NS-T-加持K8s-OCP构建企业级容器网络.pptxVIP

NSX-T加持K8sOCP构建

企业级容器网络

基础架构演进带来的挑战NetworkSecurityApplicationsStorageComputeDigitalTransformationConvergenceEthernetandIPFirewallsandACLsMainframe/MidrangeDAS/SAN/NASMainframe/MidrangeClientServerCloudDeliveryClientServerWeb-based/3-TierCloudNative/ContainerizedMoreFirewallsandACLsVirtualizedFirewallsandControlsHyperConvergedInfrastructureVirtualizationWave1:WorkloadConsolidationVirtualizationWave2:WorkloadMobility2

4Source:“ContainerInfrastructureMarketAssessment:BridgingLegacyandCloud-NativeArchitectures—x86SoftwareContainersForecast,2017–2021”IDC,2018.(IDU高复合增长的应用趋势201899%CAGR2021385Minstalledcontainersworldwide1,814Minstalledcontainersworldwide

5NetworkingSecurity44%44%采用云原生面临的主要挑战TopchallengesRouterFirewallLoadBalancerSource:CloudNativeComputingFoundationBlog.June28,2017cf.io/blog/2017/06/28/survey-shows-kubernetes-leading-orchestration-platform/0% 5%10% 15% 20% 25% 30% 35% 40% 45% 50%FindingvendorsupportOtherReliabilityLoggingDifficultychoosinganorchestrationsolutionComplexityStorage9%10%23%25%28%39%48%

容器网络的演进PortMappingContainerNetworkInterface(CNI)ServiceMeshManagingportmappingsischallengingandnotusedinproductionbyenterprisesProvidesauniqueIPaddresspercontainerSidecarproxy(e.g.,Envoy)containerperappenablesLayer7trafficmanagementandsecurityusecasesvSwitchHostIPAPort8001HostIPAPort8002vSwitchContainerNetENENvSwitchENENvSwitchContainerNetvSwitch

容器网络的现状CNCFOpensource取材来自/containernetworking/cni6取材来自cf.io/community/webinars/cloud-native-networking/

开源容器网络方案的常规组合Calico+FlannelOverlayFlannel仅解决容器跨节点的二层网络通讯，三层通讯依赖IPTable以及外侧三层设备每个容器工作节点都需运行，以及其封装模式影响节点性能网络与Namespace无关（租户）需要外部KV数据库，无法同时集成多个K8S集群Calico需要在每个容器工作节点中运行，并以BGP路由器的形式与物理路由设备建立BGP邻居大量的BGP连接时，需考虑部署BGP反射器，增加部署难度接入层交换机需要支持BGP协议，增加基础架构成本网络与Namespace无关（租户）7

End-to-end,Troubleshooting,Configuration,MetricsUnified Separatetools容器网络理应是:简单、轻量级、可移植