news

[Jean-Baptiste-Lasselle]

Ok 2 news to move on :

• A metalLb quote https://github.com/pokusio/try-kube_egd/issues/1#issuecomment-1207071486
• also i developed nodejs ARP moduke, together with wireeshark i would be able to setup tests. Yet i need those tests insiode isolated network : https://github.com/pokusio/pokus-packer/blob/develop/.npm.scripts/ops/utils/arp/scanner.arp.js

[Jean-Baptiste-Lasselle]

I also wanna try :

https://github.com/eranyanay/cni-from-scratch (only with bash scriopt implementation very interesting : https://github.com/eranyanay/cni-from-scratch )

[Jean-Baptiste-Lasselle]

also see https://www.youtube.com/watch?v=FG0ZW5eX1JY

[Jean-Baptiste-Lasselle]

Goal 1

i want to successfully :

• provison a private K8S cluster, :
  • I will use two methods : first i will use a terraform for virtualbox and an ansible playbook executing all the shell commands on each cluster node. Ansible Playbook will be completely run from scratch
  • second i will try and use one of ythe latest existing tools to completyely provision the cluster
• deploy and configure Metal Lb :
  • I want to configure MetalLb for L2 only, and one Address pool only
• I want to deploy an Ingress Controller (maybe Traefik, but i wanna try at least 2 others, one of which nginx, the third i will do HA Proxy
• Finally i want to deploy a helm charted app , check i have access to it
• I want then to setup networking monitoring, to track network traffic of a set or requests against the load balanced app.
• I finally want to set up chaos testing, like i will bring down network parts. Expected results i want :
  • automated self healing of the entire load balancing infra
  • automated scaling of load balancing : more traffic will cause more IPs for the LoadBalcner of the ingress Controller, less traffic will cause releasing IP addresses from load balancer

[Jean-Baptiste-Lasselle]

Goal 2

I want to setup an "old school load balancer" :

• What I want is an L2 load Balancer : that is keepalivd that will work at that level. About whatr exactly Keepalivd does :

  • there is a very good simple explanation here : https://www.youtube.com/watch?v=uGePZ4Zp34A
  • the idea is :
  • you have Machine A, with IP Address addressA on a LAN network 192.168.23.0/24, DHCP assigned IP address
  • you have Machine B, with IP Address addressB on same LAN network 192.168.23.0/24, DHCP assigned IP address
  • Keepalivd creates a "Floating IP (also called VIP for Virtual IP)" : How doe sit create that ...? That VIP is also on same LAN network 192.168.23.0/24, lets' call it VIPaddress, only that IP address is advertised by Keepalivd, not by the DHCP server
  • Keepalivd assigns the VIP to etiher of addressA or addressB
  • Example :
    • Let's say Keepalivd assigns the VIP to addressA of Machine A
    • If Machine A crashes, then Keepalivd re-assigns the VIP to addressB of Machine B : that is why that kind of IP Address is called a "Floating IP", because it floats across diferent behind-the-scene IP addresses.

• apparently one of the very big classics, is to setup HA Proxy as load balancer, but the problem is that HA Proxy is installed only on one mahcine, which may crash, taht is a spingle point of failure. About this see https://www.youtube.com/watch?v=HxQidx8lXM8

• I want to try and lod balance IPs using IPV6 too, just in case i really need that for mobile phones 5G/4G connections

Goal 3

I want to play with all above, plus Site to Site VPN Gateway tunnel :

​ @xavki J'ai déjà fait une terraformation qui comprend ce qui conviendrait ici: ce qu'il faut est une VPN Gateway de chaque côté une VPN Gateway dans chaque datacenter.

Il faut Non pas un tunnel VPN "Point to site" qui permet de se connecter par un client VPN, mais un tunnel VPN "Site to site" : à la fin on se retrouve à pouvoir faire des pings d'un réseau dans un datacenter, vers une adresse IP dans un autre réseau d'un autre datacenter.

• What if i try and setup an HA Site to site tunnel , using :

  • only an OpenSource VPN Gateway like :
  • using Keepalid to float IPs between the 2 laod balanced VPN Gateways ? I think that load balancing VPN Gateways requires L2 level load balancing

• What if i try and set up a HA Site to Site VPN connection :

  • each internet Box has a public IP Address, just like any Mobile phone 2 Internet "box" (ISP routers)
  • I need 4 Public IP Addresses,
  • Oh ok now i jknow why i can't do that : I need to be an AS (Autonomous System) ,a nd have an AS number to be allowed to create IPs on public internet programmatically