Replace multicast address with class E (#5051)

Ignoring unrelated broken link.

* Replace multicast address with class E

* address comments

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
This commit is contained in:
Zhonghu Xu 2019-09-27 21:34:05 +08:00 committed by Frank Budinsky
parent 7fe843b480
commit 37f3af18a2
3 changed files with 14 additions and 11 deletions

View File

@ -345,7 +345,7 @@ misordered
Mitigations Mitigations
MongoDB MongoDB
mongodb mongodb
multicast Multicast
Multicloud Multicloud
multicloud multicloud
Multicluster Multicluster

View File

@ -299,7 +299,7 @@ spec:
protocol: http protocol: http
resolution: DNS resolution: DNS
addresses: addresses:
- 224.0.0.3 - 240.0.0.3
endpoints: endpoints:
- address: ${CLUSTER2_GW_ADDR} - address: ${CLUSTER2_GW_ADDR}
labels: labels:
@ -326,9 +326,8 @@ spec:
EOF EOF
{{< /text >}} {{< /text >}}
The address `224.0.0.3` of the service entry can be any arbitrary unallocated IP. The address `240.0.0.3` of the service entry can be any arbitrary unallocated IP.
Note that loopback range `127.0.0.0/8` should not be used, as it will influence outbound traffic. Using an IP from the class E addresses range 240.0.0.0/4 is a good choice.
Using an IP from the multicast range 224.0.0.0/4 is a good choice.
Check out the Check out the
[gateway-connected multicluster example](/docs/setup/install/multicluster/gateways/#configure-the-example-services) [gateway-connected multicluster example](/docs/setup/install/multicluster/gateways/#configure-the-example-services)
for more details. for more details.

View File

@ -264,11 +264,15 @@ running in a second cluster. Before you begin:
{{< /tip >}} {{< /tip >}}
If the global services have actual VIPs, you can use those, but otherwise we suggest If the global services have actual VIPs, you can use those, but otherwise we suggest
using IPs from the multicast range `224.0.0.0/4` that are not already allocated. using IPs from the class E addresses range `240.0.0.0/4`.
These IPs are not loopback addresses and are non-routable outside of a pod.
Application traffic for these IPs will be captured by the sidecar and routed to the Application traffic for these IPs will be captured by the sidecar and routed to the
appropriate remote service. appropriate remote service.
{{< warning >}}
Multicast addresses (224.0.0.0 ~ 239.255.255.255) should not be used because there is no route to them by default.
Loopback addresses (127.0.0.0/8) should also not be used because traffic sent to them may be redirected to the sidecar inbound listener.
{{< /warning >}}
{{< text bash >}} {{< text bash >}}
$ kubectl apply --context=$CTX_CLUSTER1 -n foo -f - <<EOF $ kubectl apply --context=$CTX_CLUSTER1 -n foo -f - <<EOF
apiVersion: networking.istio.io/v1alpha3 apiVersion: networking.istio.io/v1alpha3
@ -292,7 +296,7 @@ running in a second cluster. Before you begin:
# must be unique for each remote service, within a given cluster. # must be unique for each remote service, within a given cluster.
# This address need not be routable. Traffic for this IP will be captured # This address need not be routable. Traffic for this IP will be captured
# by the sidecar and routed appropriately. # by the sidecar and routed appropriately.
- 224.0.0.2 - 240.0.0.2
endpoints: endpoints:
# This is the routable address of the ingress gateway in cluster2 that # This is the routable address of the ingress gateway in cluster2 that
# sits in front of sleep.foo service. Traffic from the sidecar will be # sits in front of sleep.foo service. Traffic from the sidecar will be
@ -363,7 +367,7 @@ spec:
protocol: http protocol: http
resolution: STATIC resolution: STATIC
addresses: addresses:
- 224.0.0.2 - 240.0.0.2
endpoints: endpoints:
- address: ${CLUSTER2_GW_ADDR} - address: ${CLUSTER2_GW_ADDR}
network: external network: external
@ -397,7 +401,7 @@ spec:
protocol: http protocol: http
resolution: DNS resolution: DNS
addresses: addresses:
- 224.0.0.2 - 240.0.0.2
endpoints: endpoints:
- address: ${CLUSTER2_GW_ADDR} - address: ${CLUSTER2_GW_ADDR}
network: external network: external
@ -457,7 +461,7 @@ spec:
addresses: addresses:
# the IP address to which httpbin.bar.global will resolve to # the IP address to which httpbin.bar.global will resolve to
# must be unique for each service. # must be unique for each service.
- 224.0.0.2 - 240.0.0.2
endpoints: endpoints:
- address: ${CLUSTER2_GW_ADDR} - address: ${CLUSTER2_GW_ADDR}
labels: labels: