{"id":7245,"date":"2022-08-23T14:31:34","date_gmt":"2022-08-23T06:31:34","guid":{"rendered":"https:\/\/egonlin.com\/?p=7245"},"modified":"2022-08-23T14:31:34","modified_gmt":"2022-08-23T06:31:34","slug":"%e8%99%9a%e6%8b%9f%e7%bd%91%e7%bb%9c%e4%bb%8b%e7%bb%8d","status":"publish","type":"post","link":"https:\/\/egonlin.com\/?p=7245","title":{"rendered":"\u865a\u62df\u7f51\u7edc\u4ecb\u7ecd"},"content":{"rendered":"

Intro
\nLinux\u9488\u5bf9VM\/Container\u63d0\u4f9b\u4e86\u4e30\u5bcc\u7684\u7f51\u7edc\u529f\u80fd,\u4e0b\u9762\u4ecb\u7ecd\u4e00\u4e9b\u5728\u4e91\u73af\u5883\u4e0b\u5e38\u7528\u7684\u7f51\u7edc\u63a5\u53e3<\/p>\n

Bridge
\n\u6982\u51b5<\/p>\n

\u4e00\u4e2aLinux\u7f51\u6865\u626e\u6f14\u4e00\u4e2a\u7c7b\u4f3c\u7f51\u7edc\u4ea4\u6362\u673a\u7684\u89d2\u8272\u3002\u7f51\u6865\u4e3b\u8981\u8d1f\u8d23\u5728\u8fde\u63a5\u5230\u5b83\u7684\u63a5\u53e3\u4e4b\u95f4\u8f6c\u53d1\u6d41\u91cf\u3002\u8def\u7531\u5668\u4e0a\u6d41\u91cf\u8f6c\u53d1\uff0c\u7f51\u5173\u8def\u7531\u89c2\u6cd5\uff0c\u6216\u8005\u865a\u62df\u673a\u4e4b\u95f4\uff0c\u6216\u8005\u540c\u4e00\u4e2a\u4e3b\u673a\u7684\u4e0d\u540c\u7684namespace\u4e4b\u95f4\u3002\u652f\u6301STP\uff0cVLAN\u8fc7\u6ee4\uff0c\u652f\u6301\u591a\u64ad\u76d1\u542c\u3002
\n

\"file\"<\/div>
\n\u9002\u7528\u573a\u666f<\/p>\n

\u5f53\u4f60\u9700\u8981\u5728\u865a\u62df\u673a\u4e4b\u95f4\/\u5bb9\u5668\u4e4b\u95f4\/\u4e3b\u673a\u4e4b\u95f4\u5efa\u7acb\u4e00\u4e2a\u901a\u4fe1\u96a7\u9053\u90a3\u4e48\u5c31\u53ef\u4ee5\u4f7f\u7528bridge<\/p>\n

bond
\n\u6982\u51b5<\/p>\n

Linux\u7684bonding \u9a71\u52a8\u63d0\u4f9b\u4e00\u79cd\u5c06\u591a\u4e2a\u7f51\u7edc\u63a5\u53e3\u7ed1\u5b9a\u5230\u4e00\u4e2a\u201cbonded\u201d\u63a5\u53e3\u7684\u673a\u5236\u3002Bonded\u7684\u4f9d\u8d56\u4e0d\u540c\u7684\u6a21\u5f0f\u4f1a\u6709\u4e0d\u540c\u7684\u884c\u4e3a\u3002\u901a\u5e38speaking \uff0cmodes\u65e2\u4e0d\u63d0\u4f9b\u4e3b\u5907\u6216\u8005\u8d1f\u8f7d\u529f\u80fd\u3002
\n

\"file\"<\/div>
\n\u4f7f\u7528\u573a\u666f<\/p>\n

\u4f7f\u7528bonded\u63a5\u53e3\u5f53\u4f60\u60f3\u8981\u589e\u52a0\u4f60\u7684\u5e26\u5bbd\u7684\u65f6\u5019\u6216\u8005\u9488\u5bf9\u7684\u670d\u52a1\u5668\u505a\u5728\u707e\u5907\u7684\u65f6\u5019\u4f60\u5c31\u9700\u8981\u7528\u5230bonded\u63a5\u53e3<\/p>\n

team
\n\u6982\u8ff0<\/p>\n

\u7c7b\u4f3cBonded\u63a5\u53e3\uff0c\u63d0\u4f9b\u4e86\u4e00\u79cd\u57282\u5c42\u8ba9\u591a\u4e2a\u7f51\u5361\u7ed1\u5b9a\u5230\u4e00\u4e2a\u903b\u8f91\u8bbe\u5907\u91cc\u9762\u7684\u673a\u5236\u3002<\/p>\n

