CCE Best Practice-Container Network Mode Selection
The CCE currently provides VPC network
and VPC-CNI
network modes. The two models have their own characteristics. You can select a suitable container network model to adapt to the requirements of business development.
VPC Network
The VPC network
mode uses the original network plan of kubernetes kubenet to coordinate the high speed network of Baidu AI Cloud VPC. This can provide the clusters with a high-performance and stable container network experience, and supports few characteristics.
In the VPC network
mode, Pod and Node in the cluster are within two network segments and interconnected by the VPC route. One typical VPC network
mode cluster network topology is as shown in the figure below:
To create a cluster of VPC network mode, please refer to Description and Planning of CCE Cluster Network .
For the practice of accessing the public network by the cluster of VPC network model, please refer to CCE-Accessing Public Network .
VPC-CNI
VPC-CNI
mode is an extended network mode supported by CCE, Baidu cloud container engine. Based on Baidu cloud's elastic network card product, it can assign IP address in VPC to Pod in cluster. Baidu cloud VPC function is responsible for routing and connectivity of container network. It can realize that the control surface and data surface of Pod and node are completely at the same network level. In this mode, Pod can reuse all product features of Baidu cloud VPC.
In the VPC-CNI
mode, Pod and Node in the cluster are within the same segment. But due to the limits of the secondary IPs of elastic network card, the number of Pods which can be created on the single Node is small. One typical VPC-CNI
mode cluster network topology is as shown in the figure below:
To create a cluster of VPC-CNI mode, please refer to Create VPC-CNI Mode Cluster.
For the practice of accessing the public network by the cluster of VPC-CNI mode, please refer to Practice of Accessing the Public Network by the Cluster of VPC-CNI Mode .
Comparison of the Two Modes
Pattern | Performance | Number of Pods of a single node | Same network segment of Pod and Node | Public network access mode | Whether EIP can be bound to Pod |
---|---|---|---|---|---|
VPC network | Higher | More | No | EIP/SNAT subnet | No |
VPC-CNI | high | Less | Yes | EIP/SNAT subnet | Yes |