Pod IP, ClusterIP noma isilinganisi somthwalo sangaphakathi sabasebenzisi be-VPN
I-Pod IP ingahamba nge-VPN kuze kube yilapho i-Pod ishintshwa. Qhathanisa ukufinyelela okuqondile ku-Pod, i-ClusterIP kanye nesilinganisi sangaphakathi, nokuthi ngakunye kubiza ini kuwe.
Nge-VPC CNI, i-Pod ingaba nekheli elivela ku-VPC, futhi umsebenzisi we-VPN onomzila ofanele angayifinyelela ngqo. Lokho kwenza ukufinyelela okuqondile ku-Pod kubonakale kuyisinqumo esilula kakhulu, futhi kunjalo, kuze kube yilapho i-Pod ishintshwa. Ikheli umsebenzisi alikhumbulayo kufanele libe lelohlelo lokusebenza, hhayi lemfanekiso. Ukuqhathanisa izingenelelo ezintathu kugcina kukho ukuthi iyiphi into ephethe ikheli nokuthi yini okufanele iqhubeke isebenza lapho umthwalo womsebenzi uhamba.
Khetha kuqala ngomjikelezo wempilo, bese kuba ngokuthi inethiwekhi kufanele yenzani ukuze isingenelo sifinyeleleke.
Izingenelelo ezintathu, imijikelezo emithathu yempilo
I-Pod IP iphethwe yi-Pod: yabelwa kanye nayo futhi ikhululwa lapho iphela. I-ClusterIP iphethwe i-Service futhi ingeyokuzenzela, inencazelo kuphela lapho umzila wezinsizakalo weqembu ukhona. Isilinganisi somthwalo sangaphakathi siphethwe insiza yefu elenziwa uhlelo yisilawuli seqembu ngezingemuva. Lezi zinhlobo zobunikazi zibikezela ukwehluleka ozokuthola: ikheli eliphelelwe yisikhathi, igama elingafinyeleleki, noma iqoqo lezingemuva eliphelelwe yisikhathi.
Bhala ukuqhathanisa ngaphambi kokukhetha. Lapho umnikazi nokwehluleka sekushiwo, ukukhetha ngokuvamile kwenzeka ngokwakho.
| Entry | Owner | Failure when the workload moves |
|---|---|---|
| Pod IP | The Pod | Address changes and saved links break |
| ClusterIP | The Service | Virtual address with no meaning outside cluster routing |
| Internal balancer | Cloud resource plus controller | Backends update, but the DNS view is yours to maintain |
Ukufinyelela okuqondile ku-Pod: kuyasiza, kuyisikhashana
Ukufinyelela okuqondile kuyasiza ngempela ekuhloleni okulawulwayo: umlawuli oyedwa, isikhathi esifushane esisodwa, imbobo ethile eyodwa. Kodwa kuyisivumelwano esibi kubasebenzisi, ngoba ikheli liyimininingwane yokusebenza eshintsha ekukhipheni ngakunye. Futhi ukulibhala ku-wiki yindlela insizakalo esebenzayo eba yindaba nje.
Kubuye kumeme imithetho ebanzi. Imvume yokuthi umlawuli oyedwa afinyelele i-Pod eyodwa akuyona imvume yakho konke ukheli kusubneti yenodi, futhi ngokuvamile okwesibili yikho okubhalwayo.
ClusterIP: ikhawulelwe eqenjini ngokomklamo
I-ClusterIP iyasebenza ngoba indawo yedatha yeqembu ihlela umzila wayo ngaphakathi kweqembu. Kusuka kukhompyutha ephathekayo ku-VPN ikheli alisho lutho ngaphandle uma okuthile kuyidalula ngamabomu. Igama eliphela ngo-svc.cluster.local lingelase-DNS yeqembu, ngakho ukulikopisha kuklayenti enesixazululi esihlukile kuveza igama elingekho esikhundleni sephutha lomzila.
I-ClusterIP ihlala iyisingenelo esifanele sababiza ngaphakathi kweqembu, kufaka phakathi eminye imithwalo yomsebenzi. Ayisiyo nje indlela yokushicilela yabasebenzisi abangaphandle kwesizinda somzila weqembu.
Isilinganisi somthwalo sangaphakathi: indlela eshicilelwe
Isilinganisi somthwalo sangaphakathi sikunikeza ikheli elizimele eliyimfihlo kanye negama isifunda sakho esingakhomba kulo, kuyilapho isilawuli sigcina iqoqo lezingemuva lisesikhathini, njengoba umhlahlandlela we-EKS wokulinganisa umthwalo uchaza. Yilokho ukungena okusinda ekushintsheni kwe-Pod okuvamile ngaphandle kokuthi othile ahlele idokhumenti. Kubiza insiza yefu, ukucushwa kwesilawuli nomzila ovela ku-VPN, futhi yizo lezo zingxenye abantu abazibukela phansi.
Sebenzisa imodeli yesilawuli eqembu eliyisebenzisayo ngempela. Izichasiselo ezibhalelwe ukuhlanganiswa okukodwa azisebenzi kokunye.
Ngubani ikheli lomthombo
Amaqembu okuphepha abona umthombo ofika emngceleni wawo, futhi lowo kungaba iklayenti elixhunyiwe noma ikheli elihunyushwe kuye ngomzila we-VPN nokulinganisa umthwalo. Kumanodi asekelwe ku-EC2, ama-Pod ajwayelekile e-VPC CNI azuza amaqembu e-ENI yenodi ngokuzenzakalela, kuyilapho ukucushwa okusekelwayo kungasekunamathisela amaqembu aqondene ne-Pod. Bhala imithetho yomzila obhaliwe, hhayi yekheli lekhompyutha ephathekayo eliqagelwayo.
Gcina isilaleli nokuqinisekisa kohlelo lokusebenza njengezilawuli ezihlukene. Umthetho wenethiwekhi ovumela ukugeleza awusona isinqumo sokugunyaza futhi akufanele uthathwe njengaso.
Yini okufanele inikezwe abasebenzisi
Nikeza abasebenzisi igama lensizakalo, hhayi ikheli. Shicilela igama esifundeni esiyimfihlo, likhomba esingenelweni sangaphakathi, bese uhlola ngokushintsha i-Pod yangemuva ngenkathi iklayenti ligcina igama elifanayo livuliwe. Lowo msebenzi uhlola isici esibalulekile: ukufinyelela uhlelo lokusebenza olufanayo ngemuva kokukhishwa okuvamile.
Gcina ukufinyelela okuqondile ku-Pod njengokuhlukile kwezokusebenza okubhaliwe okunobubanzi baso, kude nemiyalelo yabasebenzisi.