Cloud Native Computing Foundation KubeCon + CloudNativeCon China 2018 (Shanghai), 21 Apr 2021

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Network QoS Support for Kubernetes Applications - Jun Du, Huawei

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Network QoS Support for Kubernetes Applications - Jun Du, Huawei

Traffic shaping is one of the important aspects in network QoS and it's widely used in many scenarios where you want to control traffic. In Kubernetes, traffic shaping for applications will happen if bandwidth-related annotations have been added to the Pod's metadata. However, currently only kubenet supports applying basic traffic shaping during pod setup while kubelet doesn't support it when it runs in CNI network driver. As kubenet will be deprecated in the future, we need to make up for the missing part. This presentation will show our implementation that adds a simple CNI plugin using the linux tc to create an ingress(include burst) and egress(include burst) rate limiters. We have already contributed the CNI plugin to CNI community and the integration work with Kubernetes leading by Kubernetes SIG Network is in progress.

To learn more click here: https://sched.co/FuK0

A

Okay, I started my presentation. Thank you for being here same day, I will be the last speaker for our breakout and now I see that there are a lot of people here and I. Think thank.

B

You for telling my presentation and I think this much better than my last.

A

Conference and I have about 13 carats Messiah during that session.

A

And we'll talk about key buyers.

C

A

I will talk about things related at the Cuban arrays applications.

A

Communities networking.

C

A

An point I'm, a single mother, single I'm here for the pod I know it without an activity we can implement it and it's called two.

C

D

A

You write a plug-in as long as I have this two functionalities. You can call it a Cuban are a SERP lucky. If you have a sender standard, you can call the Cuban at assessing I plus.

B

Say that mano is.

A

Now the senior Iraqi dr. Bailey has two functionalities.

B

A

Is how the Cuban are assessing I tell you, so they find the traitor politic and.

B

D

Don't seem to care enough, it has two big interfaces or anything either they said I am.

A

D

With a dog shame: animal trainer, we.

A

Can create a trainer.

D

A

The equation of this container and it can.

A

Initialize, the namespace with a route pattern.

C

A

Is pretty divisive.

A

A

Plug-In, which was a bridge network? The regime is responsible for the network. That is just a neutralizer and.

B

Generate the imaging.

A

And it can travel a key address for the distribution that IP address. It can't be done by the local plug-in. So when it's done.

A

Anything existed so the.

D

A

Can be done but for the pata pata note to note that connected a no return so.

C

Must have a friend of character, overlay.

A

And underlay all this Vegas three layers with this can create a channel for the capsulation to implement a connectivity among them pause and those.

C

A

Just mention this enjoy.

C

Making this simply it.

A

Can be standard of Linux and in our network it substandard I must be a status. A file I try to describe such a wittiness in nine. It is two types of interfaces. One is to try to the network. What is it add another list within this interface, there are two parameters: one is L configured as a run, 10 path. You want elita-1 god and will call the play now that work.

A

A

A

Why do I need to have a different support.

C

B

They don't want to improve their performance scale, but they hope that their performance can reach the similar network performance as the local applications and also we have the multi-tenant environment and they don't wanna compete for the same environment. It was their noisy neighborhood and for the cloud providers they need a bridge as their different tenants or application.

C

B

Avoid the competence for sources.

B

We have lots of the real-time traffic and streaming the video out there streaming. So we have lots of bandwidth. Maybe this will surpass the traffic that could be covered by the mod so how to handle the network. Flood is very important and also they were charged with different queues levels for queue. Minutes. When I wish your support for the Cuba, the Cuban s has become the default standards for the orchestration container.

C

B

Will better support for video and video streams and IOT scenarios, and these are very sensitive to the bandwidth. We can offer better support the Cuban s scheduler.

B

The pod performance.

C

B

Resources will compete with each other, so they all have isolates deployment and if their scheduling mr. chase not bad. So especially then from the network level, they can still finish destination. So Cuban nuttiest can finish more in terms of the QoS and duration and in Cuban artists. Cuban s is very commercial.

C

B

1.11 kuranes.

B

Has become the Cuban artists, Network Akira nineties, well-defined IP I depart network or have single passenger IP to deploy and to implement a 1.11 before they chemical, the Cuba net.

