Calico 的网络结构是什么？- 每天5分钟玩转 Docker 容器技术（68）

今天药忘吃喽~ 2022-03-30 14:53 147阅读 0赞

上一节我们部署了 Calico 网络，今天将运行容器并分析 Calico 的网络结构。  
  
在 host1 中运行容器 bbox1 并连接到 cal\_net1：

docker container run --net cal\_net1 --name bbox1 -tid busybox

查看 bbox1 的网络配置。

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361819708082012.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819708082012.png]

`cali0`是 calico interface，分配的 IP 为`192.168.119.2`。cali0 对应 host1 编号`11`的 interface`cali5f744ac07f0`。

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361819576071782.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819576071782.png]

host1 将作为 router 负责转发目的地址为 bbox1 的数据包。

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361819678055298.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819678055298.png]

所有发送到 bbox1 的数据都会发给`cali5f744ac07f0`，因为`cali5f744ac07f0`与`cali0`是一对 veth pair，bbox1 能够接收到数据。

host1 网络结构如图所示：

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361819826017545.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819826017545.png]![Image 1][]

接下来我们在 host2 中运行容器 bbox2，也连接到 cal\_net1：

docker container run --net cal\_net1 --name bbox2 -tid busybox

IP 为`192.168.183.65`。

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361820043089854.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361820043089854.png]

host2 添加了两条路由：

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361820222066351.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361820222066351.png]

1.  目的地址为 host1 容器 subnet`192.168.119.0/26`的路由。
2.  目的地址为本地 bbox2 容器`192.168.183.65`的路由。

同样的，host1 也自动添加了到`192.168.183.64/26`的路由。

![http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361820244031156.png][http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361820244031156.png]

完成了上面这些准备工作，下一节我们将讨论 Calico 网络的连通性。

![二维码+指纹.png][.png]

[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819708082012.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361978086063555.jpg
[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819576071782.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361978352097804.jpg
[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819678055298.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361978566045676.jpg
[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361819826017545.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361978860062519.jpg
[Image 1]: 
[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361820043089854.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361979105068045.jpg
[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361820222066351.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361979466091498.jpg
[http_7xo6kd.com1.z0.glb.clouddn.com_upload-ueditor-image-20170914-1505361820244031156.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361979777042201.jpg
[.png]: http://7xo6kd.com1.z0.glb.clouddn.com/upload-ueditor-image-20170914-1505361980195041884.jpg