calico在kubernetes中的策略

前期环境试验

在上一遍文章中《kubernetes与calico整合》，搭建了基于calico的kubernetes集群，以下将对于这个环境进行测试，没有对calico进行任何策略配置，即使用的默认策略。

在以上环境中的default namespace中，部署了busybox pod应用，用于测试。
在kube-system namespace中部署了skydns与kube-ui。

分别获取此三个pod的ip地址

获取busybox ip 为192.168.0.0: kubectl describe po busybox |grep IP
获取 skydns的IP192.168.0.64:kubectl describe po kube-dns-v9-irhqq --namespace=kube-system|grep IP
获取 kube-ui的IP192.168.0.128:kubectl describe po kube-ui-v5-0n55s --namespace=kube-system|grep IP

测试busybox分别到skydns、kube-ui的网络

core@calico-01 ~ $ kubectl exec busybox -- ping -c 4 192.168.0.64PING 192.168.0.64 (192.168.0.64): 56 data bytes64 bytes from 192.168.0.64: seq=0 ttl=62 time=2.334 ms64 bytes from 192.168.0.64: seq=1 ttl=62 time=6.759 ms64 bytes from 192.168.0.64: seq=2 ttl=62 time=2.921 ms64 bytes from 192.168.0.64: seq=3 ttl=62 time=5.477 ms--- 192.168.0.64 ping statistics ---4 packets transmitted, 4 packets received, 0% packet lossround-trip min/avg/max = 2.334/4.372/6.759 mscore@calico-01 ~ $ kubectl exec busybox -- ping -c 4 192.168.0.128PING 192.168.0.128 (192.168.0.128): 56 data bytes64 bytes from 192.168.0.128: seq=0 ttl=62 time=7.918 ms64 bytes from 192.168.0.128: seq=1 ttl=62 time=0.986 ms64 bytes from 192.168.0.128: seq=2 ttl=62 time=0.839 ms64 bytes from 192.168.0.128: seq=3 ttl=62 time=7.101 ms--- 192.168.0.128 ping statistics ---4 packets transmitted, 4 packets received, 0% packet lossround-trip min/avg/max = 0.839/4.211/7.918 ms

以上测试结果表明任意pod间网络为互通的

测试任意VM到容器的网络

在master上ping任意容器

core@calico-01 ~ $ ping -c 2 192.168.0.0PING 192.168.0.0 (192.168.0.0) 56(84) bytes of data.64 bytes from 192.168.0.0: icmp_seq=1 ttl=63 time=1.62 ms64 bytes from 192.168.0.0: icmp_seq=2 ttl=63 time=2.50 ms--- 192.168.0.0 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1001msrtt min/avg/max/mdev = 1.624/2.062/2.500/0.438 mscore@calico-01 ~ $ ping -c 2 192.168.0.64PING 192.168.0.64 (192.168.0.64) 56(84) bytes of data.64 bytes from 192.168.0.64: icmp_seq=1 ttl=64 time=0.045 ms64 bytes from 192.168.0.64: icmp_seq=2 ttl=64 time=0.048 ms--- 192.168.0.64 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1000msrtt min/avg/max/mdev = 0.045/0.046/0.048/0.007 mscore@calico-01 ~ $ ping -c 2 192.168.0.128PING 192.168.0.128 (192.168.0.128) 56(84) bytes of data.64 bytes from 192.168.0.128: icmp_seq=1 ttl=63 time=4.04 ms64 bytes from 192.168.0.128: icmp_seq=2 ttl=63 time=2.52 ms--- 192.168.0.128 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1001msrtt min/avg/max/mdev = 2.525/3.283/4.041/0.758 ms

经过以上两项测试可以看出，默认情况下calico的网络与flannel网络一致，宿主机到容器，容器之间网络都相通。