https://icloudnative.io/Recent content on 云原生实验室Hugo -- gohugo.iozh-cnWed, 10 Jul 2024 16:06:37 +0800https://icloudnative.io/posts/sealos/Mon, 26 Aug 2019 11:07:04 +0800https://icloudnative.io/posts/sealos/这是个宏伟的计划 # 这是一个宏伟的计划，漫长且有趣。 2018 年的某个https://icloudnative.io/posts/what-happens-when-k8s/Fri, 01 Jun 2018 11:36:45 +0000https://icloudnative.io/posts/what-happens-when-k8s/想象一下，如果我想将 nginx 部署到 Kubernetes 集群，我可能会在终端中输入类似https://icloudnative.io/posts/linux-circumvent/Tue, 23 Jan 2018 08:26:58 +0000https://icloudnative.io/posts/linux-circumvent/Github 地址：Linux 和 MacOS 设备智能分流方案 本来我是决定不再写这样https://icloudnative.io/posts/best-ai-translation-workflow/Wed, 10 Jul 2024 16:06:37 +0800https://icloudnative.io/posts/best-ai-translation-workflow/吴恩达老师提出了一种反思翻译的大语言模型 (LLM) AI 翻译工作流程——https://icloudnative.io/posts/how-gpt-work-explained-without-math/Wed, 15 May 2024 17:06:37 +0800https://icloudnative.io/posts/how-gpt-work-explained-without-math/原文链接🔗： How LLMs Work, Explained Without Math 生成式人工智能 ( GenAI) 和大语言模型 ( LLhttps://icloudnative.io/posts/how-to-set-up-rustdesk-server/Sat, 11 May 2024 05:04:19 +0000https://icloudnative.io/posts/how-to-set-up-rustdesk-server/RustDesk 是一个强大的开源远程桌面软件，是中国开发者的作品，它使用 Rusthttps://icloudnative.io/posts/what-is-rag/Tue, 09 Apr 2024 14:06:37 +0800https://icloudnative.io/posts/what-is-rag/什么是 RAG 技术？ # RAG，即检索增强生成 (Retrieval-Augmented Generationhttps://icloudnative.io/posts/sing-box-tutorial/Sun, 14 Jan 2024 14:06:37 +0800https://icloudnative.io/posts/sing-box-tutorial/sing-box 是什么 # sing-box 是新一代超强通用代理工具，对标 *ray core 与 clash，https://icloudnative.io/posts/ai-scraper/Wed, 20 Dec 2023 14:06:37 +0800https://icloudnative.io/posts/ai-scraper/原文链接： Building a Universal AI Scraper 译者水平有限，不免存在遗漏或错误之处。如https://icloudnative.io/posts/how-to-use-tiktok-in-china/Sun, 17 Dec 2023 14:06:37 +0800https://icloudnative.io/posts/how-to-use-tiktok-in-china/抖音，一个让全中国都痴迷的短视频分享平台，已经成为年轻一代表https://icloudnative.io/posts/reflecting-on-18-years-at-google/Fri, 24 Nov 2023 09:06:37 +0800https://icloudnative.io/posts/reflecting-on-18-years-at-google/这又是一个“屠龙少年 终成恶龙” 的故事，令人唏嘘，这篇文章详细https://icloudnative.io/posts/the-history-of-red-hat/Fri, 10 Nov 2023 14:06:37 +0800https://icloudnative.io/posts/the-history-of-red-hat/译者序 # 原文链接： The History of Red Hat 译者水平有限，不免存在遗漏或错误https://icloudnative.io/posts/the-history-of-windows-95/Sat, 14 Oct 2023 14:06:37 +0800https://icloudnative.io/posts/the-history-of-windows-95/原文链接： The History of Windows 95 译者水平有限，不免存在遗漏或错误之处。如https://icloudnative.io/posts/vaultwarden/Fri, 08 Sep 2023 09:06:37 +0800https://icloudnative.io/posts/vaultwarden/我与 LastPass 的曲折恋情 # 超过 8 年网龄的我，注册过很多网站帐号，每个https://icloudnative.io/posts/completely-free-to-use-gpt4/Wed, 07 Jun 2023 22:06:37 +0800https://icloudnative.io/posts/completely-free-to-use-gpt4/该方案目前已失效！请直接使用👉 gptgod GPT-4 目前是世界上最强的多模态大https://icloudnative.io/posts/build-chatgpt-web-using-laf/Sun, 12 Mar 2023 09:06:37 +0800https://icloudnative.io/posts/build-chatgpt-web-using-laf/原文地址： https://3min.cloud/chatgpt 本视频一切权利归 bilibili 及原作者所有。如果觉得好，请点https://icloudnative.io/posts/tailscale-acls/Sun, 27 Nov 2022 09:06:37 +0800https://icloudnative.io/posts/tailscale-acls/前面几篇文章给大家给介绍了 Tailscale 和 Headscale，包括 Headscale 的安https://icloudnative.io/posts/wireguard-over-tcp-using-phantun/Fri, 07 Oct 2022 09:06:37 +0800https://icloudnative.io/posts/wireguard-over-tcp-using-phantun/WireGuard 作为一个更先进、更现代的 VPN 协议，比起传统的 IPSec、Ophttps://icloudnative.io/posts/linux-routing-of-wireguard/Wed, 31 Aug 2022 09:06:37 +0800https://icloudnative.io/posts/linux-routing-of-wireguard/很久以前，我们只需要在 Linux 终端中输入 route -n（后来演变出了 ip rohttps://icloudnative.io/posts/getting-started-with-argocd/Wed, 03 Aug 2022 09:06:37 +0800https://icloudnative.io/posts/getting-started-with-argocd/在上一篇『 GitOps 介绍』中，我介绍了什么是 GitOps，包括 GitOps 的原https://icloudnative.io/posts/what-is-gitops/Sun, 03 Jul 2022 09:06:37 +0800https://icloudnative.io/posts/what-is-gitops/GitOps 这个概念最早是由 Kubernetes 管理公司 Weaveworks 公司在 2017 年提出的，如今已经过去https://icloudnative.io/posts/budget-nas/Fri, 10 Jun 2022 09:06:37 +0800https://icloudnative.io/posts/budget-nas/原文链接： https://mtlynch.io/budget-nas/ 本文已获取原作者的翻译授权 今年我决定给自己量身定https://icloudnative.io/posts/tetragon/Tue, 17 May 2022 09:19:37 +0800https://icloudnative.io/posts/tetragon/原文链接： https://isovalent.com/blog/post/2022-05-16-tetragon Isovalent Cilium 企业版 包含一个基于 eBPF 的实时安全可观测性和运行https://icloudnative.io/posts/monitoring-clash/Sun, 15 May 2022 09:19:37 +0800https://icloudnative.io/posts/monitoring-clash/众所周知，科学上网，又称番茄 / 魔法 / 武当纵云梯，是当代青年的https://icloudnative.io/posts/customize-firefox/Sat, 30 Apr 2022 09:19:37 +0800https://icloudnative.io/posts/customize-firefox/Firefox 