C

B

Results of communication with a different nozzle- you don't have the right policy, so this will be deleted, but they have the bandwidth control capability and they should have the power comparability and if they just scrapped all this functions, how to deploy all these functions.

C

B

Needa faster, I before I introduce this part: let's have a look, has a basic network implementation Super's? What is the management level they define to define the policy and forward policy so far different networks? It will have the harmonization, work or coordination or to identify it and mark the different packets packets to mark whether this is high level or low.

C

B

Specific gateway away than the Gateway work having to technically need queuing, the packets need to cute or scheduling they have lots of kids to kill the packets and to ship the traffic to manage the traffic later I will introduce to you the difference between shaping and management of traffic. These are very typical implementations of cures. I.

C

B

Mentioned the techniques so, first of all, its relates to the congestion control.

B

C

B

10Kb and if in one second that comes into a 20 KB, he needs to control the congestion and to have the priority for the congestion or to have different.

C

Characterization.

B

Of four of the priorities.

C

B

Terms of queue management, the high priority queue and the low priority care. If they have 300, then how to prioritize to scrap them, so they will scrub the low priority first. So the queue management relates to several issues. First of all, they will have the algorithm to make sure every queue has at least some magazine make the cure very congested and they will make the low priority package very congested first.

B

So the third part is efficiency.

C

B

Audio streaming, a hundred of em B management's, maybe a white this one hundred and B go through gateway. The control bytes goes later.

C

B

In Linux, the normal order like this, they were separate, for example, separates this a hundred and B in 200, small Packers.

C

Intricate Hawkeye.

B

Kiss will go out first and then comes the traffic shaping and policy management. What's.

C

The difference the.

B

Traffic shaping refers to the occasion.

C

B

For the air to cash or to store contemporary relates to several algorithms, we use a token arcades.

B

Instance will limit the bandwidth.

C

B

This will make an inter carrier.

C

B

It will need a package like.

C

B

Back you to drink water.

B

C

Instance, one second one. Second, we have.

B

Ten tokens available.

A

B

Time when we have one toke available, wasn't one right out.

C

B

Another service and or flow management. We have lots of applications, but one significant problem is first for.

C

B

Average traffic.

B

The former image we don't have any packet, the last minute, maybe with her first so average.

C

B

Last minute, maybe all have 20 per seconds.

B

So bursts will happen in the second.

D

B

Sure that you are all familiar are clear about this.

C

B

We can use Linux TC for managing this. The network flow control, TC.

C

B

C

B

Is assembled tour TC is a kind of talk.

C

B

Also has lots of these subnets and the performance is very strong, she's, a composers of four systems. One is identification package on different networks. The Packers will have identification and market and in the Gateway we have a filter. If you can match this packet with a guitar.

C

B

Need to go through the process or you can send it to the gateway.

B

Or transit management first, for example, this.

C

B

Not smart: this will go through statutory system. Lots of erase this packet will access to zero interface. This will go into the sub-q or, if h0 or go into the D.

B

C

Is the person and after enter.

B

This QE Oh detail nice to shipping when we have the ready token than this all logic. You.

C

B

This for subsystems, the packets will into the gateway, or it will leave.

C

B

Tc is responsible for sending knowledge receiving.

C

B

You send this out, then this will go through this for subnet.

B

For example, if we roll define.

B

We know TC can be used on one gateway, but its usage is to the next blow-dart my direction, for example, if they want to.

B

The destination of one, seven, two point: seven by seven points their perform do come on. Thank you, I'm cueing management to control and then further words.

B

In the default.

B

Aftercoma we have 0.

C

B

Then default from the second line, this is well be restricted to have a kind of rates time and be telling me. I will use this protocol.

C

B

Control the traffic to counter they correspond, the IP, the IP parent, is one.

C

B

Then to match the IP address.

B

To this destination s, the maximum.

C

B

10 MB per second on average, very fast.

B

Manage or finish management so in the Kuban X, if we want to control the traffic, he said, I need to finish some work, the the back net.

C

B

B

C

B

Token bucket TV.

C

B

Limits but he says only responsible for Sunday, so we have a smart uses. The internal.

