker network connect ), networks can be located in aliases, the top-level key of the compose file, and the second-level key of the Services
environment. The state (DSC) that is required to configure multiple new features in Windows PowerShell is also described in this topic. A preview of the new Windows Server technology in the network. This problem allows you to discover new network technology information such as network controller and Generic Routing encapsulation (GRE) tunneling, and new features of existing technologies, including IP address management (IPAM), Dns,dhcp.
mainly implemented by tunneling and routing, one is to packet the basic network protocol, and the other is to configure more complex routing configuration to realize the network communication among the containers across the host. In fact, the above two more or less will give us the implementation of the network to bring complexity and loss of performance, because when we have a large business cluster, these complexity and performance loss can not be ignored. The plugin principle is as follows :
In many cases within the enterprise, you will encounter the following events:
1. Need to track the use of the overall IP address space;
2. Need to be urgently aware of which address is idle for quick allocation to a new device or a DNS SRV record;
3. When the address range of the DHCP server is exhausted, it is expected to have an emergency address space;
4. If you change some of the parameter options on the DHCP server (such as proxy server), I hope to be able to apply it to all servers as
network card, IP, routing, etc., we have to manually specify
This chapter information most reference official website: https://docker.github.io/engine/userguide/networking/#/the-default-bridge-network-in-detailYou can also refer to some examples in this chapter, most of which are also from the network, as follows:
One, specify the network bridgeI. 1.1 Creating a Network Bridge
[Root@linuxea ~]# Docker Network Create linuxea.comaf4526e387772f33b053ff2ab47e601ddf9618bc2d444770775723d76d3a1010[
private network, it is expected to be improved and more powerful in later versions.Four, the application container IP fixed (reference online information)The convenience of Docker 1.9 to support Contiv Netplugin,contiv is that users can access it directly from the instance IP.The Docker 1.10 version supports the designation of IP boot containers, and it is necessary to study the design of the container IP fixed scheme because some database applications have a need for instance IP pinning.In the
:/va R/lib/mysql-v/data/docker_project/db_mysql/conf:/etc/mysql/conf.d-e mysql_root_password=qwe123--network= Wordpress_net--ip=172.18.0.2 mysql:5.7
da497e56bd4b0f3434dd4f81534096574d167354dc508b657ceb390ba8e63771
docker:error response from Daemon:user specified IP address are supported only if connecting to networks with User Configured subnets.
Prompted an error, to configure IP, you need to assign a subnet to the network. So get a new network.
Docker Network create--driver bridge
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.