和 Chrome 分别是当今世界最流行的浏览器之一，虽然这两款浏览器都有https://icloudnative.io/posts/how-we-lost-54k-github-stars/Sun, 17 Apr 2022 09:06:37 +0800https://icloudnative.io/posts/how-we-lost-54k-github-stars/原文链接： How we lost 54k GitHub stars 出大事了，一个非常知名的开源项目 Star 数量https://icloudnative.io/posts/anki-sync-server/Sun, 10 Apr 2022 09:06:37 +0800https://icloudnative.io/posts/anki-sync-server/Anki 介绍 # Anki是一款基于间隔重复（Spaced Repetihttps://icloudnative.io/posts/cloud-native-podcasts/Sat, 09 Apr 2022 09:06:37 +0800https://icloudnative.io/posts/cloud-native-podcasts/虽然 PHP 是世界上最好的语言，但身为程序员、YAML 工程师和系统https://icloudnative.io/posts/custom-derp-servers/Sun, 27 Mar 2022 09:06:37 +0800https://icloudnative.io/posts/custom-derp-servers/上篇文章介绍了如何使用 Headscale 替代 Tailscale 官方的控制服务器，并接入各个平https://icloudnative.io/posts/how-to-set-up-or-migrate-headscale/Mon, 21 Mar 2022 09:06:37 +0800https://icloudnative.io/posts/how-to-set-up-or-migrate-headscale/Headscale 与 Tailscale 图标 目前国家工信部在大力推动三大运营商发展 IPv6，对https://icloudnative.io/posts/minecraft-m1/Sun, 20 Feb 2022 19:06:37 +0800https://icloudnative.io/posts/minecraft-m1/Apple 在去年年底发布了 M1 Max 芯片，这款芯片的性能在 M1 的基础上又上升https://icloudnative.io/posts/shim-shiminey-shim-shiminey/Wed, 16 Feb 2022 09:19:37 +0800https://icloudnative.io/posts/shim-shiminey-shim-shiminey/原文链接： https://container42.com/2022/01/10/shim-shiminey-shim-shiminey/ Kubernetes 1.20 版开始废除了对 dockershim 的支持，改用 Containerd 作为默认的容器https://icloudnative.io/posts/configure-a-mesh-network-with-netmaker-2/Tue, 09 Nov 2021 19:06:37 +0800https://icloudnative.io/posts/configure-a-mesh-network-with-netmaker-2/熟悉我的小伙伴都知道我是一名与时俱进的 WireGuard 舔狗，我早就把所有的https://icloudnative.io/posts/configure-a-mesh-network-with-netmaker/Mon, 18 Oct 2021 19:06:37 +0800https://icloudnative.io/posts/configure-a-mesh-network-with-netmaker/大家好，我是米开朗基杨。 关注我的读者应该都还记得我之前写过一https://icloudnative.io/posts/a-day-in-the-life-of-cloudnativer/Wed, 15 Sep 2021 05:15:34 +0000https://icloudnative.io/posts/a-day-in-the-life-of-cloudnativer/早上 6:00，起床，洗漱 早上 6:30，由于干眼症，需要先滴眼https://icloudnative.io/posts/alpine-vs-distroless-vs-busybox/Sun, 05 Sep 2021 14:41:44 +0000https://icloudnative.io/posts/alpine-vs-distroless-vs-busybox/大多数情况下，我们构建容器镜像时选择的基础镜像无外乎是 bushttps://icloudnative.io/posts/x509-certificate-exporter/Wed, 25 Aug 2021 14:41:44 +0000https://icloudnative.io/posts/x509-certificate-exporter/原文链接： https://kubesphere.com.cn/blogs/x509-certificate-exporter/ KubeSphere 虽然提供了运维友好的向导式操作界面，简化了 Kubernetes 的https://icloudnative.io/posts/ipvs-how-kubernetes-services-direct-traffic-to-pods/Thu, 08 Apr 2021 11:56:04 +0800https://icloudnative.io/posts/ipvs-how-kubernetes-services-direct-traffic-to-pods/原文链接： IPVS: How Kubernetes Services Direct Traffic to Pods Kubernetes 中的 Service 就是一组同 label 类型 Pod 的服务抽https://icloudnative.io/posts/run-jetbrains-ide-in-docker/Wed, 17 Mar 2021 00:48:25 +0800https://icloudnative.io/posts/run-jetbrains-ide-in-docker/云原生玩家往往都是左手 MacBook，右手 Goland，但由https://icloudnative.io/posts/monitoring-wireguard-using-prometheus/Thu, 11 Mar 2021 19:06:37 +0800https://icloudnative.io/posts/monitoring-wireguard-using-prometheus/云原生是一种信仰，是一种全新的技术模式，它不局限于你脑海中固https://icloudnative.io/posts/use-wireguard-as-kubernetes-cni/Sat, 27 Feb 2021 11:57:17 +0800https://icloudnative.io/posts/use-wireguard-as-kubernetes-cni/写了这么多篇 WireGuard 相关的保姆教程，今天终于牵扯到 Kubernetes 了，不然怎么对https://icloudnative.io/posts/wireguard-full-mesh/Tue, 23 Feb 2021 15:58:00 +0800https://icloudnative.io/posts/wireguard-full-mesh/上篇文章给大家介绍了如何 使用 wg-gen-web 来方便快捷地管理 WireGuard 的配置和秘钥https://icloudnative.io/posts/wireguard-endpoint-discovery-nat-traversal/Thu, 28 Jan 2021 16:41:34 +0800https://icloudnative.io/posts/wireguard-endpoint-discovery-nat-traversal/WireGuard 是由 Jason A. Donenfeld 等人创建的下一代开源 VPN 协议，旨在解决许多困扰 IPhttps://icloudnative.io/posts/configure-wireguard-using-wg-gen-web/Tue, 19 Jan 2021 21:43:17 +0800https://icloudnative.io/posts/configure-wireguard-using-wg-gen-web/之前花了很大的篇幅介绍了 WireGuard 的 工作原理和 配置详解，可这里面的内https://icloudnative.io/posts/use-vftool-on-macos/Thu, 14 Jan 2021 11:59:41 +0800https://icloudnative.io/posts/use-vftool-on-macos/之前我给大家介绍过如何 在 macOS 上使用 multipass 创建轻量级虚拟机来使用 Pohttps://icloudnative.io/posts/iterm2-auto-login/Sat, 09 Jan 2021 16:12:11 +0800https://icloudnative.io/posts/iterm2-auto-login/上篇文章我们介绍了 iTerm2 自身的配置和美化，这篇文章我们就来介绍 iTerm2https://icloudnative.io/posts/why-not-why-not-wireguard/Tue, 05 Jan 2021 17:48:33 +0800https://icloudnative.io/posts/why-not-why-not-wireguard/前段时间 ipfire 的 Michael Tremer 写过一篇文章叫 《Why not WireGuard》https://icloudnative.io/posts/install-harbor-on-kubernetes/Wed, 30 Dec 2020 00:31:35 +0800https://icloudnative.io/posts/install-harbor-on-kubernetes/系统环境： kubernetes 版本：1.18.10 Harbor Chart 版本：1.5.2 Harbor 版本：https://icloudnative.io/posts/why-not-wireguard/Thu, 24 Dec 2020 14:46:58 +0800https://icloudnative.io/posts/why-not-wireguard/原文链接： Why not WireGuard 最近有一款新型 VPN 工具备受瞩目，相信很多人已经https://icloudnative.io/posts/getting-started-with-containerd/Sun, 13 Dec 2020 22:16:22 +0800https://icloudnative.io/posts/getting-started-with-containerd/1. Containerd 的前世今生 # 很久以前，Docker 强势崛起，以“镜像”这https://icloudnative.io/posts/add-nvidia-gpu-support-to-k8s-with-containerd/Thu, 03 Dec 2020 23:09:23 +0800https://icloudnative.io/posts/add-nvidia-gpu-support-to-k8s-with-containerd/Kubernetes 具有对机器的资源进行分配和使用的能力，比如可以指定容器最多https://icloudnative.io/posts/how-to-back-up-all-of-your-grafana-dashboards/Wed, 02 Dec 2020 12:03:00 +0800https://icloudnative.io/posts/how-to-back-up-all-of-your-grafana-dashboards/目前我们 k8s 集群的 Grafana 使用 ceph 作为持久化存储，一但我将 Grafana 的 Deployment 删除重https://icloudnative.io/posts/security-best-practices-for-kubernetes-pods/Thu, 26 Nov 2020 14:02:20 +0800https://icloudnative.io/posts/security-best-practices-for-kubernetes-pods/对于大部分 Kubernetes 用户来说，安全是无关紧要的，或者说没那么紧要，就https://icloudnative.io/posts/wireguard-install/Wed, 18 Nov 2020 13:19:35 +0800https://icloudnative.io/posts/wireguard-install/WireGuard 的安装和使用条件非常苛刻，对内核版本要求极高，不仅如此，在https://icloudnative.io/posts/use-kubevirt-to-manage-windows-on-kubernetes/Fri, 13 Nov 2020 16:13:56 +0800https://icloudnative.io/posts/use-kubevirt-to-manage-windows-on-kubernetes/最近我发现我的 Kubernetes 集群资源实在是太多了，有点浪费，不信你看： 既https://icloudnative.io/posts/use-podman-in-macos/Sun, 08 Nov 2020 18:15:23 +0800https://icloudnative.io/posts/use-podman-in-macos/Podman 是一个无守护程序与 Docker 命令兼容的下一代 Linux 容器工具，该项目由 RedHathttps://icloudnative.io/posts/linux-capabilities-in-practice-2/Mon, 19 Oct 2020 14:16:56 +0800https://icloudnative.io/posts/linux-capabilities-in-practice-2/原文链接： Linux Capabilities In Practice 该系列文章总共分为三篇： Linux Capabilities 入门教程：概念https://icloudnative.io/posts/minecraft-as-a-k8s-admin-tool/Thu, 08 Oct 2020 23:20:08 +0800https://icloudnative.io/posts/minecraft-as-a-k8s-admin-tool/微软 2015 年收购 Minecraft 之后不久开源了一个项目叫 Dockercrafthttps://icloudnative.io/posts/resolvconf-tutorial/Mon, 28 Sep 2020 14:50:58 +0800https://icloudnative.io/posts/resolvconf-tutorial/随着 Linux 的不断发展壮大，涌现出了各种各样的 DNS 自动管理程序，它们https://icloudnative.io/posts/kubernetes-storage-using-ceph-rbd/Mon, 14 Sep 2020 11:48:07 +0800https://icloudnative.io/posts/kubernetes-storage-using-ceph-rbd/本文详细介绍了如何在 Kubernetes 集群中部署 ceph-csi（v3.1.https://icloudnative.io/posts/comparing-thanos-to-victoriametrics-cluster/Tue, 25 Aug 2020 16:14:20 +0800https://icloudnative.io/posts/comparing-thanos-to-victoriametrics-cluster/原文链接： Comparing Thanos to VictoriaMetrics cluster Thanos 和 VictoriaMetrics 都是用来作为 Prometheus 长期存储的成熟方案，https://icloudnative.io/posts/startup-containers-in-lightning-speed-with-lazy-image-distribution-on-containerd/Tue, 18 Aug 2020 15:15:35 +0800https://icloudnative.io/posts/startup-containers-in-lightning-speed-with-lazy-image-distribution-on-containerd/在容器的整个生命周期中，拉取镜像是最耗时的步骤之一。 Harter 等人的https://icloudnative.io/posts/introducing-hierarchical-namespaces/Sat, 15 Aug 2020 08:52:57 +0800https://icloudnative.io/posts/introducing-hierarchical-namespaces/原文链接： Introducing Hierarchical Namespaces 在单个 Kubernetes 集群上安全托管大量用户一直是一个老大https://icloudnative.io/posts/aggregate-metrics-user-prometheus-operator/Wed, 05 Aug 2020 14:32:04 +0800https://icloudnative.io/posts/aggregate-metrics-user-prometheus-operator/Promtheus 本身只支持单机部署，没有自带支持集群部署，也不支持高可用以https://icloudnative.io/posts/find-kubernetes-pod-info-from-process-id/Tue, 14 Jul 2020 16:31:59 +0800https://icloudnative.io/posts/find-kubernetes-pod-info-from-process-id/在管理 Kubernetes 集群的过程中，我们经常会遇到这样一种情况：在某台节点https://icloudnative.io/posts/wireguard-docs-practice/Mon, 06 Jul 2020 15:53:49 +0800https://icloudnative.io/posts/wireguard-docs-practice/上篇文章介绍了 WireGuard 相对于其他 VPN 协议的优点和 WireGuard 的工作原理，本文将https://icloudnative.io/posts/wireguard-docs-theory/Wed, 01 Jul 2020 11:18:32 +0800https://icloudnative.io/posts/wireguard-docs-theory/本文翻译自： https://github.com/pirate/wireguard-docs WireGuard 是由 Jason Donenfeld 等人用 C 语言编写的一个开源 VPN 协议，被https://icloudnative.io/posts/old-github-ui/Tue, 30 Jun 2020 14:04:54 +0800https://icloudnative.io/posts/old-github-ui/微软现在大搞副业，就是不肯在 Windows 系统上下功夫，最近又改了 GitHub UI 布https://icloudnative.io/posts/monitoring-calico-with-prometheus-operator/Fri, 26 Jun 2020 17:40:15 +0800https://icloudnative.io/posts/monitoring-calico-with-prometheus-operator/Calico 中最核心的组件就是 Felix，它负责设置路由表和 ACL 规则等，https://icloudnative.io/posts/lens/Tue, 