\u9700\u8981\u6ce8\u610f\u4e00\u70b9\u5c31\u662fteam\u8bbe\u5907\u5e76\u4e0d\u662f\u590d\u5236\/\u6a21\u4effbonded\u63a5\u53e3\u3002<\/p>\n

\u5b83\u53ea\u4e0d\u8fc7\u7528\u4e86\u4e00\u79cd\u4e0d\u540c\u7684\u673a\u5236\u6765\u89e3\u51b3\u4e86\u540c\u6837\u7684\u95ee\u9898\uff0c\u65e0\u9501\u7684\uff08RCU)TX\/RX\u548c\u6a21\u5757\u5316\u8bbe\u8ba1\u3002Boned\u548cTeam\u4e4b\u95f4\u8fd8\u662f\u6709\u5f88\u591a\u529f\u80fd\u4e0a\u7684\u5dee\u5f02\u7684\u3002\u4f8b\u5982team\u652f\u6301LACP\u8d1f\u8f7d\u5747\u8861\uff0cNS\/NA(IPV6)\uff0cD-BUS\u63a5\u53e3\u3002\u8fd9\u4e9b\u662fbonded\u63a5\u53e3\u6240\u4e0d\u5177\u5907\u7684\u3002\u66f4\u591a\u5dee\u5f02\u53ef\u4ee5\u67e5\u770bhttps:\/\/github.com\/jpirko\/libteam\/wiki\/Bonding-vs.-Team-features<\/p>\n

\u9002\u7528\u573a\u666f<\/p>\n

\u5f53\u4f60\u5f97\u56e2\u961f\u60f3\u8981\u4e00\u4e9bboneded\u6240\u4e0d\u5177\u5907\u7684\u529f\u80fd\u7684\u65f6\u5019\u5c31\u53ef\u4ee5\u4f7f\u7528team<\/p>\n

VLAN
\n\u6982\u8ff0<\/p>\n

Vlan\u865a\u62dfLAN\uff0c\u901a\u8fc7\u5728\u62a5\u6587\u91cc\u9762\u589e\u52a0tag\u6765\u9694\u79bb\u5e7f\u64ad\u57df\uff0cVLAN\u5141\u8bb8\u7f51\u7edc\u7ba1\u7406\u5458\u5c06\u540c\u4e00\u4e2a\u4ea4\u6362\u673a\u4e0b\u6216\u8005\u4e0d\u540c\u4ea4\u6362\u673a\u4e0b\u5f97\u4e3b\u673a\u5206\u7ec4\u3002VLAN\u62a5\u6587\u5934\u5982\u4e0b
\n

\"file\"<\/div>
\n\u9002\u7528\u573a\u666f<\/p>\n

\u5f53\u4f60\u60f3\u8981\u9488\u5bf9VM\/Namespace\/\u6216\u8005\u4e3b\u673a\u5206\u7ec4\u5f97\u65f6\u5019\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528VLAN<\/p>\n

Vxlan
\n\u6982\u8ff0<\/p>\n

VXLAN\uff08\u865a\u62df\u673a\u6269\u5c55\u5c40\u57df\u7f51\uff09\u662f\u4e00\u79cdtunnel\u534f\u8bae\u7528\u6765\u89e3\u51b3VLAN4096\u4e2a\u9650\u5236\u7684\u95ee\u9898\u7684\u3002\u8be6\u60c5\u89c1https:\/\/tools.ietf.org\/html\/rfc7348\u3002
\n\u2003vlan \u7f51\u7edc\u6807\u8bc6\u7b26\u536024\u4f4d\uff0c\u56e0\u6b64VXLAN\u5141\u8bb8\u652f\u6301\u652f\u6301\u52302^24\u4f4d\u7684\u865a\u62dfLANS\u3002\u800cVLAN\u53ea\u67094096\u4e2a\u3002VXLAN\u5728\u4e8c\u5c42\u5e27\u4e0a\u6dfb\u52a0\u4e00\u4e2aVXLAN\u7684\u5934\u90e8\uff0c\u7136\u540e\u538b\u7f29\u6210\u4e00\u4e2aUDP\u7684\u5305\u3002\u770b\u8d77\u6765\u50cf\u4e0b\u9762\u8fd9\u4e2a
\n

