flannel实战

原创
2018/08/15 16:28
阅读数 656

        docker swarm mode的出现是个里程碑,官方原生的编排调度看起来都成雏形了,但是swarm mode和容器外部系统的对接、网络性能始终不尽人意,swarm mode下各种开源周边不能使用,感觉swarm mode自成一个体系,网络方面上篇调研了calico,本篇调研一下flannel,总体感觉大家都是在向K8S靠拢,docker原生这也是凉凉嘛.....

软件信息

软件 版本
OS Ubuntu 16.04.3 LTS
Docker 18.03.0-ce
Etcd 3.3.9
Flannel 0.10.0

主机信息

ubuntu16.04-1

172.31.68.241 workload-A docker、etcd、flannel
ubuntu16.04-2 172.31.68.242 workload-B docker、flannel
ubuntu16.04-3 172.31.68.243 workload-C docker、flannel

工作目录

    /opt/programs:各种软件的下载均在该目录下

docker安装

    下载

wget 'https://download.docker.com/linux/ubuntu/dists/xenial/pool/stable/amd64/docker-ce_18.03.0~ce-0~ubuntu_amd64.deb'

    安装

dpkg -i docker-ce_18.03.0~ce-0~ubuntu_amd64.deb

    配置

        /etc/docker/daemon.json    

{
  "registry-mirrors": ["http://aa2fd190.m.daocloud.io"],
  "insecure-registries":["http://172.31.68.241"],
  "dns": ["202.96.209.5","202.96.209.133"],
  "experimental": true
}

    启动

systemctl daemon-reload
systemctl restart docker.service

   启动脚本

        /lib/systemd/system/docker.service

[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target docker.socket firewalld.service
Wants=network-online.target
Requires=docker.socket

[Service]
Type=notify
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock 
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=1048576
LimitNPROC=infinity
LimitCORE=infinity
TasksMax=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s

[Install]
WantedBy=multi-user.target

    注意:以上步骤在三台机器都需要执行

etcd安装

    下载

wget 'https://github-production-release-asset-2e65be.s3.amazonaws.com/11225014/7c787e4c-8f2b-11e8-8a29-4db755239b18?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20180813%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180813T090430Z&X-Amz-Expires=300&X-Amz-Signature=dc354d85304b135c99c4d0b606fa07bd75eaaa2fd46b19d43554d9112a4d83d8&X-Amz-SignedHeaders=host&actor_id=12913767&response-content-disposition=attachment%3B%20filename%3Detcd-v3.3.9-linux-amd64.tar.gz&response-content-type=application%2Foctet-stream'

    安装

tar zxvf etcd-v3.3.9-linux-amd64.tar.gz
mv etcd-v3.3.9-linux-amd64 etcd_3.3.9

    配置启动脚本

        /etc/systemd/system/etcd.service

[Unit]
Description=etcd
Documentation=https://github.com/coreos/etcd

[Service]
Type=notify
Restart=always
RestartSec=5s
LimitNOFILE=40000
TimeoutStartSec=0 

ExecStart=/opt/programs/etcd_3.3.9/etcd --name ubuntu16.04-1 \
   --data-dir /var/lib/etcd \
   --listen-client-urls http://172.31.68.241:2379 \
   --listen-peer-urls http://172.31.68.241:2380 \
   --advertise-client-urls http://172.31.68.241:2379 \
   --initial-advertise-peer-urls http://172.31.68.241:2380

[Install]
WantedBy=multi-user.target

    启动

systemctl daemon-reload
systemctl start etcd.service

    验证

etcdctl --endpoints http://172.31.68.241:2379  cluster-health

    注意:以上操作只需要在ubuntu16.04-1上执行

flannel安装

    下载

wget 'https://github-production-release-asset-2e65be.s3.amazonaws.com/21704134/596e76e2-002c-11e8-9359-36689058e7af?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20180815%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180815T052949Z&X-Amz-Expires=300&X-Amz-Signature=5b4fda3ddd09110a2a9d17cd65d1af2adef7a608888fc95a2692623768b2daad&X-Amz-SignedHeaders=host&actor_id=12913767&response-content-disposition=attachment%3B%20filename%3Dflannel-v0.10.0-linux-amd64.tar.gz&response-content-type=application%2Foctet-stream'

    安装

mkdir /opt/programs/flannel_0.10.0
tar zxvf flannel-v0.10.0-linux-amd64.tar.gz -C /opt/programs/flannel_0.10.0

    etcd配置网段

etcdctl --endpoints http://172.31.68.241:2379 set /flannel/network/config '{"Network":"192.168.0.0/16","Backend":{"Type":"vxlan"}}'

    启动flannel

flanneld -etcd-endpoints=http://172.31.68.241:2379 -ip-masq=true -etcd-prefix=/flannel/network

    配置启动脚本

        /lib/systemd/system/flannel.service

[Unit]
Description=coreos flannel
Documentation=https://my.oschina.net/guol/blog/1928408
After=docker.service


[Service]
TimeoutSec=0
ExecStart=/opt/programs/flannel_0.10.0/flanneld -etcd-endpoints=http://172.31.68.241:2379 -ip-masq=true -etcd-prefix=/flannel/network
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=1048576
LimitNPROC=infinity
LimitCORE=infinity
TasksMax=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s
 

[Install]
WantedBy=multi-user.target

    生产docker配置

mk-docker-opts.sh

        ps:生成的文件在/run/docker_opts.env

    调整docker参数

        /lib/systemd/system/docker.service

[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target docker.socket firewalld.service
Wants=network-online.target
Requires=docker.socket

[Service]
Type=notify
EnvironmentFile=/run/docker_opts.env
ExecStart=/usr/bin/dockerd -H tcp://0.0.0.0:2375 -H unix:///var/run/docker.sock $DOCKER_OPTS
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=1048576
LimitNPROC=infinity
LimitCORE=infinity
TasksMax=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s

[Install]
WantedBy=multi-user.target

    重启docker

systemctl daemon-reload
systemctl start docker.service

    查看网卡

    注意:以上部署需要在三台机器上都执行,上例是以ubuntu16.04-1为例进行演示,"etcd配置网段"只需要执行一次即可

Etcd数据验证

etcdctl --endpoints http://172.31.68.241:2379 ls /flannel/network/subnets/

启动测试容器

    分别在三台机器上启动一个容器实例

docker run  --name workload-A -ti 172.31.68.241/library/xenial3
docker run  --name workload-B -ti 172.31.68.241/library/xenial3
docker run  --name workload-C -ti 172.31.68.241/library/xenial3

联通测试

    容器间通讯

        workload-A --> workload-C

    容器宿主机通讯

        workload-C  --> ubuntu16.04-1

    主机容器通讯

        ubuntu16.04-3 --> workload-B

 

 

展开阅读全文
加载中
点击引领话题📣 发布并加入讨论🔥
打赏
0 评论
0 收藏
0
分享
返回顶部
顶部