16 Jun 2020 22:29:28 +0800https://icloudnative.io/posts/lens/Kubernetes 的桌面客户端有那么几个，曾经 Kubernetic 应该是最好用的，但最近有个叫https://icloudnative.io/posts/deploy-k3s-cross-public-cloud/Sun, 14 Jun 2020 13:44:03 +0800https://icloudnative.io/posts/deploy-k3s-cross-public-cloud/最近一两年各大云服务商都出了各种福利活动，很多小伙伴薅了一波https://icloudnative.io/posts/how-does-a-tcp-reset-attack-work/Wed, 10 Jun 2020 10:59:04 +0800https://icloudnative.io/posts/how-does-a-tcp-reset-attack-work/原文链接： How does a TCP Reset Attack work? TCP 重置攻击 是使用一个单一的数据包来执https://icloudnative.io/posts/vmware-fusion-11-5-now-supports-containers/Mon, 08 Jun 2020 16:04:25 +0800https://icloudnative.io/posts/vmware-fusion-11-5-now-supports-containers/作为最好的虚拟机软件之一，VMware Workstation 是专为 Linux 和 Windows 系统设计https://icloudnative.io/posts/openshift4.4-install-offline-static-2-first-setup/Tue, 02 Jun 2020 18:40:45 +0800https://icloudnative.io/posts/openshift4.4-install-offline-static-2-first-setup/上篇文章准备了离线安装 OCP 所需要的离线资源，包括安装镜像、所有https://icloudnative.io/posts/openshift4.4-install-offline-static-1-requirement/Thu, 28 May 2020 21:44:45 +0800https://icloudnative.io/posts/openshift4.4-install-offline-static-1-requirement/本系列文章描述了离线环境下以 UPI (User Provisioned Infrastructure) 模式安装 Openshift Container Platform (OCP) 4.4.5 的步骤https://icloudnative.io/posts/why-does-my-docker-container-take-10-seconds-to-stop/Wed, 27 May 2020 09:44:49 +0800https://icloudnative.io/posts/why-does-my-docker-container-take-10-seconds-to-stop/原文链接： Why Does My Docker Container Take 10+ Seconds to Stop? 作为一名系统重启工程师（SREhttps://icloudnative.io/posts/how-it-works-kubectl-exec/Thu, 21 May 2020 10:02:29 +0800https://icloudnative.io/posts/how-it-works-kubectl-exec/原文链接： How It Works — kubectl exec 对于经常和 Kubernetes 打交道的 YAML 工程师来说，最常https://icloudnative.io/posts/docker-images-part2-details-specific-to-different-languages/Sat, 16 May 2020 12:17:31 +0800https://icloudnative.io/posts/docker-images-part2-details-specific-to-different-languages/原文链接： Docker Images : Part II - Details Specific To Different Languages 本系列文章将分为三个部分： 第https://icloudnative.io/posts/docker-registry-proxy/Mon, 11 May 2020 21:46:44 +0800https://icloudnative.io/posts/docker-registry-proxy/在使用 Docker 和 Kubernetes 时，我们经常需要访问 gcr.io 和 quay.io 镜像仓库，由于众所周知https://icloudnative.io/posts/envoy-cluster-socket/Thu, 23 Apr 2020 00:41:26 +0800https://icloudnative.io/posts/envoy-cluster-socket/Envoy Proxy 在大多数情况下都是作为 Sidecar 与应用部署在同一网络环境中，每个https://icloudnative.io/posts/vxlan-linux/Sat, 18 Apr 2020 14:14:55 +0800https://icloudnative.io/posts/vxlan-linux/上篇文章结尾提到 Linux 是支持 VXLAN 的，我们可以使用 Linux 搭建基于 VXLAN 的 overlay 网https://icloudnative.io/posts/vxlan-protocol-introduction/Sat, 11 Apr 2020 15:22:39 +0800https://icloudnative.io/posts/vxlan-protocol-introduction/VXLAN（Virtual eXtensible Local Area Network，虚拟可扩展局https://icloudnative.io/posts/understanding-cgroups-part-4-cpuset/Sat, 28 Mar 2020 11:40:35 +0800https://icloudnative.io/posts/understanding-cgroups-part-4-cpuset/这是 Cgroup 系列的第四篇，往期回顾： Linux Cgroup 入门教程：基本概念 Linux Cgroup 入门https://icloudnative.io/posts/docker-images-part1-reducing-image-size/Thu, 19 Mar 2020 23:25:39 +0800https://icloudnative.io/posts/docker-images-part1-reducing-image-size/原文链接： Docker Images : Part I - Reducing Image Size 对于刚接触容器的人来说，他们很容https://icloudnative.io/posts/customize-iterm2-1/Tue, 10 Mar 2020 12:06:03 +0800https://icloudnative.io/posts/customize-iterm2-1/对于需要长期与终端打交道的工程师来说，拥有一款称手的终端管理https://icloudnative.io/posts/customize-grafana-theme/Sat, 29 Feb 2020 16:31:23 +0800https://icloudnative.io/posts/customize-grafana-theme/Grafana 自带两款主题 Light 和 Dark，都还不错，Light 有点刺眼，不https://icloudnative.io/posts/controllers-confession/Sat, 22 Feb 2020 17:06:49 +0800https://icloudnative.io/posts/controllers-confession/我是一堆 K8s 控制器。 你可能会疑惑为什么是一堆，因为我不是一个人https://icloudnative.io/posts/tcpdump-examples/Mon, 10 Feb 2020 23:22:34 +0800https://icloudnative.io/posts/tcpdump-examples/本文主要内容翻译自 《Tcpdump Examples》。 tcpdump 是一https://icloudnative.io/posts/introduction-to-linux-namespaces-part-1-api/Fri, 17 Jan 2020 21:35:19 +0800https://icloudnative.io/posts/introduction-to-linux-namespaces-part-1-api/Linux Namespace 是 Linux 提供的一种内核级别环境隔离的方法。用官方的话来说，Lhttps://icloudnative.io/posts/use-envoy-proxy-access-google/Sat, 28 Dec 2019 15:47:03 +0800https://icloudnative.io/posts/use-envoy-proxy-access-google/上篇文章介绍了如何基于文件系统动态更新 Envoy 配置，还没看过的同学https://icloudnative.io/posts/file-based-dynamic-routing-configuration/Mon, 23 Dec 2019 13:05:09 +0800https://icloudnative.io/posts/file-based-dynamic-routing-configuration/之前家里的路由器一直用的都是网件 R7000 搭载的梅林固件，虽说性能也https://icloudnative.io/posts/use-nftables-as-firewall/Thu, 19 Dec 2019 17:56:09 +0800https://icloudnative.io/posts/use-nftables-as-firewall/上篇文章 给大家介绍了 nftables 的优点以及基本的使用方法，它的优点在于https://icloudnative.io/posts/istio-deploy/Sun, 15 Dec 2019 00:14:06 +0800https://icloudnative.io/posts/istio-deploy/没错，Istio 架构又换了。。。