百度智能云

All Product Document

          Cloud Container Engine

          Create VPC-CNI Mode Cluster

          VPC-CNI Mode Description

          VPC-CNI mode is an extended network mode supported by CCE, cloud platform container engine. Based on cloud platform's elastic network card product, it can assign IP address in VPC to Pod in cluster. cloud platform VPC function is responsible for routing and connectivity of container network. It can realize that the control surface and data surface of Pod and node are completely at the same network level. In this mode, Pod can reuse all product features of VPC.

          Once the VPC-CNI cluster is created, it cannot be modified. Please make a network plan in advance.

          Due to the limitation of VPC-CNI mode, it is recommended that you consider whether to adapt your business scenario in advance.

          VPC-CNI Mode Application Scenarios

          The cluster with VPC-CNI mode has the following advantages:

          1.The original VPC network performance of cloud platform.

          2.Integrate the product features of cloud platform VPC, for example, you can bind a separate security group to Pod to achieve packet filtering.

          VPC-CNI Mode Instructions

          1.VPC-CNI mode supports node distribution in different zones and subnets.

          2.The current VPC-CNI mode only supports Pod and node in the same subnet.

          3.In the current VPC-CNI mode, Pod and Node are bound to the same security group.

          4.In the current VPC-CNI mode, only one elastic network card is bound to each node, and the maximum number of auxiliary IP is pre-allocated to Pod.

          5.The operating system images supported by the current VPC-CNI mode include centos 67 and ubuntu 16.04, and ubuntu 18.04 is not supported.

          6.In the current VPC-CNI mode, the maximum Pod number of each node is determined by the node memory, and the corresponding relationship is shown in the table below.

          Node memory Maximum pod
          1G 5
          2-8G 11
          12-32G 19
          Greater than 32G 23

          Method to Create VPC-CNI Mode Cluster Method

          1.Enter the create cluster page.

          2.Select CNI Plug in in the Container Network Mode option, as shown in the following figure:

          3.The rest of the creation steps are the same as the common cluster.

          4.If the prompt "ENI quota is insufficient, CNI plug-in cannot be used" appears during the creation process, indicating that the remaining quota of elastic network card in the current VPC is not enough to be allocated to each node, please submit a ticket to apply for increasing the quota of elastic network card in a single VPC.

          Previous
          Use NetworkPolicy in CCE Cluster
          Next
          How to Continue to Expand Capacity When the Container Network Segment Space is Exhausted