mirror of https://github.com/istio/istio.io.git
Replace multicast address with class E (#5051)
Ignoring unrelated broken link. * Replace multicast address with class E * address comments * Update content/en/docs/setup/install/multicluster/gateways/index.md Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com> * Update content/en/docs/setup/install/multicluster/gateways/index.md Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com> * Update content/en/docs/setup/install/multicluster/gateways/index.md Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
This commit is contained in:
parent
7fe843b480
commit
37f3af18a2
|
@ -345,7 +345,7 @@ misordered
|
||||||
Mitigations
|
Mitigations
|
||||||
MongoDB
|
MongoDB
|
||||||
mongodb
|
mongodb
|
||||||
multicast
|
Multicast
|
||||||
Multicloud
|
Multicloud
|
||||||
multicloud
|
multicloud
|
||||||
Multicluster
|
Multicluster
|
||||||
|
|
|
@ -299,7 +299,7 @@ spec:
|
||||||
protocol: http
|
protocol: http
|
||||||
resolution: DNS
|
resolution: DNS
|
||||||
addresses:
|
addresses:
|
||||||
- 224.0.0.3
|
- 240.0.0.3
|
||||||
endpoints:
|
endpoints:
|
||||||
- address: ${CLUSTER2_GW_ADDR}
|
- address: ${CLUSTER2_GW_ADDR}
|
||||||
labels:
|
labels:
|
||||||
|
@ -326,9 +326,8 @@ spec:
|
||||||
EOF
|
EOF
|
||||||
{{< /text >}}
|
{{< /text >}}
|
||||||
|
|
||||||
The address `224.0.0.3` of the service entry can be any arbitrary unallocated IP.
|
The address `240.0.0.3` of the service entry can be any arbitrary unallocated IP.
|
||||||
Note that loopback range `127.0.0.0/8` should not be used, as it will influence outbound traffic.
|
Using an IP from the class E addresses range 240.0.0.0/4 is a good choice.
|
||||||
Using an IP from the multicast range 224.0.0.0/4 is a good choice.
|
|
||||||
Check out the
|
Check out the
|
||||||
[gateway-connected multicluster example](/docs/setup/install/multicluster/gateways/#configure-the-example-services)
|
[gateway-connected multicluster example](/docs/setup/install/multicluster/gateways/#configure-the-example-services)
|
||||||
for more details.
|
for more details.
|
||||||
|
|
|
@ -264,11 +264,15 @@ running in a second cluster. Before you begin:
|
||||||
{{< /tip >}}
|
{{< /tip >}}
|
||||||
|
|
||||||
If the global services have actual VIPs, you can use those, but otherwise we suggest
|
If the global services have actual VIPs, you can use those, but otherwise we suggest
|
||||||
using IPs from the multicast range `224.0.0.0/4` that are not already allocated.
|
using IPs from the class E addresses range `240.0.0.0/4`.
|
||||||
These IPs are not loopback addresses and are non-routable outside of a pod.
|
|
||||||
Application traffic for these IPs will be captured by the sidecar and routed to the
|
Application traffic for these IPs will be captured by the sidecar and routed to the
|
||||||
appropriate remote service.
|
appropriate remote service.
|
||||||
|
|
||||||
|
{{< warning >}}
|
||||||
|
Multicast addresses (224.0.0.0 ~ 239.255.255.255) should not be used because there is no route to them by default.
|
||||||
|
Loopback addresses (127.0.0.0/8) should also not be used because traffic sent to them may be redirected to the sidecar inbound listener.
|
||||||
|
{{< /warning >}}
|
||||||
|
|
||||||
{{< text bash >}}
|
{{< text bash >}}
|
||||||
$ kubectl apply --context=$CTX_CLUSTER1 -n foo -f - <<EOF
|
$ kubectl apply --context=$CTX_CLUSTER1 -n foo -f - <<EOF
|
||||||
apiVersion: networking.istio.io/v1alpha3
|
apiVersion: networking.istio.io/v1alpha3
|
||||||
|
@ -292,7 +296,7 @@ running in a second cluster. Before you begin:
|
||||||
# must be unique for each remote service, within a given cluster.
|
# must be unique for each remote service, within a given cluster.
|
||||||
# This address need not be routable. Traffic for this IP will be captured
|
# This address need not be routable. Traffic for this IP will be captured
|
||||||
# by the sidecar and routed appropriately.
|
# by the sidecar and routed appropriately.
|
||||||
- 224.0.0.2
|
- 240.0.0.2
|
||||||
endpoints:
|
endpoints:
|
||||||
# This is the routable address of the ingress gateway in cluster2 that
|
# This is the routable address of the ingress gateway in cluster2 that
|
||||||
# sits in front of sleep.foo service. Traffic from the sidecar will be
|
# sits in front of sleep.foo service. Traffic from the sidecar will be
|
||||||
|
@ -363,7 +367,7 @@ spec:
|
||||||
protocol: http
|
protocol: http
|
||||||
resolution: STATIC
|
resolution: STATIC
|
||||||
addresses:
|
addresses:
|
||||||
- 224.0.0.2
|
- 240.0.0.2
|
||||||
endpoints:
|
endpoints:
|
||||||
- address: ${CLUSTER2_GW_ADDR}
|
- address: ${CLUSTER2_GW_ADDR}
|
||||||
network: external
|
network: external
|
||||||
|
@ -397,7 +401,7 @@ spec:
|
||||||
protocol: http
|
protocol: http
|
||||||
resolution: DNS
|
resolution: DNS
|
||||||
addresses:
|
addresses:
|
||||||
- 224.0.0.2
|
- 240.0.0.2
|
||||||
endpoints:
|
endpoints:
|
||||||
- address: ${CLUSTER2_GW_ADDR}
|
- address: ${CLUSTER2_GW_ADDR}
|
||||||
network: external
|
network: external
|
||||||
|
@ -457,7 +461,7 @@ spec:
|
||||||
addresses:
|
addresses:
|
||||||
# the IP address to which httpbin.bar.global will resolve to
|
# the IP address to which httpbin.bar.global will resolve to
|
||||||
# must be unique for each service.
|
# must be unique for each service.
|
||||||
- 224.0.0.2
|
- 240.0.0.2
|
||||||
endpoints:
|
endpoints:
|
||||||
- address: ${CLUSTER2_GW_ADDR}
|
- address: ${CLUSTER2_GW_ADDR}
|
||||||
labels:
|
labels:
|
||||||
|
|
Loading…
Reference in New Issue