北京时间 2020 年 3 月 6 日 凌晨发布https://icloudnative.io/posts/font-spider-plus/Sun, 08 Dec 2019 16:42:03 +0800https://icloudnative.io/posts/font-spider-plus/随着当前 Web 技术的日新月异，网页界面内容越来越丰富，让人眼花缭https://icloudnative.io/posts/understanding-the-pleg-is-not-healthy/Sun, 01 Dec 2019 10:32:58 -0500https://icloudnative.io/posts/understanding-the-pleg-is-not-healthy/在 Kubernetes 社区中，PLEG is not healthy 成名已久，只要出现这个报错，就有很https://icloudnative.io/posts/multiarch-docker-with-buildx/Sun, 17 Nov 2019 13:54:43 -0500https://icloudnative.io/posts/multiarch-docker-with-buildx/在工作和生活中，我们可能经常需要将某个程序跑在不同的 CPU 架构上https://icloudnative.io/posts/concurrency-is-not-parallelism/Mon, 04 Nov 2019 23:47:34 -0500https://icloudnative.io/posts/concurrency-is-not-parallelism/现在我们都说设计可并行、高并发的程序，而且我们很多时候会在潜https://icloudnative.io/posts/linux-capabilities-in-practice-1/Sun, 03 Nov 2019 23:23:19 -0500https://icloudnative.io/posts/linux-capabilities-in-practice-1/该系列文章总共分为三篇： Linux Capabilities 入门教程：概念篇 Linux Capabilities 入门教程：基https://icloudnative.io/posts/linux-capabilities-why-they-exist-and-how-they-work/Sun, 27 Oct 2019 09:57:11 -0400https://icloudnative.io/posts/linux-capabilities-why-they-exist-and-how-they-work/该系列文章总共分为三篇： Linux Capabilities 入门教程：概念篇 Linux Capabilities 入门教程：基https://icloudnative.io/posts/podman-sidecar/Fri, 18 Oct 2019 00:16:16 -0400https://icloudnative.io/posts/podman-sidecar/郑重声明：本文不是 Podman 的入门篇，入门请阅读这篇文章： 再见 Dochttps://icloudnative.io/posts/grafana-v6.4-released/Tue, 08 Oct 2019 01:49:41 +0800https://icloudnative.io/posts/grafana-v6.4-released/英文原文：Grafana v6.4 Released 2019 年 10 月 2 日，也就是中国的国庆期https://icloudnative.io/posts/using-nftables/Sun, 29 Sep 2019 21:01:14 +0800https://icloudnative.io/posts/using-nftables/nftables 是一个 netfilter 项目，旨在替换现有的 {ip,ip6,arp,eb}tables 框架，为 {ip,ip6}tables 提供一个新的包过滤https://icloudnative.io/posts/adguard-home/Sun, 22 Sep 2019 09:02:26 +0800https://icloudnative.io/posts/adguard-home/通常我们使用网络时，宽带运营商会为我们分配一个 DNS 服务器。这个https://icloudnative.io/posts/kubesphere/Thu, 19 Sep 2019 21:53:07 +0800https://icloudnative.io/posts/kubesphere/2018 年 7 月份，青云在 Cloud Insight 云计算峰会上推出了一款全新的容器平台—https://icloudnative.io/posts/istio-1.3/Sat, 14 Sep 2019 23:31:46 +0800https://icloudnative.io/posts/istio-1.3/Istio 是 Google、IBM 和 Lyft 联合开源的服务网格（Servichttps://icloudnative.io/posts/kubeman/Sun, 08 Sep 2019 17:22:38 +0800https://icloudnative.io/posts/kubeman/周末闲逛 Twitter 时，发现一个很有意思的小工具叫 kubeman，野心https://icloudnative.io/posts/blue-green-deployments-contours-ingressroute/Fri, 06 Sep 2019 02:08:54 +0800https://icloudnative.io/posts/blue-green-deployments-contours-ingressroute/上篇文章介绍了 Contour 分布式架构的工作原理，顺便简单介绍了下 IngressRoute 的使https://icloudnative.io/posts/use-envoy-as-a-kubernetes-ingress/Thu, 29 Aug 2019 15:38:15 +0800https://icloudnative.io/posts/use-envoy-as-a-kubernetes-ingress/在 Kubernetes 中运行大规模以 Web 为中心的工作负载，最关键的需求之一就是在https://icloudnative.io/posts/tools-and-methods-for-auditing-kubernetes-rbac-policies/Tue, 20 Aug 2019 14:18:15 +0800https://icloudnative.io/posts/tools-and-methods-for-auditing-kubernetes-rbac-policies/认证与授权对任何安全系统来说都至关重要，Kuberneteshttps://icloudnative.io/posts/prometheus-histograms/Tue, 06 Aug 2019 14:25:12 +0800https://icloudnative.io/posts/prometheus-histograms/Prometheus 中提供了四种指标类型（参考： Prometheus 的指标类型），其中直方图（Hhttps://icloudnative.io/posts/poke-calicos-lies/Tue, 30 Jul 2019 17:00:49 +0800https://icloudnative.io/posts/poke-calicos-lies/Calico 是一个纯三层的数据中心网络方案，而且无缝集成像 OpenStack 这种 Iaas 云架https://icloudnative.io/posts/understanding-cgroups-part-3-memory/Thu, 25 Jul 2019 22:41:11 +0800https://icloudnative.io/posts/understanding-cgroups-part-3-memory/该系列文章总共分为三篇： Linux Cgroup 入门教程：基本概念 Linux Cgroup 入门教程：https://icloudnative.io/posts/cloud-native-weekly-3/Sun, 21 Jul 2019 21:25:34 +0800https://icloudnative.io/posts/cloud-native-weekly-3/本文首发于：微信公众号「云原生实验室」，公众号ID：clouhttps://icloudnative.io/posts/whats-new-kubernetes-1-15/Thu, 18 Jul 2019 08:38:48 +0800https://icloudnative.io/posts/whats-new-kubernetes-1-15/2019 年 6 月 20 日，Kubernetes 重磅发布了 1.15 版本，不过笔者https://icloudnative.io/posts/intro-guide-to-dockerfile-best-practices/Tue, 09 Jul 2019 17:53:17 +0800https://icloudnative.io/posts/intro-guide-to-dockerfile-best-practices/原文链接： Intro Guide to Dockerfile Best Practices 如今 GitHub 仓库中已经包含了成千上万的 Dochttps://icloudnative.io/posts/cloud-native-weekly-2/Fri, 05 Jul 2019 22:11:46 +0800https://icloudnative.io/posts/cloud-native-weekly-2/这是云原生周报第 