Calico v3.24 Documentation
首页 白天 夜间 下载 阅读记录
  • 书签 我的书签
  • 添加书签 添加书签 移除书签 移除书签
编辑文档

Network design

来源 1 浏览 218 扫码 打印 2023-02-25 09:12:46

    Network design

    📄️ Calico over Ethernet fabricsUnderstand the interconnect fabric options in a Calico network.

    上一篇:
    下一篇:
    • 书签
    • 添加书签 移除书签
    • About
      • About Kubernetes Ingress
      • About eBPF
      • About Kubernetes Services
      • About Kubernetes Networking
      • About Network Policy
      • About Kubernetes egress
    • Security
      • Policy for hosts
        • Apply policy to forwarded traffic
        • Protect hosts
        • Protect Kubernetes nodes
        • Protect hosts tutorial
      • Get started with policy
        • Kubernetes policy
          • Kubernetes policy, demo
          • Get started with Kubernetes network policy
          • Kubernetes policy, advanced tutorial
          • Kubernetes policy, basic tutorial
        • Enable default deny for Kubernetes pods
        • Calico policy
          • Get started with Calico network policy
          • Calico policy tutorial
          • Get started with Calico network policy for OpenStack
      • Policy for services
        • Apply Calico policy to services exposed externally as cluster IPs
        • Apply Calico policy to Kubernetes node ports
      • Secure Calico component communications
        • Configure encryption and authentication to secure Calico components
        • Secure Calico Prometheus endpoints
        • Schedule Typha for scaling to well-known nodes
        • Secure BGP sessions
      • Encrypt in-cluster pod traffic
      • Policy rules
        • Use service rules in policy
        • Basic rules
        • Use namespace rules in policy
        • Use external IPs or networks rules in policy
        • Use ICMP/ping rules in policy
        • Use service accounts rules in policy
      • Policy for Istio
        • Enforce network policy for Istio
        • Enforce Calico network policy using Istio (tutorial)
        • Use HTTP methods and paths in policy rules
      • Run Calico node as non-privileged and non-root
      • Adopt a zero trust network model for security
      • Policy for extreme traffic
        • Defend against DoS attacks
        • Enable extreme high-connection workloads
    • Release notes
    • Reference
      • Host endpoints
        • Connection tracking
        • Failsafe rules
        • Selector-based policies
        • Host endpoints
        • Creating policy for basic connectivity
        • Pre-DNAT policy
        • Apply on forwarded traffic
        • Creating host endpoint objects
        • Summary
      • Typha
        • Configuring Typha
        • Typha overview
        • Prometheus statistics
      • Calico Kubernetes controllers
        • Configuring the Calico Kubernetes controllers
        • Prometheus statistics
      • Felix
        • Configuring Felix
        • Prometheus statistics
      • Getting involved
      • VPP dataplane
        • Primary interface configuration
        • VPP dataplane implementation details
        • Host network configuration
      • Configuration on public clouds
        • Google Compute Engine
        • Amazon Web Services
        • IBM Cloud
        • Azure
      • Calico API
      • Configure the Calico CNI plugins
      • Architecture
        • Network design
          • Calico over Ethernet fabrics
        • Component architecture
        • ‘The Calico data path: IP routing and iptables’
      • Installation API
      • Resource definitions
        • Host endpoint
        • Workload endpoint
        • Kubernetes controllers configuration
        • Profile
        • Calico node status
        • Block affinity
        • IP pool
        • BGP peer
        • Global network policy
        • Node
        • Global network set
        • Resource definitions
        • Network policy
        • IPAM configuration
        • Felix configuration
        • Network set
        • BGP configuration
        • IP reservation
      • Configuring etcd RBAC
        • Creating users and roles
        • Calico key and path prefixes
        • Generating certificates
        • Segmenting etcd on Kubernetes (advanced)
        • Setting up etcd certificates for RBAC
        • Segmenting etcd on Kubernetes (basic)
      • Attributions
        • CNI plugin attributions
        • confd attributions
        • calicoctl attributions
        • Application layer policy attributions
        • calico/node attributions
        • Typha attributions
        • Felix attributions
      • Frequently asked questions
      • Configuring calico/node
      • calicoctl
        • calicoctl delete
        • calicoctl patch
        • node
          • calicoctl node diags
          • calicoctl node run
          • calicoctl node checksystem
          • calicoctl node
          • calicoctl node status
        • calicoctl apply
        • calicoctl version
        • calicoctl label
        • calicoctl replace
        • datastore
          • migrate
            • calicoctl datastore migrate lock
            • calicoctl datastore migrate unlock
            • calicoctl datastore migrate import
            • calicoctl datastore migrate
            • calicoctl datastore migrate export
          • calicoctl datastore
        • calicoctl user reference
        • calicoctl create
        • calicoctl get
        • calicoctl convert
        • ipam
          • calicoctl ipam
          • calicoctl ipam
          • calicoctl ipam check
          • calicoctl ipam
          • calicoctl ipam
    • Install Calico
      • Kubernetes
        • OpenShift
