heidsoft
heidsoft
k8s 网络问题
# 网桥开启参数 ``` net.bridge.bridge-nf-call-arptables = 0 net.bridge.bridge-nf-call-ip6tables = 0 net.bridge.bridge-nf-call-iptables = 0 net.bridge.bridge-nf-filter-pppoe-tagged = 0 net.bridge.bridge-nf-filter-vlan-tagged = 0 net.bridge.bridge-nf-pass-vlan-input-dev = 0 ``` # 参考资料 https://www.lijiaocn.com/%E9%A1%B9%E7%9B%AE/2017/04/11/calico-usage.html#%E7%BB%84%E7%BD%91%E5%8E%9F%E7%90%86 https://docs.projectcalico.org/v3.5/usage/configuration/ip-in-ip https://www.lijiaocn.com/%E9%A1%B9%E7%9B%AE/2017/04/11/calico-usage.html#%E7%BB%84%E7%BD%91%E5%8E%9F%E7%90%86 https://serverfault.com/questions/909736/kubernetes-relation-between-service-ips-and-pod-ips https://kubernetes.io/docs/concepts/cluster-administration/networking/#the-kubernetes-network-model
- http://arthurchiao.art/blog/conntrack-design-and-implementation-zh/#%E6%91%98%E8%A6%81 - https://help.aliyun.com/document_detail/154095.html - https://www.kernel.org/doc/Documentation/networking/nf_conntrack-sysctl.txt?spm=a2c4g.11186623.2.7.6319736eJKnegD&file=nf_conntrack-sysctl.txt 问题描述 连接ECS实例中的应用时偶尔出现丢包现象。经排查，ECS实例的外围网络正常，但内核日志（dmesg）中存在“kernel: nf_conntrack: table full, dropping packet”的错误信息。存在此问题的ECS实例符合如下条件。 镜像：aliyun-2.1903-x64-20G-alibase-20190327.vhd及之后的所有镜像版本。 内核：kernel-4.19.24-9.al7及以后的所有内核版本。 问题原因 nf_conntrack是Linux系统内NAT的一个跟踪连接条目的模块。nf_conntrack模块会使用一个哈希表记录TCP协议“established connection”记录，当这个哈希表满之后，新的连接会引发“nf_conntrack: table full, dropping packet”错误。关于nf_conntrack模块中的重要参数，可参考如下信息。 nf_conntrack_buckets：哈希表的大小，可在模块加载时指定参数，也可以通过sysctl命令修改。当系统内存大于等于4GB时，它的默认值是“65536”。 nf_conntrack_max：哈希表的最大节点个数，即nf_conntrack模块支持的最大连接数。当系统内存大于等于4G时，它的默认值是“262144”。对于处理大量连接的服务器来说，该默认值相对较小。 nf_conntrack_tcp_timeout_time_wait：nf_conntrack模块中保存time_wait状态的TCP连接时间，默认值为“120s”。 解决方案 阿里云提醒您： 如果您对实例或数据有修改、变更等风险操作，务必注意实例的容灾、容错能力，确保数据安全。 如果您对实例（包括但不限于ECS、RDS）等进行配置与数据修改，建议提前创建快照或开启RDS日志备份等功能。 如果您在阿里云平台授权或者提交过登录账号、密码等安全信息，建议您及时修改。...
mysql 优化
- https://www.kancloud.cn/thinkphp/mysql-design-optimalize/39319 - https://www.percona.com/blog/how-mysql-queries-and-questions-are-measured/ - https://stackoverflow.com/questions/5814218/difference-between-questions-and-query # mysql 表字段获取 ``` mysql> SELECT t1.COLUMN_NAME AS "列名称", t2.DATA_TYPE AS "数据类型" FROM INFORMATION_SCHEMA.STATISTICS t1 LEFT JOIN INFORMATION_SCHEMA.COLUMNS t2 ON t1.COLUMN_NAME = t2.COLUMN_NAME AND...
# 1stio - 介绍https://preliminary.istio.io/latest/zh/docs/setup/getting-started ``` apiVersion: v1 kind: Pod metadata: annotations: cni.projectcalico.org/podIP: 10.233.109.24/32 cni.projectcalico.org/podIPs: 10.233.109.24/32 kubectl.kubernetes.io/default-container: reviews kubectl.kubernetes.io/default-logs-container: reviews prometheus.io/path: /stats/prometheus prometheus.io/port: "15020" prometheus.io/scrape: "true" sidecar.istio.io/status: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert"],"imagePullSecrets":null}' creationTimestamp: "2021-06-01T08:49:29Z" generateName:...