2 期，主要分享云原生社区最新开源项目，优秀博https://icloudnative.io/posts/cloud-native-weekly-1/Thu, 27 Jun 2019 16:12:50 +0800https://icloudnative.io/posts/cloud-native-weekly-1/前言 # 云原生不但可以很好的支持互联网应用，也在深刻影响着新的https://icloudnative.io/posts/understanding-cgroups-part-2-cpu/Fri, 31 May 2019 17:21:52 +0800https://icloudnative.io/posts/understanding-cgroups-part-2-cpu/该系列文章总共分为三篇： Linux Cgroup 入门教程：基本概念 Linux Cgroup 入门教程：https://icloudnative.io/posts/understanding-cgroups-part-1-basics/Wed, 22 May 2019 17:13:10 +0800https://icloudnative.io/posts/understanding-cgroups-part-1-basics/该系列文章总共分为三篇： Linux Cgroup 入门教程：基本概念 Linux Cgroup 入门教程：https://icloudnative.io/posts/kubernetes-eviction/Fri, 17 May 2019 14:32:59 +0800https://icloudnative.io/posts/kubernetes-eviction/https://icloudnative.io/posts/memory-limit-of-pod-and-oom-killer/Mon, 29 Apr 2019 11:43:29 +0800https://icloudnative.io/posts/memory-limit-of-pod-and-oom-killer/https://icloudnative.io/posts/kubernetes-zero-downtime-deployment/Fri, 26 Apr 2019 22:27:56 +0800https://icloudnative.io/posts/kubernetes-zero-downtime-deployment/https://icloudnative.io/posts/kube-proxy-subtleties-debugging-an-intermittent-connection-reset/Thu, 04 Apr 2019 13:18:03 +0800https://icloudnative.io/posts/kube-proxy-subtleties-debugging-an-intermittent-connection-reset/https://icloudnative.io/posts/macvlan-in-action/Mon, 01 Apr 2019 10:20:04 +0800https://icloudnative.io/posts/macvlan-in-action/通过 上篇文章的学习，我们已经知道 Macvlan 四种模式的工作原理，其中最https://icloudnative.io/posts/netwnetwork-virtualization-macvlan/Mon, 25 Mar 2019 17:29:43 +0800https://icloudnative.io/posts/netwnetwork-virtualization-macvlan/Macvlan 简介 # 在 Macvlan 出现之前，我们只能为一块以太网卡添加多个 IP 地址，https://icloudnative.io/posts/a-deep-dive-into-kubernetes-controllers/Mon, 11 Mar 2019 17:36:27 +0800https://icloudnative.io/posts/a-deep-dive-into-kubernetes-controllers/https://icloudnative.io/posts/matrix-multiplication/Sat, 09 Mar 2019 19:32:33 +0800https://icloudnative.io/posts/matrix-multiplication/我在 2016 年的时候写过一篇关于 向量的叉乘与行列式的文章，没想到过https://icloudnative.io/posts/install-coredns-on-macos/Wed, 06 Mar 2019 13:41:11 +0800https://icloudnative.io/posts/install-coredns-on-macos/CoreDNS 是 Golang 编写的一个插件式 DNS 服务器，是 Kubernetes 1.13 后所内置的默认 DNS 服务器https://icloudnative.io/posts/the-mechanics-of-kubernetes/Sat, 23 Feb 2019 23:35:42 +0800https://icloudnative.io/posts/the-mechanics-of-kubernetes/原文地址：The Mechanics of Kubernetes Kubernetes 是一个用于在一组节点（通常称之为集群https://icloudnative.io/posts/etcd-server-learner/Wed, 30 Jan 2019 18:45:42 +0800https://icloudnative.io/posts/etcd-server-learner/集群成员变更一直是 etcd 最棘手的问题之一，在变更过程中会遇到各种https://icloudnative.io/posts/etcd-cluster-number/Wed, 30 Jan 2019 13:13:56 +0800https://icloudnative.io/posts/etcd-cluster-number/etcd 使用 raft 协议保证各个节点之间的状态一致。根据 raft 算法原理，节点https://icloudnative.io/posts/nginx-mirror/Mon, 28 Jan 2019 16:39:48 +0800https://icloudnative.io/posts/nginx-mirror/原文链接： nginx mirroring tips and tricks 最近我在研究 Nginx 1.13.4 最新的 mirror 模块，利用 mirror 模块https://icloudnative.io/posts/circuit_breaking-and-outlier-detection-in-istio/Fri, 28 Dec 2018 17:23:43 +0800https://icloudnative.io/posts/circuit_breaking-and-outlier-detection-in-istio/在微服务领域，各个服务需要在网络上执行大量的调用。而网络是很https://icloudnative.io/posts/optimizing-kubernetes-resource-allocation-production/Tue, 18 Dec 2018 16:15:12 +0800https://icloudnative.io/posts/optimizing-kubernetes-resource-allocation-production/原文链接：Optimizing Kubernetes resource allocation in production 我和 Kubernetes 的初次接触就涉https://icloudnative.io/posts/life-of-a-packet-through-istio/Mon, 17 Dec 2018 16:05:24 +0800https://icloudnative.io/posts/life-of-a-packet-through-istio/众所周知，当我们讨论 Istio 时，性能并不是它最大的痛点，最大的痛点https://icloudnative.io/posts/conflictingvirtualservicehost/Sat, 15 Dec 2018 18:28:30 +0800https://icloudnative.io/posts/conflictingvirtualservicehost/Istio 要求集群中 VirtualService 定义的所有目标主机都是唯一的。当使用目标主机的https://icloudnative.io/posts/migrating-from-nginx-to-envoy/Fri, 14 Dec 2018 17:39:06 +0800https://icloudnative.io/posts/migrating-from-nginx-to-envoy/原文链接： Migrating from NGINX to Envoy Proxy 本文将会手把手教你如何从 Nginx 迁移到 Envoy Prhttps://icloudnative.io/posts/kubernetes-design-and-development-explained/Tue, 04 Dec 2018 17:35:59 +0800https://icloudnative.io/posts/kubernetes-design-and-development-explained/原文链接： Kubernetes Design and Development Explained 本文是 8 月 29 日至 31 日在温哥华举行的 开源峰https://icloudnative.io/posts/egress-gateway-2/Wed, 28 Nov 2018 18:19:56 +0800https://icloudnative.io/posts/egress-gateway-2/上一节我演示了如何通过 Egress Gateway 引导 Istio 的出口 HTTP 流量，但到 443 端口的 HTTPShttps://icloudnative.io/posts/kuberbs-for-automatic-kubernetes-rollbacks-so-you-can-sleep-better-at-night/Wed, 28 Nov 2018 11:43:54 +0800https://icloudnative.io/posts/kuberbs-for-automatic-kubernetes-rollbacks-so-you-can-sleep-better-at-night/随着越来越多的企业开始大量使用 Kubernetes，持续交付https://icloudnative.io/posts/egress-gateway-1/Mon, 26 Nov 2018 14:43:51 +0800https://icloudnative.io/posts/egress-gateway-1/在上一篇文章 Istio 出口流量的 TLS 中，我演示了如何在网格内部直接通过https://icloudnative.io/posts/egress-tcp/Fri, 23 Nov 2018 14:18:48 +0800https://icloudnative.io/posts/egress-tcp/本篇博客于 2018 年 7 月 23 日更新。