\"file\"<\/div>
\n\u9002\u7528\u573a\u666f<\/p>\n

VXLAN\u5178\u578b\u7684\u5e94\u7528\u573a\u666f\u662f\u5728\u6570\u636e\u4e2d\u5fc3\uff0c\u5c06\u865a\u62df\u673a\u4e3b\u673a\u5206\u5272\u6210\u591a\u4e2aracks\u3002<\/p>\n

\u7ecf\u5178model
\n

\"file\"<\/div><\/p>\n

MacVlan
\n\u6982\u8ff0<\/p>\n

\u5728VLAN\u6a21\u5f0f\u4e0b\uff0c\u4f60\u5728\u4e00\u4e2a\u7f51\u5361\u4e4b\u4e0a\u53ef\u4ee5\u521b\u5efa\u591a\u4e2a\u63a5\u53e3\uff0c\u901a\u8fc7vlan tag\u53f7\u6765\u8fc7\u6ee4\u8fd9\u4e9b\u62a5\u6587\u3002\u5728MACVLAN\u6a21\u5f0f\u4e0b\uff0c\u4f60\u53ef\u4ee5\u5728\u4e00\u4e2a\u7f51\u5361\u4e4b\u4e0a\u521b\u9020\u4e0d\u540cmac\u5730\u5740\u7684\u63a5\u53e3<\/p>\n

\u5728macvlan\u4e4b\u524d\uff0c\u5982\u679c\u4f60\u60f3\u8981\u4ece\u4e00\u4e2a\u865a\u62df\u673a\/namespace\u91cc\u9762\u8fde\u63a5\u5230\u7269\u7406\u7f51\u7edc\uff0c\u4f60\u9700\u8981\u521b\u9020\u4e00\u4e2atap\/veth\u8bbe\u5907\uff0c\u5e76\u4e14veth\u7684\u4e00\u7aef\u9700\u8981attach\u5230\u7f51\u6865\u4e0a\uff0c\u800c\u4e14\u7f51\u6865\u9700\u8981\u8fde\u63a5\u5230\u4e00\u4e2a\u7269\u7406\u7f51\u5361\u4e0a\u9762\uff0c\u62d3\u6251\u56fe\u5982\u4e0b
\n

\"file\"<\/div>
\n\u73b0\u5728\u6709\u4e86macvlan \u4f60\u53ef\u4ee5\u76f4\u63a5\u5c06\u7269\u7406\u63a5\u53e3\u7ed1\u5b9a\u5230namespace\u91cc\u9762\uff0c\u800c\u4e0d\u9700\u8981\u7f51\u6865\u3002\u65b0\u7684\u62d3\u6251\u5982\u4e0b
\n
\"file\"<\/div>
\nmacvlan\u6709\u4ee5\u4e0b\u51e0\u79cd\u6a21\u578b<\/p>\n

Private
\n\u7ed1\u5b9a\u5728\u540c\u4e00\u4e2a\u63a5\u53e3\u4e0a\u7684\u4e0d\u540cmacvlan\u5b9e\u4f8b\u4e4b\u95f4\u662f\u4e0d\u5141\u8bb8\u901a\u4fe1\u7684\u3002\u5373\u4f7f\u5916\u90e8\u8bbe\u5907\u652f\u6301hairpin\u6a21\u5f0f\u3002
\n\u901a\u8fc7\u8fd9\u79cd\u6a21\u5f0f\uff0c\u53ef\u4ee5\u5c06\u4e0d\u540cnamespace\u653e\u5230\u4e00\u4e2a\u8282\u70b9\u4e0a\uff0c\uff08\u786e\u4fdd\u540c\u4e00\u4e2a\u8282\u70b9\u4e0d\u5141\u8bb8\u51fa\u73b0\u540c\u4e00\u4e2anamespace\u91cc\u9762\u591a\u4e2a\u5b9e\u73b0\uff0c\u7528\u6765\u5b9e\u73b0\u5f88\u632b\u7684\u57fa\u4e8enamespace\u9694\u79bb\u673a\u5236\uff09
\n