- sudo apt-get install bpfcc-tools python3-bpfcc libbpfcc - http://www.brendangregg.com/blog/2019-01-01/learn-ebpf-tracing.html ``` root@heidsoft-dev:~# sudo apt-get install bpfcc-tools python3-bpfcc libbpfcc Reading package lists... Done Building dependency tree Reading state information... Done The following...
# bpg 介绍 - https://arthurchiao.art/blog/bgp-in-data-center-zh/#chap_2 - https://www.juniper.net/documentation/zh_Hans/junos/topics/topic-map/bgp-overview.html#id-understanding-bgp - https://zhuanlan.zhihu.com/p/150251677 - https://docs.opendaylight.org/projects/bgpcep/en/latest/bgp/bgp-user-guide-bgp-peering.html - https://www.juniper.net/documentation/zh_Hans/junos/topics/topic-map/bgp-peering-sessions.html - https://docs.projectcalico.org/networking/bgp#disable-the-default-bgp-node-to-node-mesh - https://www.cnblogs.com/netonline/p/9720279.html
# 形式与政策 > 1.不忘初心，牢记使命 > 2.2020国内大师盘点 > 3.2020年国内经济形式总体概括 > 4.2021年经济形式展望 > 5.美国种族歧视根深蒂固 > 6.英国正式脱离欧盟影响深远 > 7.朝韩关系突变恶化 > 8.美伊冲突持续升级 > 9.中国特色大国外交开拓新局面 > a.中美关系：守正不移，把握正确方向 > b.中殴关系：合作迎来发展新契机 > c.中俄关系：相互支持，守望相助 > d.中非关系：合作发展，龙象共舞
### 使用 [How to Write Rules for Prometheus](https://petargitnik.github.io/blog/2018/01/04/how-to-write-rules-for-prometheus) [How To Monitor Linux Servers Using Prometheus Node Exporter](https://devopscube.com/monitor-linux-servers-prometheus-node-exporter/) [Monitoring your Linux Servers with Prometheus and Grafana in 7 Minutes](https://blogs.microsoft.co.il/leonj/2018/09/13/monitoring-your-linux-servers-with-prometheus-and-grafana-in-7-minutes/) [How to...
# 刷新reload配置 > https://yunlzheng.gitbook.io/prometheus-book/parti-prometheus-ji-chu/alert/prometheus-alert-rule https://awesome-prometheus-alerts.grep.to/rules.html https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/ https://alex.dzyoba.com/blog/prometheus-alerts/ https://gist.github.com/devops-school/98d7eed1a9df6c372c45452730791f7a https://www.metricfire.com/blog/top-5-prometheus-alertmanager-gotchas/ https://www.weave.works/blog/labels-in-prometheus-alerts-think-twice-before-using-them https://yunlzheng.gitbook.io/prometheus-book/parti-prometheus-ji-chu/alert/prometheus-alert-rule https://softwareadept.xyz/2018/01/how-to-write-rules-for-prometheus/ https://blog.networktocode.com/post/prometheus_alerting/ https://www.devopsschool.com/blog/recording-rules-and-alerting-rules-exmplained-in-prometheus/ https://blog.csdn.net/shida_csdn/article/details/81980021 https://gitlab.cern.ch/paas-tools/monitoring/prometheus-webhook-receiver/-/tree/master https://superuser.com/questions/443406/how-can-i-produce-high-cpu-load-on-a-linux-server https://yunlzheng.gitbook.io/prometheus-book/parti-prometheus-ji-chu/alert/alert-manager-config https://www.jianshu.com/p/fd0b018539cd https://help.aliyun.com/document_detail/123117.html?utm_content=g_1000230851&spm=5176.20966629.toubu.3.f2991ddcpxxvD1#h2-alertmanagers88 https://github.com/prometheus/alertmanager/blob/master/api/v2/openapi.yaml https://github.com/gin-gonic/gin#quick-start https://www.programmersought.com/article/50413971111/ https://songjiayang.gitbooks.io/prometheus/content/configuration/rule_files.html ``` [root@localhost prometheus-2.19.1.linux-amd64]# curl -v -X...
> https://www.hi-linux.com/posts/6132.html > https://www.serf.io/intro/index.html > https://cloud.tencent.com/developer/article/1696081 > https://www.consul.io/docs/architecture > https://learn.hashicorp.com/tutorials/consul/federation-gossip-wan > https://learn.hashicorp.com/tutorials/consul/reference-architecture > https://zhuanlan.zhihu.com/p/41228196