Cilium各模式概览

1. tunnel模式

   helm install cilium cilium/cilium --version 1.9.9 \
       --namespace kube-system \
       --set tunnel=vxlan \
       --set kubeProxyReplacement=strict \
       --set ipam.mode=kubernetes \
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4MaskSize=26 \
       --set k8sServiceHost=apiserver.qiangyun.com \
       --set k8sServicePort=6443

2. 云厂商提供路由模式

   helm install cilium cilium/cilium --version 1.9.9 \
       --namespace kube-system \
       --set tunnel=disabled \
       --set kubeProxyReplacement=strict \
       --set nativeRoutingCIDR=172.21.0.0/20 \
       --set ipam.mode=kubernetes \
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4MaskSize=26 \
       --set k8sServiceHost=apiserver.qiangyun.com \
       --set k8sServicePort=6443

3. DSR模式

   helm install cilium cilium/cilium --version 1.9.9 \
       --namespace kube-system \
       --set tunnel=disabled \
       --set autoDirectNodeRoutes=true \
       --set kubeProxyReplacement=strict \
       --set loadBalancer.mode=dsr \
       --set nativeRoutingCIDR=172.21.0.0/20 \
       --set ipam.mode=kubernetes \
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4MaskSize=26 \
       --set k8sServiceHost=apiserver.qiangyun.com \
       --set k8sServicePort=6443

4. Hybrid模式

   helm install cilium cilium/cilium --version 1.9.9 \
       --namespace kube-system \
       --set tunnel=disabled \
       --set autoDirectNodeRoutes=true \
       --set kubeProxyReplacement=strict \
       --set loadBalancer.mode=hybrid \
       --set nativeRoutingCIDR=172.21.0.0/20 \
       --set ipam.mode=kubernetes \
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4MaskSize=26 \
       --set k8sServiceHost=apiserver.qiangyun.com \
       --set k8sServicePort=6443

5. XDP模式

   # XDP
   helm install cilium cilium/cilium --version 1.9.9 \
       --namespace kube-system \
       --set tunnel=disabled \
       --set autoDirectNodeRoutes=true \
       --set kubeProxyReplacement=strict \
       --set loadBalancer.acceleration=native \
       --set loadBalancer.mode=hybrid \
       --set nativeRoutingCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4MaskSize=26 \
       --set k8sServiceHost=api.qiangyun.com \
       --set k8sServicePort=6443

6. endpointRoutes模式

   # endpoint
   helm install cilium cilium/cilium --version 1.9.9 \
       --namespace kube-system \
       --set tunnel=disabled \
       --set endpointRoutes.enabled=true \
       --set bpf.hostRouting=true \
       --set kubeProxyReplacement=strict \
       --set loadBalancer.mode=hybrid \
       --set nativeRoutingCIDR=172.21.0.0/20 \
       --set ipam.mode=kubernetes \
       --set ipam.operator.clusterPoolIPv4PodCIDR=172.21.0.0/20 \
       --set ipam.operator.clusterPoolIPv4MaskSize=26 \
       --set k8sServiceHost=apiserver.qiangyun.com \
       --set k8sServicePort=6443

7. Hubble安装

   # hubble
   helm upgrade cilium cilium/cilium --version 1.9.9 \
      --namespace kube_system \
      --reuse-values \
      --set hubble.listenAddress=":4244" \
      --set hubble.relay.enabled=true \
      --set hubble.ui.enabled=true