\"file\"<\/div><\/p>\n

vepa
\n\u4e00\u4e2amacvlan\u5b9e\u4f8b\u7684\u6570\u636e\u662f\u53ef\u4ee5\u53d1\u9001\u5230\u540c\u4e00\u4e2a\u8282\u70b9\u7684\u5176\u4ed6macvlan\u5b9e\u73b0\u7684\u3002\u4f46\u662f\u9700\u8981\u652f\u6301\u53d1\u5939\u5f2f\u6a21\u5f0f\uff0c\u6216\u8005\u652f\u6301TCP\/IP\u8f6c\u53d1
\n

\"file\"<\/div><\/p>\n

Bridge
\n\u6240\u6709\u7684endpoint\u53ef\u4ee5\u901a\u8fc7\u7269\u7406\u63a5\u53e3\u76f4\u63a5\u4e92\u8054
\n

\"file\"<\/div><\/p>\n

Passthru
\n\u5141\u8bb8\u5355\u4e2aVM\u76f4\u63a5\u8fde\u63a5\u5230\u7269\u7406\u7f51\u5361
\n

\"file\"<\/div><\/p>\n

source
\nSource\u6a21\u5f0f\u88ab\u7528\u6765\u57fa\u4e8esource mac(\u8fd9\u4e2amac\u662f\u7531mac vlan\u6a21\u5f0f\u4e0b\u521b\u9020\u51fa\u6765\u7684)\u5217\u8868\u6765\u8fc7\u6ee4\u62a5\u6587\u3002<\/p>\n

IPvlan
\n\u6982\u8ff0<\/p>\n

ipvlan\u6709\u70b9\u7c7b\u4f3cmacvlan,\u53ea\u4e0d\u8fc7IPVLAN\u6a21\u5f0f\u4e0b\u540e\u9762\u7684endpoint\u90fd\u5e26\u6709\u76f8\u540c\u7684mac address.<\/p>\n

\"file\"<\/div>
\nIpvlan \u652f\u6301L2\/L3\u6a21\u5f0f\u3002<\/p>\n

L2\u6a21\u5f0f
\nIPVLAN L2\u6a21\u5f0f\u4e0b\u66f4\u50cfmacvlan\u7684\u7f51\u6865\u6a21\u5f0f\u3002\u7236\u63a5\u53e3\u770b\u8d77\u6765\u50cf\u4e00\u4e2a\u7f51\u6865switch.
\n

\"file\"<\/div><\/p>\n

L3\u6a21\u5f0f
\n\u5728IPV3\u6a21\u5f0f\u4e0b, \u7236\u63a5\u53e3\u626e\u6f14\u8005\u4e00\u4e2a\u8def\u7531\u5668\u7684\u89d2\u8272\u3002\u5728\u5404\u4e2aendpoint \u8def\u7531\u62a5\u6587\uff0c \u8fd9\u79cd\u6a21\u5f0f\u5177\u6709\u66f4\u597d\u7684\u6269\u5c55\u6027\u3002
\n

\"file\"<\/div>
\n\u5982\u679c\u6709\u51e0\u4e0b\u5339\u914d\u5230\u573a\u666f\u90a3\u4e48\u4e45\u53ef\u4ee5\u9002\u7528ipvlan<\/p>\n

Linux\u4e3b\u673a\u8fde\u63a5\u5230\u7684\u5916\u90e8\u4ea4\u6362\u673a\u5df2\u7ecf\u505a\u4e86\u4e00\u7aef\u53e3\u4e00mac\u7684\u7ed1\u5b9a\u3002
\n\u6709\u521b\u5efamac\u4e2a\u6570\u9650\u5236\/NIC\u5904\u4e8e\u6df7\u6742\u6a21\u5f0f\/\u6027\u80fd\u7684\u8003\u8651\u3002
\n\u5982\u679cslave\u8bbe\u5907\u653e\u7f6e\u5728\u4e00\u4e2a\u5bb9\u6613\u6539\u53d8\u7684\/\u9519\u8bef\u4f7f\u7528\u7684\u4e8c\u5c42\u73af\u5883\u91cc\u9762\u3002
\nMACVTAP\/IPVTAP
\n\u6982\u8ff0<\/p>\n

