μ‹€μŠ΅ ν™˜κ²½ ꡬ성

Untitled

<aside> πŸ‘‰πŸ» μ‹€μŠ΅ ν™˜κ²½μ€ K8S v1.23.4 , λ…Έλ“œ OS(Ubuntu 20.04.3) , CNI(Calico v3.21.4, Direct mode) , IPTABLES proxy mode , Istio v1.13.2(Envoy v1.21.2)

</aside>

# 배포
curl -O <https://raw.githubusercontent.com/gasida/KANS/main/8/Vagrantfile>
vagrant up
vagrant status
vagrant ssh k8s-m

0. μ†Œκ°œ

κΈ€ λͺ©μ  : Istio λ₯Ό ν†΅ν•œ μΈλ°”μš΄λ“œ/μ•„μ›ƒλ°”μš΄λ“œ 톡신을 μƒμ„Ένžˆ μ•Œμ•„λ³΄μž

Istio 톡신 : 호슀트의 tcp/ip 와 iptables κ³Ό νŒŒλ“œ 내에 iptables 와 envoy λ₯Ό 경유

https://cilium.io/blog/2021/12/01/cilium-service-mesh-beta

https://cilium.io/blog/2021/12/01/cilium-service-mesh-beta

https://isovalent.com/blog/post/2021-12-08-ebpf-servicemesh

https://isovalent.com/blog/post/2021-12-08-ebpf-servicemesh

μ™ΈλΆ€ ν΄λΌμ΄μ–ΈνŠΈ PCμ—μ„œ K8S νŒŒλ“œ(μ›Ήμ„œλ²„)둜 접속 κ³Όμ •

istio-gasida.png

1.1 ν΄λΌμ΄μ–ΈνŠΈ(μš”μ²­) β†’ νŒŒλ“œ(μΈμž…)

νŠΈλž˜ν”½ 흐름

Untitled

νŒŒλ“œ λ‚΄ IPTables 적용 흐름 : μ•„λž˜ (1) ~ (8) κΉŒμ§€μ˜ 과정을 λ¨Όμ € μ„€λͺ…ν•©λ‹ˆλ‹€.

https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/

https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/