面向Kubernetes的高性能网络方案研究

Research on High-Performance Network Solutions for Kubernetes

针对容器编排引擎Kubernetes缺乏官方的、统一的网络解决方案,以及各种第三方网络插件在网络性能及网络配置管理方面的局限性,提出一种新型Kubernetes网络方案——基于CNI的网络插件N-Net。首先,提出一种新型网络插件架构,将Kubernetes与Neutron、Keystone有机结合,保障Kubernetes集群的网络通信;其次,创新性的提出一种深度定制Pod网络的方法,能够根据业务场景需求实现对Pod的IP地址静态分配;最后,对Neutron的底层网络结构进行优化,提高Kubernetes集群网络性能。实验结果表明,在网络功能方面,N-Net可以为Kubernetes集群网络提供支持。在网络性能方面,N-Net与Flannel、Kuryr两种网络方案相比,TCP吞吐量在同宿主机情况下分别提升了1.44倍和1.69倍,跨宿主机情况下分别提升了1.43倍和1.63倍;网络延迟在同宿主机的情况分别下降了23%、29%,跨宿主机的情况下分别下降了22%、28%。

In view of the lack of official and unified network solutions for the container orchestration engine Kubernetes,as well as the limitations of various third-party network plugins in network performance and network configuration management,propose a new Kubernetes network so⁃lution--the CNI-based network plugin N-Net.First,a new network plugin architecture is proposed,which organically combines Kuber⁃netes with Neutron and Keystone to ensure the network communication of the Kubernetes cluster;secondly,an innovative method for deep customization of the Pod network is proposed,which can realize static allocation of Pod IP addresses according to the needs of business sce⁃narios;Finally,optimize the underlying network structure of Neutron to improve the performance of the Kubernetes cluster network.Experi⁃mental results show that in terms of network functions,N-Net can provide support for Kubernetes cluster networks.In terms of network per⁃formance,compared with the Flannel and Kuryr network solutions,N-Net has increased TCP throughput by 1.44 times and 1.69 times in the case of the same host,and 1.43 times and 1.62 times in the case of cross-hosts;Network latency dropped by 23%and 29%in the case of the same host,and dropped by 22%and 28%in the case of cross-hosts.