B

If we want to limit literature to beat each one two three flow back with, how can we do? We can add, point intermediate gateway which is IP and this gateway can receive and sent flow, so we can use eight to send, which is the ingress of the ETH one two three. This is a smart trick.

C

The config list.

B

Mechanical plugging should be accelerated with with each other for event, with control the others or be responsible for the AIP assignments, how to use them this document, if you're familiar with this, you all know, this is a config.

C

B

Use a to describe the gateway which is mine at the plugins list,.

B

Which is the bridge network? The.

D

Ip address assignment.

B

From the host local node to that.

C

B

These are the types and the supplies.

C

B

Note a note: B will have their assignments, so we have the this for the harmonization of differential.

B

This is the bandwidth, the bandwidth, control plugin and the name is slow down.

C

B

Slow down the flow and the ingress rate, the ingress rate is one two three randomly assigned and we have the bit the bit per second, the burst the maximum ingress is four five, six, the token AIDS. If the flow before is very slow, maybe nature a progressive. So we need to slow down egress route.

B

You can go down the burst to low and the average flow.

C

B

You have this plug-in list and to assign the eyepiece the gateway and the downward bandwidth at the average.

B

So in this thing, I love all we can manage this in cuba nuts. How should we do.

B

We can use the pollination.

B

Or have the say, I am Cuban and network drivers, for example, musician I driver.

C

B

Can assign the bandwidth in the red part? We have the Ebers, the egress is 1m and it was is also 1. M.

C

B

Of the network plugins do not have the traffic management capability, so they say, I plug-in shall be put into the opt CI being.

C

B

The cubanelle to read this account log and at a proper time this will call the binary and the file indicate.

C

B

Then we can put the above-mentioned part into it here to activate to the bandwidth.

C

B

Then, from the management to data, you can activate all this and the batwave can be active.

C

B

Have a look how this flow again: this is the Cuba notes, API server, the.

C

B

We have a driver.

C

B

Great, the fire will have our API cause, the IEP and.

C

B

Well, go into the same I'm talking for the mentees and then to analyze the fate, the value and then to transmit this valuable.

C

B

The in this note they will have the TC your disk is. The present is a filter so till now this will be valid.

C

B

Is Cuban as the version 1.1 how to use it.

C

B

You did not use this before. Maybe it's challenging for you to accept this.

C

B

You can go to the official website for more details, but now we are still making the preliminary version. You can have a look at ApS. They.

C

Have ingress bite bars own anguish,.

B

Later version wall support for first and the convicts will be migrated. I.

B

Work for the upstream, so we will continue to contribute to the development. Let's have a look at the demo. I'm, not sure whether the internet works.

B

Can you see this.

D

D

D

B

This is a demo show for flow management.

B

This is a par file. I can open this, for you.

B

This is default without limits for the back ways we can create this. This is the iperf server and.

B

So we can have, we can enter this part.

C

B

You can find this IP address.

C

B

Pampas is a 30 KB per second.

B

Only the reconfig of rent, and so we can establish the another.

D

B

C

B

We don't define, restrict this, then you can see here. This is the default backward.

B

This is my job.

D

C

For the deities.

B

The IP address.

B

One: seventy two point: one seven point: zero point.

D

C

B

Is the body about 1.23.

B

The uplink and the darling access went, but bandwidth an average is about 10. So this is madam OH. Any other questions.

B

B

While your Putin network in the annotation for a definition, I think this is very strange, for example, CPU and memory.

C

B

Network resource is not that emphasizing qnet T's, so we don't have the scheduling for the network resource the annotation I. Don't define this cuban artists community defined this far as if on map stages, if we can make a stable well gradually migrate. This into the stack.

B

Thank you, I've noticed your config of a TC is done in the container in the host in the host bandwidth also down in the host. Yes, so for each container the thing I linked, you need to faking one gateway, a new gate, but, yes, you mean the trigger the intermediate, the es, the intermediate gateway so from the container to San i0. You all together have four gateways, yes for gateways for gateways by default, flannel cause bridge and we have a V spire for the sea and I.

C

B

Ero is wine, the BTC is not an intermediate.

B

Any other questions, if you have any questions you can contact me, the community I'm sure that you know me I am the IBPS. Also thank you.