North-South Load Balancing of Kubernetes Services with eBPF/XDP Martynas Pumputis (Isovalent) October 28, 2020 10.0.0.1 10.0.0.2 10.0.0.3 httpd httpd “httpd” service 10.0.0.1:30000 10.0.0.2:30000 KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT -A KUBE-FORWARD -s 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod source rule" --ctstate RELATED,ESTABLISHED -j ACCEPT -A KUBE-FORWARD -d 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod destination rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

scalability to your datacentre, public or private. Whether you want to deploy an OpenStack cloud, a Kubernetes cluster or a 50,000-node render farm, Ubuntu Server delivers the best value scale-out performance esm-infra yes enabled Expanded Security Maintenance for Infrastructure livepatch yes enabled Canonical Livepatch service realtime-kernel yes disabled Ubuntu kernel with PREEMPT_RT patches integrated 0-42-generic s390x) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/pro System information as of Wed Jun 3 17:32:10 UTC 2020 System

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Ubuntu Desktop Training Ubuntu Desktop Course Copyright © 2009 Canonical Limited Ubuntu Desktop Training Written by and attributed to Canonical Ltd. and the Ubuntu Training community 2008-2009. This license to: http://creativecommons.org/licenses/by-nc-sa/3.0/legalcode Student Guide Copyright © 2009 Canonical Limited Table of Contents Course Overview .............................................. vii ..................... 155 iv Ubuntu Desktop Training Ubuntu Desktop Course Copyright © 2009 Canonical Limited 4.7.1. GnuCash Accounting .............. 155 4.8. Lesson Summary ....................

archive.ubuntu.com or can be ordered from Canonical at the cost of the media and shipping. Ubuntu, the Ubuntu logo and Canonical are registered trademarks of Canonical Ltd. All other trademarks are the property your friends. Share the spirit of Ubuntu! Ubuntu is sponsored by Canonical Ltd. For more information, visit www.ubuntu.com and www.canonical.com. To request free Ubuntu CDs, visit shipit.ubuntu.com. Version including enterprise releases and security updates. • Ubuntu comes with full commercial support from Canonical and hundreds of companies around the world. • Ubuntu includes the very best translations and accessibility

com) 欢迎访问本课程网站：http://people.ubuntu.com/˜happyaron/udc-cn 生成时间：20100628T1600 版本：Release 1 本课程由 Canonical 有限公司和 Ubuntu 培训社区创作 2008-2010。 这个协议受到知识共享署名-非商业性使用-相同方式共享的约束 基于这个协议，您可以自由： • 复制、发行、展览、表演、放映、广播或通过信息网络传播本作品 . . . . . . . . . . . . . . . . . . . . . . . 462 9.7.1 Canonical 提供的专业支持服务 . . . . . . . . . . . . . . . . . . . . . . . 462 9.7.2 Canonical 市场 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464 9.34 Canonical 市场 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(jimhuyiwei@gmail.com) 欢迎访问本课程网站：http://people.ubuntu.com/˜happyaron/udc-cn 生成时间：20100725T1630 版本：Daily 本课程由 Canonical 有限公司和 Ubuntu 培训社区创作 2008-2010。 这个协议受到知识共享署名-非商业性使用-相同方式共享的约束 基于这个协议，您可以自由： • 复制、发行、展览、表演、放映、广播或通过信息网络传播本作品 到 了 http://no-name-yet.com 的赞助，开始运作。 四年多一点的时间里，Ubuntu 迅速发展，拥有了一个上千人的社区，和超过 800 万 的用户(2007年6月)。 Canonical 是 Ubuntu 的商业赞助者。 教员注记： 如果学生对 Mark Shuttleworth 感兴趣，想了解更多的信息，请展示下面的内容。 Mark Shuttleworth 是一个非 Ubuntu 承诺，因为它包含了 Ubuntu 精神中最精髓的部分，这也是 Ubuntu 成功的最本质原因。 • Ubuntu 永远免费，包括商业发行版和安全更新。 • Ubuntu 由 Canonical 和全球数百家公司提供完整的商业支持。 • Ubuntu 有自由软件社区提供的最好的翻译和无障碍设施。 • Ubuntu 所有核心应用程序都是自由软件，Ubuntu 鼓励用户使用、改进并传播自

and community support. The main commercial support (and development funding) is available from Canonical, Ltd. They supply reasonably- priced support contracts on a per desktop or per server basis. For service provided by Canonical to help manage your Ubuntu machines. See the Landscape8 site for details. 7 http://www.ubuntu.com/download/server/download 8 http://landscape.canonical.com/ 8 Installation 10ms ^- pugot.canonical.com 2 8 377 21 -95us[ -95us] +/- 57ms ^- alphyn.canonical.com 2 6 377 23 -1569us[-1569us] +/- 79ms ^- golem.canonical.com 2