一个IP包的旅行 —— K8s 网络之 Calico 浅度解构
· ☕ 6 åˆ†é’Ÿ
前言 学习 Kubernetes 就像玩动作游戏,当我高高兴兴地打败了一关的 BOSS 后总以为是大结局了,谁知道后面还有更大的BOSS 出现。 当我以为学习完容器化、Linux

Java 容器化的历史坑(史坑) - 资源限制篇
· ☕ 5 åˆ†é’Ÿ
由来 时间回到 2017 年,老东家要上 Kubernetes 了,有幸参与和学习(主要是学习)。当时遇到的一了所有 Java 容器化者都遇到的坑:JDK8 不为容器化设计综合症。最简单

记一次 Istio 冲刺调优
· ☕ 5 åˆ†é’Ÿ
为何要调优 如果说,引入一个技术需要兴趣和冲劲,那么,让这个技术上线需要的是坚持和执着。 Cloud Native 如是, Istio 如是。 在上线前的性能测试中,Istio 的使

你的 Istio Mesh 性能及格吗?
· ☕ 4 åˆ†é’Ÿ
前言 话说,一年前项目响应时代的号召,引入了 Istio,从此如刘备得卧龙、凤雏,走上了 Service Mesh 的光辉大道。现到准备益州之战(上线)之时。上线前,还

Benchmark Tools
· ☕ 1 åˆ†é’Ÿ
CPU Benchmark The SysBench system benchmark suite has a simple CPU benchmark tool that calculates prime numbers. For example: # sysbench --num-threads=8 --test=cpu --cpu-max-prime=100000 run sysbench 0.4.12: multi-threaded system evaluation benchmark Running the test with following options: Number of threads: 8 Doing CPU performance benchmark Threads started! Done. Maximum prime number checked in CPU test: 100000 Test execution summary: total time: 30.4125s total number of events: 10000 total time taken by event execution: 243.

ipvs load balancer
· ☕ 1 åˆ†é’Ÿ
IPVS as load balancer https://medium.com/@benmeier_/a-quick-minimal-ipvs-load-balancer-demo-d5cc42d0deb4 Get stats $ sudo ipvsadm -L -n --stats --rate IP Virtual Server version 1.2.1 (size=4096) Prot LocalAddress:Port Conns InPkts OutPkts InBytes OutBytes -> RemoteAddress:Port TCP 1.2.3.4:80 80 560 400 36000 41040 -> 172.17.0.3:80 22 154 110 9900 11286 -> 172.17.0.4:80 58 406 290 26100 29754 Ref. https://medium.com/@benmeier_/a-quick-minimal-ipvs-load-balancer-demo-d5cc42d0deb4 https://debugged.it/blog/ipvs-the-linux-load-balancer/

kube-proxy
· ☕ 1 åˆ†é’Ÿ
Ref. Evolution_of_kube_proxy.pdf https://arthurchiao.art/blog/cracking-k8s-node-proxy/

tty
· ☕ 3 åˆ†é’Ÿ
Jobs SIGHUP 默认动作:Terminate 可能动作:Terminate, Ignore, Function call 当检测到 hangup 时,UART 驱动会向整个 session 发送 SIGHUP 信号。 正常情况下,这会 kill 掉所有

Awesome load test tools
· ☕ 1 åˆ†é’Ÿ
k6 https://github.com/k6io/k6 Locust https://docs.locust.io/en/stable/what-is-locust.html gatling https://gatling.io/docs/current/http/http_request/ artillery https://artillery.io/docs/guides/overview/welcome.html wrk https://github.com/wg/wrk

Netfilter and IPTable and conntrack
· ☕ 1 åˆ†é’Ÿ
Tables↓/Chains→ PREROUTING INPUT FORWARD OUTPUT POSTROUTING (routing decision) ✓ raw ✓ ✓ (connection tracking enabled) ✓ ✓ mangle ✓ ✓ ✓ ✓ ✓ nat (DNAT) ✓ ✓ (routing decision) ✓ ✓ filter ✓ ✓ ✓ security ✓ ✓ ✓ nat (SNAT) ✓ ✓ Incoming packets destined for the local system: PREROUTING -> INPUT Incoming packets destined to another host: PREROUTING -> FORWARD -> POSTROUTING Locally generated packets: OUTPUT -> POSTROUTING Connection Tracking https://arthurchiao.

TCP State
· ☕ 1 åˆ†é’Ÿ
Ref. https://www.ibm.com/docs/en/zos/2.1.0?topic=SSLTBW_2.1.0/com.ibm.zos.v2r1.halu101/constatus.htm