新版本使用了 Istio 1.0，并使用了新https://icloudnative.io/posts/egress-https/Wed, 21 Nov 2018 17:09:25 +0800https://icloudnative.io/posts/egress-https/此博客文章于 2018 年 8 月 9 日更新。新版本使用了 Istio 1.0，并使用了https://icloudnative.io/posts/kubernetes-api-server-part-1/Mon, 19 Nov 2018 13:42:03 +0800https://icloudnative.io/posts/kubernetes-api-server-part-1/原文地址： Kubernetes API Server, Part I 概念架构 Kubernetes 是一个用于在一组节点（通常称之https://icloudnative.io/posts/egress-tls-origination/Fri, 16 Nov 2018 15:56:49 +0800https://icloudnative.io/posts/egress-tls-origination/本文主要内容来自 Istio 官方文档，并对其进行了大量扩展和补充。 控制https://icloudnative.io/posts/hugo-add-busuanzi/Mon, 12 Nov 2018 15:30:35 +0800https://icloudnative.io/posts/hugo-add-busuanzi/不蒜子 是 Bruce 开发的一款轻量级的网页计数器，它的口号是（非官方）https://icloudnative.io/posts/service-mesh-performance-testing/Sun, 11 Nov 2018 18:10:14 +0800https://icloudnative.io/posts/service-mesh-performance-testing/原文链接： Understanding How the Service Mesh Fits with Performance Testing 现代 IT 企业的数字基础设施极其复杂https://icloudnative.io/posts/understanding-resource-limits-in-kubernetes-cpu-time/Sat, 10 Nov 2018 13:32:30 +0800https://icloudnative.io/posts/understanding-resource-limits-in-kubernetes-cpu-time/原文链接： Understanding resource limits in kubernetes: cpu time 建议先阅读下面的系列文章： Linux Cgroup 入门教https://icloudnative.io/posts/hugo-social-share-plugin/Wed, 07 Nov 2018 01:22:31 +0800https://icloudnative.io/posts/hugo-social-share-plugin/很多站长开发网站时为了推广页面，或者获得更多的回访和流量，会https://icloudnative.io/posts/sre-resiliency-bolt-on-sidecar-rate-limiting-with-envoy-sidecar/Thu, 01 Nov 2018 17:55:47 +0800https://icloudnative.io/posts/sre-resiliency-bolt-on-sidecar-rate-limiting-with-envoy-sidecar/原文链接： SRE: Resiliency: Bolt on Rate Limiting using Envoy 速率限制是缓解级联故障和防止耗尽共https://icloudnative.io/posts/extending-the-envoy-admin-interface/Thu, 25 Oct 2018 16:34:20 +0800https://icloudnative.io/posts/extending-the-envoy-admin-interface/原文链接： Extending the Envoy Admin Interface Envoy 是一个动态可配置的高性能现代化代理工具https://icloudnative.io/posts/istio-mtls-debugging-a-503-error/Thu, 11 Oct 2018 15:59:54 +0800https://icloudnative.io/posts/istio-mtls-debugging-a-503-error/原文链接： Istio, mTLS, debugging a 503 error 大家好，本文我将与你们分享我在 Istio 官方文https://icloudnative.io/posts/envoy-xds-protocol/Wed, 10 Oct 2018 22:23:51 +0800https://icloudnative.io/posts/envoy-xds-protocol/原文链接： xDS REST and gRPC protocol Envoy 通过查询文件或管理服务器来动态发现资源https://icloudnative.io/posts/istio-traffic-management-impl-intro/Tue, 09 Oct 2018 20:00:17 +0800https://icloudnative.io/posts/istio-traffic-management-impl-intro/本文转载自 赵化冰的博客 前言 # Istio 作为一个 service mesh 开源项目,其中最重https://icloudnative.io/posts/setting-up-ssl-in-envoy-practice/Wed, 26 Sep 2018 17:43:00 +0800https://icloudnative.io/posts/setting-up-ssl-in-envoy-practice/我的博客之前是使用 Nginx 来反代的，由于 Nginx 性能优异，目前有很多国内https://icloudnative.io/posts/kubernetes-extensible-admission/Sat, 22 Sep 2018 11:17:11 +0800https://icloudnative.io/posts/kubernetes-extensible-admission/什么是准入控制 # 准入控制（Admission Controllhttps://icloudnative.io/posts/increasing-security-of-istio-deployments/Fri, 21 Sep 2018 13:10:18 +0800https://icloudnative.io/posts/increasing-security-of-istio-deployments/原文链接： Increasing Security of Istio Deployments by Removing the Need for Privileged Containers 随着 1.0 版本的发布，Istihttps://icloudnative.io/posts/expose-gateway-of-istio/Mon, 17 Sep 2018 13:14:55 +0800https://icloudnative.io/posts/expose-gateway-of-istio/在之前的文章 Istio 服务网格中的网关 中，我已经介绍了简单的暴露 Ingress Gatewayhttps://icloudnative.io/posts/kubernetes-dns/Mon, 27 Aug 2018 18:11:52 +0800https://icloudnative.io/posts/kubernetes-dns/原文链接： Kubernetes DNS setting in your Pod DNS 是 Kubernetes 的核心功能之一，Kubernethttps://icloudnative.io/posts/control-egress-traffic/Thu, 16 Aug 2018 13:40:27 +0800https://icloudnative.io/posts/control-egress-traffic/本文主要内容来自 Istio 官方文档，并对其进行了大量扩展和补充。 缺省https://icloudnative.io/posts/where-is-the-request-2/Mon, 13 Aug 2018 16:30:30 +0800https://icloudnative.io/posts/where-is-the-request-2/书接前文，上文我们通过跟踪集群外通过 ingressgateway 发起的请求来探寻流量在https://icloudnative.io/posts/where-is-the-request-1/Wed, 08 Aug 2018 16:56:31 +0800https://icloudnative.io/posts/where-is-the-request-1/通过前几篇文章的学习与实践，我们对 Gateway、Virtuhttps://icloudnative.io/posts/kubernetes-resource-management/Fri, 03 Aug 2018 17:34:19 +0800https://icloudnative.io/posts/kubernetes-resource-management/本文转载自 Cizixs 的博客。 