          • Install an OpenShift 4 cluster with Calico
          • System requirements
        • Self-managed public cloud
          • Self-managed Kubernetes in Microsoft Azure
          • Self-managed Kubernetes in Google Compute Engine (GCE)
          • Self-managed Kubernetes in Amazon Web Services (AWS)
          • Self-managed Kubernetes in DigitalOcean (DO)
        • Install using Helm
        • System requirements
        • K3s
          • Quickstart for Calico on K3s
          • K3s multi-node install
        • Quickstart for Calico on Kubernetes
        • Quickstart for Calico on MicroK8s
        • Calico for Windows
          • Start and stop Calico for Windows services
          • Limitations and known issues
          • Basic policy demo
          • Kubernetes
            • Install Calico for Windows on a Rancher Kubernetes Engine cluster
            • Install Calico for Windows
            • Requirements
          • Create kubeconfig for Windows nodes
          • Troubleshoot Calico for Windows
          • Install an OpenShift 4 cluster on Windows nodes
          • Quickstart
        • Calico the hard way
          • Istio integration
          • Calico the hard way
          • Install CNI plugin
          • End user RBAC
          • Test networking
          • Install calico/node
          • Configure BGP peering
          • Stand up Kubernetes
          • The Calico datastore
          • Test network policy
          • Configure IP pools
          • Install Typha
        • Managed public cloud
          • Google Kubernetes Engine (GKE)
          • Amazon Elastic Kubernetes Service (EKS)
          • IBM Cloud Kubernetes Service (IKS)
          • Microsoft Azure Kubernetes Service (AKS)
        • Quickstart for Calico on minikube
        • Flannel
          • Install Calico for policy and flannel (aka Canal) for networking
          • Migrate a Kubernetes cluster from flannel/Canal to Calico
        • Install Calico on a Rancher Kubernetes Engine cluster
        • Self-managed on-premises
          • Install Calico networking and network policy for on-premises deployments
          • Customize Calico configuration
        • VPP dataplane
          • Get started with VPP networking
          • IPsec configuration with VPP
          • Details of VPP implementation & known-issues
      • OpenStack
        • System requirements
        • Installation
          • DevStack
          • Verify your deployment
          • Ubuntu
          • Calico on OpenStack
          • Red Hat Enterprise Linux
        • Calico for OpenStack
      • Non-cluster hosts
        • Installation
          • Docker container install
          • Binary install without package manager
          • Binary install with package manager
        • About non-cluster hosts
        • System requirements
    • Networking
      • Configure networking
        • Advertise Kubernetes service IP addresses
        • Accelerate Istio network performance
        • Overlay networking
        • Use a specific MAC address for a pod
        • Configure outgoing NAT
        • Configure BGP peering
        • Use IPVS kube-proxy
        • Configure MTU to maximize network performance
      • Determine best networking option
      • Customize IP address management
        • Restrict a pod to use an IP address in a specific range
        • Migrate from one IP pool to another
        • Configure IP autodetection
        • Use a specific IP address with a pod
        • Configure dual stack or IPv6 only
        • Configure Kubernetes control plane to operate over IPv6
        • Add a floating IP to a pod
        • Change IP pool block size
        • Assign IP addresses based on topology
        • Get started with IP address management
      • Calico networking for OpenStack
        • Detailed semantics
        • Endpoint labels and operator policy
        • Calico’s interpretation of Neutron API calls
        • Service IPs
        • Set up a development machine
        • Floating IPs
        • Host routes
        • Kuryr
        • Prepare a VM guest OS for IPv6
        • IP addressing and connectivity
        • Configure systems for use with Calico
        • Multiple regions
    • Operations
      • Monitor
        • Visualizing metrics via Grafana
        • Monitor Calico component metrics
      • Troubleshoot
        • Troubleshooting commands
        • VPP dataplane troubleshooting
        • Component logs
        • Troubleshooting and diagnostics
      • Upgrade
        • Upgrade Calico on Kubernetes
        • Upgrade Calico on OpenStack
        • Upgrade Calico on OpenShift 4
      • Migrate Calico data from an etcdv3 datastore to a Kubernetes datastore
      • Decommission a node
      • calicoctl
        • Install calicoctl
        • Configure calicoctl
          • Configure calicoctl to connect to the Kubernetes API datastore
          • Configure calicoctl to connect to an etcd datastore
          • Configure calicoctl
      • eBPF
        • Troubleshoot eBPF mode
        • Enable the eBPF dataplane
        • eBPF use cases
        • Install in eBPF mode
      • Enable kubectl to manage Calico APIs
      • Migrate Calico to an operator-managed installation
      • Deploy image options
        • Configure use of your image registry
        • Install images by registry digest
      • Manage TLS certificates used by Calico
    暂无相关搜索结果！

      本文档使用 全库网 构建

      展开/收起文章目录

      思维导图备注

      文章二维码

      手机扫一扫，轻松掌上读

      文档下载

      请下载您需要的格式的文档，随时随地，享受汲取知识的乐趣！
      PDF文档 EPUB文档 MOBI文档

      书签列表

        阅读记录

        阅读进度: 0.00% ( 0/0 ) 重置阅读进度