calico 网络流量 过程 分析

Posted 2021-01-16 hixiaowei

1.calico node 容器在kubernetes中以DaemonSet 的方式运行，容器的网络模式为hostNetwor，与host共享网络栈，拥有相同的Ip和hostname

 

2.查看某个pod：[[email protected] ~]# kubectl get pods -o wide -n kube-system |grep -i tiller

tiller-deploy-5dfffddb8d-n4vp6  1/1        Running  0   3d   10.233.122.4     bserver42

 

3.查看某个pod的网卡和ip

先用calicoctl查看容器A的workloadEndpoint：          --workload=<namespace>.<podname>   

[[email protected] ~]# calicoctl get workloadendpoint --workload=kube-system.tiller-deploy-5dfffddb8d-n4vp6 -o yaml
- apiVersion: v1
kind: workloadEndpoint
node: bserver42
workload: kube-system.tiller-deploy-5dfffddb8d-n4vp6
spec:
interfaceName: cali2185315f9c4
ipNetworks:
- 10.233.122.4/32
mac: 52:fe:19:e7:5b:14

calico 网络架构：