Scaling a Multi-Tenant k8s Cluster in a Telco Pablo Moncada October 28, 2020 About MasMovil group ● 4th telecom company in Spain ● Provides voice and broadband services to +12M customers ● Several Services +3k CPU +2k Mem +5TB Nodes +300 kube-proxy replacement NetworkPolicy logging Multi-cluster DNS Aware NetworkPolicy Increased Istio security External Services TLS visibility Performance

......................................................................................... 232 1. MySQL ................................................................................................. Selects the BIND DNS server and its documentation. • LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server. • Mail server: This task selects a variety of packages useful for a general purpose mail org, home of the Network Time Protocol project16 • The pool.ntp.org projecti, being a big virtual cluster of timeservers.17 • Freedesktop.org info on timedatectl18 • Freedesktop.org info on systemd-timesyncd

your datacentre, public or private. Whether you want to deploy an OpenStack cloud, a Kubernetes cluster or a 50,000-node render farm, Ubuntu Server delivers the best value scale-out performance available HA - Migrate from crmsh to pcs 2 Databases 3 databases-introduction Introduction 3 databases-mysql MySQL 3 databases-postgresql PostgreSQL 2 Monitoring 3 logging-monitoring-alerting Logging, Monitoring create -f qcow2 disk-image.qcow2 10G Formatting 'disk-image.qcow2', fmt=qcow2 size=10737418240 cluster_size=65536 lazy_refcounts=off refcount_bits=16 qemu-img info disk-image.qcow2 image: disk-image

33 - 本文档使用 书栈(BookStack.CN) 构建 较好一点！因此，对于主机的安全要求就需要严格的要求啦！就鸟哥的观点来看， 如果你的主机是用来替你赚钱的， 例如某些研究单位的大型 Cluster 运算主机， 那么即使架设一个甚至让你觉得很不方便的防火墙系统，都是合理 的手段！因为主机被入侵就算了，若数据被窃取，呵呵！ 那可不是闹着玩的！ 由上面的整个架站流程来看，由规划到安装、主机 会主动的帮你重组而进行传送，差一点的可能就直接回报这个封包无效而丢弃了～这个时候可 就糗大啰～ 所以， MTU 设定为 9000 这种事情，大概仅能在内部网络的环境中作～举例来说，很多的内部丛集系 统 (cluster) 就将他们的内部网络环境 MTU 设定为 9000，但是对外的适配卡可还是原本的标准 1500 喔！ ^_^ 2.2.5 MTU 最大传输单位 4.2. 2.2 TCP/IP 的链结层相关协议 switch 啦！因为 10/100/1000Mbps 的 switch 要比 10/100Mbps 的设备快上十倍，速度可是差很多的啊！如果你的 设备还需要更快时， 例如鸟哥之前服务的实验室内部的 cluster (丛集式计算机群) ，则购买的 switch 甚至需 要支持 Jumbo frame 这种支持大讯框的硬件架构才行，否则速度上不来啊！ 网络线：考虑与速度相配的等级、线材形状、施工配线等

cgroup 版本决定 iSulad 内部使用的 cgroup 版本。 • iSulad 目前仅支持 CRI 方式使用 CDI 特性。 功能描述 适用于网络 IO 是性能瓶颈的应用，对 Redis、MySQL 等数据库场景有较好的性能提升效果。 应用场景 变更内容 变更描述 RuntimeConfig 接口 iSulad CRI V1 新增 RuntimeConfig 接口。iSulad 支持 systemd-cgroup openPGP GreatSQL 数据库 GreatSQL 数据库是一款开源免费数据库，可在普通硬件上满足金融级应用场景，具有高可用、高性能、高兼容、高安全等特 性，可作为 MySQL 或 Percona Server for MySQL 的理想可选替换。 特性增强 28 openEuler 24.03 LTS 技术白皮书 GreatSQL 数据库常见的应用场景包括金融级高可用、高并发交易系统、Oracle 高性能 相对 MySQL 及 Percona Server For MySQL 的性能表现更稳定优异，支持高性能的内存查询加速 AP 引擎、InnoDB 并行查询、 并行 LOAD DATA、事务无锁化、线程池等特性，在 TPC-C 测试中相对 MySQL 性能提升超过 30%，在 TPC-H 测试中的性能 表现是 MySQL 的十几倍甚至上百倍。 - 支持类似 MySQL HeatWave

Maximized node performance Application cluster Storage cluster (multi-node/multi-controller) /A /A /B /C /D /E /F Multipath NFS/RDMA or NFS/TCP Maximized cluster performance in client-server model improving the application performance. Repositories https://gitee.com/openeuler/wayca-scheduler • Cluster and NUMA scheduling domains are established based on the hardware topology, and the scheduler supports HybridSched is a full-stack solution for hybrid deployment of VMs, covering enhanced OpenStack cluster scheduling, new single-node QoS management component Skylark, and kernel-mode basic resource isolation

scheduling and management software to build a solid cloud base. • High availability (HA) cluster solution: The HA cluster solution implemented by KylinSoft enables failover within seconds. Flourishing community IDE Auto-tuning tool A-Tune Test platform Compass-CI Toolchain OpenStack Kubernetes Kylin HA Cluster scheduling and management CPU: x86, ARM, RISC-V GPU NPU Chips Apps Virtualization Containers Scenarios Application scenario 1: kernel CVE fixes Typical applications, such as Nginx, Redis, and MySQL, run on a physical or virtual machine. They generate many keep-alive connections and occupy a large

can be installed with one click for ARM and x86 hybrid clusters, while deployment of a 100-node cluster is possible within just 15 minutes. Scenario-specific innovations: • Edge computing: openEuler do not access the memory frequently. Tests show that etMem delivers 40% higher performance for MySQL than counterparts. The user-mode memory swapping mechanism is added for the user-mode storage framework applications that use a large amount of memory but do not access the memory frequently, such as MySQL, Redis, and Nginx. All memory expansion operations are performed internally, that is within a node

mtools 显示mtools支持的指令 mv 用来对文件或目录重新命名 mysql MySQL服务器客户端工具 mysqladmin MySQL服务器管理客户端 mysqldump MySQL数据库中备份工具 mysqlimport 为MySQL服务器用命令行方式导入数据 mysqlshow 显示MySQL中数据库相关信息 N named-checkzone 使用named-ch 3. --apt：在apt模式下运行。 软件包：指定“.deb”软件包。 导入debconf模板： 1. dpkg-preconfigure /var/cache/apt/archives/mysql-server-5.5*.deb dpkg-preconfigure 补充说明 语法 选项 参数 实例 dpkg-preconfigure Debian Linux中软件包安装之前询问问题 些监控参数，下面 /usr/share/dstat 中是dstat的插件，这些插件可以扩展dstat的功能，如可以 监控电源（battery）、mysql等。 下面这些插件并不是都可以直接使用的，有的还依赖其他包，如想监控mysql，必须要装python连接 mysql的一些包。 1. [root@iZ23uulau1tZ ~]# dstat --list 2. internal: 3.

Exported Metrics Cilium as a Kubernetes pod Cilium as a host-agent on a node Troubleshoo�ng Component & Cluster Health Connec�vity Problems Policy Troubleshoo�ng Automa�c Diagnosis Symptom Library Useful Scripts requires the firewalls on all servers to be manipulated whenever a container is started anywhere in the cluster. In order to avoid this situa�on which limits scale, Cilium assigns a security iden�ty to groups store. Secure access to and from external services Label based security is the tool of choice for cluster internal access control. In order to secure access to and from external services, tradi�onal CIDR