Cilium各模式概览

1. tunnel模式

   helm install cilium cilium/cilium --version 1.9.9 
       --namespace kube-system 
       --set tunnel=vxlan 
       --set kubeProxyReplacement=strict 
       --set ipam.mode=kubernetes 
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4MaskSize=26 
       --set k8sServiceHost=apiserver.qiangyun.com 
       --set k8sServicePort=6443

2. 云厂商提供路由模式

   helm install cilium cilium/cilium --version 1.9.9 
       --namespace kube-system 
       --set tunnel=disabled 
       --set kubeProxyReplacement=strict 
       --set nativeRoutingCIDR=172.21.0.0/20 
       --set ipam.mode=kubernetes 
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4MaskSize=26 
       --set k8sServiceHost=apiserver.qiangyun.com 
       --set k8sServicePort=6443

3. DSR模式

   helm install cilium cilium/cilium --version 1.9.9 
       --namespace kube-system 
       --set tunnel=disabled 
       --set autoDirectNodeRoutes=true 
       --set kubeProxyReplacement=strict 
       --set loadBalancer.mode=dsr 
       --set nativeRoutingCIDR=172.21.0.0/20 
       --set ipam.mode=kubernetes 
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4MaskSize=26 
       --set k8sServiceHost=apiserver.qiangyun.com 
       --set k8sServicePort=6443

4. Hybrid模式

   helm install cilium cilium/cilium --version 1.9.9 
       --namespace kube-system 
       --set tunnel=disabled 
       --set autoDirectNodeRoutes=true 
       --set kubeProxyReplacement=strict 
       --set loadBalancer.mode=hybrid 
       --set nativeRoutingCIDR=172.21.0.0/20 
       --set ipam.mode=kubernetes 
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4MaskSize=26 
       --set k8sServiceHost=apiserver.qiangyun.com 
       --set k8sServicePort=6443

5. XDP模式

   # XDP
   helm install cilium cilium/cilium --version 1.9.9 
       --namespace kube-system 
       --set tunnel=disabled 
       --set autoDirectNodeRoutes=true 
       --set kubeProxyReplacement=strict 
       --set loadBalancer.acceleration=native 
       --set loadBalancer.mode=hybrid 
       --set nativeRoutingCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4MaskSize=26 
       --set k8sServiceHost=api.qiangyun.com 
       --set k8sServicePort=6443

6. endpointRoutes模式

   # endpoint
   helm install cilium cilium/cilium --version 1.9.9 
       --namespace kube-system 
       --set tunnel=disabled 
       --set endpointRoutes.enabled=true 
       --set bpf.hostRouting=true 
       --set kubeProxyReplacement=strict 
       --set loadBalancer.mode=hybrid 
       --set nativeRoutingCIDR=172.21.0.0/20 
       --set ipam.mode=kubernetes 
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 
       --set ipam.operator.clusterPoolIPv4MaskSize=26 
       --set k8sServiceHost=apiserver.qiangyun.com 
       --set k8sServicePort=6443

7. Hubble安装

   # hubble
   helm upgrade cilium cilium/cilium --version 1.9.9 
      --namespace kube_system 
      --reuse-values 
      --set hubble.listenAddress=":4244" 
      --set hubble.relay.enabled=true 
      --set hubble.ui.enabled=true