百度智能云

All Product Document

          Cloud Container Engine

          CCE Best Practice-Container Network Mode Selection

          The CCE currently provides VPC network and VPC-CNI network modes. The two models have their own characteristics. You can select a suitable container network model to adapt to the requirements of business development.

          VPC Network

          The VPC network mode uses the original network plan of kubernetes kubenet to coordinate the high speed network of Baidu AI Cloud VPC. This can provide the clusters with a high-performance and stable container network experience, and supports few characteristics. In the VPC network mode, Pod and Node in the cluster are within two network segments and interconnected by the VPC route. One typical VPC network mode cluster network topology is as shown in the figure below:

          To create a cluster of VPC network mode, please refer to Description and Planning of CCE Cluster Network .

          For the practice of accessing the public network by the cluster of VPC network model, please refer to CCE-Accessing Public Network .

          VPC-CNI

          VPC-CNI mode is an extended network mode supported by CCE, Baidu cloud container engine. Based on Baidu cloud's elastic network card product, it can assign IP address in VPC to Pod in cluster. Baidu cloud VPC function is responsible for routing and connectivity of container network. It can realize that the control surface and data surface of Pod and node are completely at the same network level. In this mode, Pod can reuse all product features of Baidu cloud VPC. In the VPC-CNI mode, Pod and Node in the cluster are within the same segment. But due to the limits of the secondary IPs of elastic network card, the number of Pods which can be created on the single Node is small. One typical VPC-CNI mode cluster network topology is as shown in the figure below:

          To create a cluster of VPC-CNI mode, please refer to Create VPC-CNI Mode Cluster.

          For the practice of accessing the public network by the cluster of VPC-CNI mode, please refer to Practice of Accessing the Public Network by the Cluster of VPC-CNI Mode .

          Comparison of the Two Modes

          Pattern Performance Number of Pods of a single node Same network segment of Pod and Node Public network access mode Whether EIP can be bound to Pod
          VPC network Higher More No EIP/SNAT subnet No
          VPC-CNI high Less Yes EIP/SNAT subnet Yes
          Previous
          Practice of Accessing the Public Network by the Cluster of VPC-CNI Mode
          Next
          CCE Cluster Uses Jenkins to Continuously Release