zoukankan      html  css  js  c++  java
  • 原创-阿里云上SLB暴露K8S服务-四层协议/七层协议

    注意:在阿里的k8s中使用SLB,当服务(pod)发生漂移后,slb后端也会动态修改,此时会有瞬间的5xx错误,同时注意会覆盖原先手动配置的配置。因此给K8S提供SLB时最好使用全新的SLB。

    ---四层协议yaml文件---

    apiVersion: v1

    kind: Service

    metadata:

     annotations:

       service.beta.kubernetes.io/alicloud-loadbalancer-id: "你的SLB实例ID"

       service.beta.kubernetes.io/alicloud-loadbalancer-address-type: intranet

       service.beta.kubernetes.io/alicloud-loadbalancer-force-override-listeners: "true"

     name: xlvip-api-grpc-slb

     namespace: xlvip

    spec:

     externalTrafficPolicy: Local

     ports:

     - name: grpc

       port: 50051

       protocol: TCP

       targetPort: 50051

     selector:

       xlvip-app: xlvip-api-grpc

     sessionAffinity: None

     type: LoadBalancer

    ---七层协议yaml文件---

    apiVersion: v1
    kind: Service
    metadata:
    annotations:
    service.beta.kubernetes.io/alicloud-loadbalancer-cert-id: 你的域名证书id
    service.beta.kubernetes.io/alicloud-loadbalancer-force-override-listeners: "true"
    service.beta.kubernetes.io/alicloud-loadbalancer-health-check-flag: "on"
    service.beta.kubernetes.io/alicloud-loadbalancer-health-check-interval: "10"
    service.beta.kubernetes.io/alicloud-loadbalancer-health-check-timeout: "5"
    service.beta.kubernetes.io/alicloud-loadbalancer-health-check-type: http
    service.beta.kubernetes.io/alicloud-loadbalancer-health-check-uri: /healthz
    service.beta.kubernetes.io/alicloud-loadbalancer-healthy-threshold: "2"
    service.beta.kubernetes.io/alicloud-loadbalancer-id: 你的SLB实例ID
    service.beta.kubernetes.io/alicloud-loadbalancer-protocol-port: https:443,http:80
    service.beta.kubernetes.io/alicloud-loadbalancer-unhealthy-threshold: "3"
    labels:
    app: nginx-ingress-lb
    name: nginx-ingress-xshare-lb
    namespace: xlsdk
    spec:
    externalTrafficPolicy: Local
    ports:
    - name: http
    port: 80
    protocol: TCP
    targetPort: 80
    - name: https
    port: 443
    protocol: TCP
    targetPort: 80
    selector:
    app: ingress-nginx
    sessionAffinity: None
    type: LoadBalancer

  • 相关阅读:
    SrsDataConnector The SQL Server Reporting Services account is a local user and is not supported.
    Marketing with Microsoft Dynamics CRM IDEA CONFERENCE
    Discuz!X 系列 HTTP_X_FORWARDED_FOR 绕过限制进行密码爆破
    PHPCMS v9.5.6 通杀getshell(前台)
    PHPCMS v9.5.8-设计缺陷可重置前台任意用户密码
    PHPCMS v9.6.0 任意用户密码重置
    PHPCMS V9 任意文件下载(Windows)
    Joomla!3.7.0 Core SQL注入漏洞动态调试草稿
    利用FOFA搜索WatchGuard防火墙
    如何删除Windows休眠文件(hiberfil.sys)
  • 原文地址:https://www.cnblogs.com/normanlin/p/13755213.html
Copyright © 2011-2022 走看看