Macvtap\/iptap \u662f\u4e00\u79cd\u65b0\u7684\u8bbe\u5907\u7528\u6765\u7b80\u5316\u865a\u62df\u6865\u63a5\u7f51\u7edc\u7684\u3002\u5f53\u5728\u7269\u7406\u7f51\u5361\u4e0a\u521b\u5efa\u4e00\u4e2aMACVTAP\/IPVTAP\u5b9e\u4f8b\u7684\u65f6\u5019\uff0ckernel\u540c\u6837\u4f1a\u521b\u5efa\u4e00\u4e2a\u5b57\u7b26\u8bbe\u5907\/dev\/tapX\/\uff08\u7c7b\u4f3cTUN\/TAP\uff09\u8bbe\u5907\uff0c\u53ef\u4ee5\u76f4\u63a5\u88abKVM\/QEMU\u4f7f\u7528\u3002
\n\u6709\u4e86MACVTAP\/IPVTAP\u8bbe\u5907\uff0c\u4f60\u53ef\u4ee5\u76f4\u63a5\u7528\u6765\u4ee3\u66ffTUN\/TAP \u6216\u8005\u7f51\u6865\u8bbe\u5907\uff0c\u4ed6\u4eec\u6a21\u578b\u5982\u4e0b
\n

\"file\"<\/div>
\nnote:<\/p>\n

\u7279\u522b\u7684\uff0cmacvlan\/ipvlan \u4f7f\u5f97guest.\/host\u76f4\u63a5\u8fde\u63a5\u5230\u548c\u4e3b\u673a\u8fde\u63a5\u7684switch\u3002 MACVTAP\u548cIPVTAP\u4e4b\u95f4\u7684\u533a\u522b\u548cMACVLAN\/IPVLAN\u7684\u533a\u522b\u4e00\u6837\u7684\u3002<\/p>\n

Macsec
\n\u6982\u8ff0<\/p>\n

MACsec(Media Access Control Security\uff09\u662fIEEE\u9488\u5bf9wired Ethernet LANS\u5b89\u5168\u6307\u5b9a\u7684\u4e00\u4e2a\u6807\u51c6\u3002\u548cIPSEC\u7c7b\u4f3c\uff0c2\u5c42macsec \u53ef\u4ee5\u4fdd\u62a4IP\u901a\u4fe1\uff0c\u5305\u62ecARP\uff0c\u4e34\u8fd1\u7f51\u7edc\u53d1\u73b0\uff0cDHCP\u3002Mac\u770b\u8d77\u6765\u50cf\u4e0b\u9762\u8fd9\u6837
\n

\"file\"<\/div>
\nMacsec\u4e3b\u8981\u9002\u7528\u7684\u573a\u666f\u662f\u5728\u4e00\u4e2a\u6807\u51c6\u5c40\u57df\u7f51\u91cc\u9762\u4fdd\u8bc1\u6240\u6709\u6d41\u91cf\u7684\u5b89\u5168
\n
\"file\"<\/div><\/p>\n

Veth
\n\u6982\u8ff0<\/p>\n

Veth(virtual Ethernet\uff09\u8bbe\u5907\u65f6\u672c\u5730Ethernet tunnel\u3002\u8fd9\u79cd\u8bbe\u5907\u65f6\u6210\u5bf9\u521b\u5efa\u7684\uff0c\u6b63\u5982\u4e0b\u9762\u770b\u8d77\u6765\u8fd9\u6837
\n\u62a5\u6587\u5728\u8bbe\u5907\u7684\u4e00\u7aef\u8f93\u5165\uff0c\u4f1a\u7acb\u9a6c\u5728\u53e6\u5916\u4e00\u7aef\u63a5\u6536\u5230\u3002\u5f53\u4e00\u7aef\u8bbe\u5907down\u4e86\uff0c\u90a3\u4e48\u53e6\u5916\u4e00\u5757\u4f1a\u7acb\u9a6c\u663e\u793adown\u7684\u72b6\u6001\u3002
\n

\"file\"<\/div>
\n\u5f53namespace\u9700\u8981\u548cmain host namespace\u8fdb\u884c\u901a\u4fe1\u7684\u65f6\u5019\u5c31\u9700\u8981veth\u8fd9\u4e2a\u8bbe\u5907\u3002\u4e5f\u662f\u5bb9\u5668\u5e38\u7528\u7684\u4e00\u79cd\u8bbe\u5907\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

Intro Linux\u9488\u5bf9VM\/Container\u63d0\u4f9b\u4e86\u4e30\u5bcc\u7684\u7f51\u7edc\u529f\u80fd,\u4e0b\u9762\u4ecb\u7ecd\u4e00\u4e9b\u5728\u4e91\u73af\u5883\u4e0b\u5e38\u7528\u7684\u7f51\u7edc\u63a5\u53e3 […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/7245"}],"collection":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7245"}],"version-history":[{"count":0,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/7245\/revisions"}],"wp:attachment":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}