什么是资源？ # 在 kubernetes 中，有两个基础但是非常https://icloudnative.io/posts/vistio-visualize-your-istio-mesh-using-netflixs-vizceral/Fri, 03 Aug 2018 15:29:37 +0800https://icloudnative.io/posts/vistio-visualize-your-istio-mesh-using-netflixs-vizceral/本文转载自 Jimmy Song 的博客，并且有很多改动。 Vizceral 是 Netflix 发布的一个开源项https://icloudnative.io/posts/istio-ingress/Thu, 02 Aug 2018 13:29:08 +0800https://icloudnative.io/posts/istio-ingress/在一个典型的网格中，通常有一个或多个用于终结外部 TLS 链接，将流https://icloudnative.io/posts/istio-traffic-management/Wed, 01 Aug 2018 20:59:11 +0800https://icloudnative.io/posts/istio-traffic-management/Istio 从 0.8 版本开始出现了一个新的 API 组： networking.ishttps://icloudnative.io/posts/istio-1.0-deploy/Wed, 01 Aug 2018 15:33:46 +0800https://icloudnative.io/posts/istio-1.0-deploy/北京时间 2018 年 8 月 1 日（建军节）凌晨 0 点，Istio 宣布推出 1.0https://icloudnative.io/posts/circuit-breaking/Fri, 13 Jul 2018 09:22:49 +0000https://icloudnative.io/posts/circuit-breaking/在微服务领域，各个服务之间经常会相互调用。如果某个服务繁忙或https://icloudnative.io/posts/routing-with-a-control-plane/Fri, 06 Jul 2018 06:16:02 +0000https://icloudnative.io/posts/routing-with-a-control-plane/当微服务集群规模非常庞大时，控制平面包含了大量的 Envoy 配置项和基https://icloudnative.io/posts/integrating-service-discovery-with-envoy/Wed, 04 Jul 2018 10:12:43 +0000https://icloudnative.io/posts/integrating-service-discovery-with-envoy/在微服务中使用 Envoy，需要明确两个核心概念 : 数据平面和控https://icloudnative.io/posts/setting-up-ssl-in-envoy/Tue, 03 Jul 2018 06:43:33 +0000https://icloudnative.io/posts/setting-up-ssl-in-envoy/如果你准备将服务暴露在互联网上，最好启用 SSL/TLS 加密协议。当使用 Envoyhttps://icloudnative.io/posts/incremental-deploys/Mon, 02 Jul 2018 05:37:37 +0000https://icloudnative.io/posts/incremental-deploys/微服务最常见的工作流程之一就是版本更新。不同于基础架构更新，https://icloudnative.io/posts/routing-basics/Fri, 29 Jun 2018 09:57:33 +0000https://icloudnative.io/posts/routing-basics/本文将更详细地讨论 Envoy 的 HTTP 路由，如果你已经看过了我的上篇文章：https://icloudnative.io/posts/run-envoy-on-your-laptop/Thu, 28 Jun 2018 08:54:18 +0000https://icloudnative.io/posts/run-envoy-on-your-laptop/前言 # 过去一年中，Kubernetes 已经赢得了容器编排大战https://icloudnative.io/posts/envoy-docker-shim/Fri, 22 Jun 2018 08:22:07 +0000https://icloudnative.io/posts/envoy-docker-shim/在过去一年中，服务网格技术的崛起引发了吃瓜群众对 Istio 的持续关注https://icloudnative.io/posts/custom-metrics-hpa/Tue, 19 Jun 2018 09:02:52 +0000https://icloudnative.io/posts/custom-metrics-hpa/从 Kubernetes 1.8 开始，资源使用指标（如容器 CPU 和内存使用率）可以通过 Metrics APIhttps://icloudnative.io/posts/api-aggregation/Tue, 19 Jun 2018 06:15:06 +0000https://icloudnative.io/posts/api-aggregation/Aggregated（聚合的）API server 是为了将原来的 API server 这个https://icloudnative.io/posts/kubernetes-fixing-delayed-service-endpoint-updates/Fri, 15 Jun 2018 14:02:11 +0000https://icloudnative.io/posts/kubernetes-fixing-delayed-service-endpoint-updates/几个月前，我在更新 Kubernetes 集群中的 Deployment 时发现了一个很奇怪的连接超时现https://icloudnative.io/posts/kubernetes-fucking-trick/Mon, 11 Jun 2018 04:35:48 +0000https://icloudnative.io/posts/kubernetes-fucking-trick/Kubernetes 作为云原生时代的“操作系统”，熟悉和使用它是每名用户（Ushttps://icloudnative.io/posts/introduce-kubernetes-descheduler/Wed, 23 May 2018 10:23:29 +0000https://icloudnative.io/posts/introduce-kubernetes-descheduler/kube-scheduler 是 Kubernetes 中负责调度的组件，它本身的调度功能已经很强大了。但由于https://icloudnative.io/posts/pods-life/Thu, 03 May 2018 12:08:01 +0000https://icloudnative.io/posts/pods-life/本文我们将从实践者的角度仔细研究整个pod生命周期，包括如何https://icloudnative.io/posts/kube-router/Fri, 20 Apr 2018 04:36:40 +0000https://icloudnative.io/posts/kube-router/Kube-router 是一个挺有想法的项目，兼备了 calico 和 kube-proxy 的功能，是基于 Kubernetes 网络设计https://icloudnative.io/posts/lvs-persistent-connection/Wed, 18 Apr 2018 11:18:06 +0000https://icloudnative.io/posts/lvs-persistent-connection/前言 # 在实际生产环境中，往往需要根据业务应用场景来设置 lvs 的会https://icloudnative.io/posts/cri-o/Tue, 03 Apr 2018 08:11:38 +0000https://icloudnative.io/posts/cri-o/上一篇文章 介绍了什么是容器运行时，并列出了不同的容器运行时。https://icloudnative.io/posts/container-runtime/Tue, 03 Apr 2018 06:50:43 +0000https://icloudnative.io/posts/container-runtime/容器运行时（Container Runtime）是 Kubernetes 最重要的组https://icloudnative.io/posts/how-manage-image/Mon, 02 Apr 2018 05:12:18 +0000https://icloudnative.io/posts/how-manage-image/docker 里面可以通过 docker pull、docker build、dockehttps://icloudnative.io/posts/federation/Thu, 22 Mar 2018 09:36:27 +0000https://icloudnative.io/posts/federation/在云计算环境中，服务的作用距离范围从近到远一般可以有： 同主机https://icloudnative.io/posts/k8s-network-expand/Sun, 11 Feb 2018 10:40:33 +0000https://icloudnative.io/posts/k8s-network-expand/Kubernetes 中服务暴露的方式 # k8s 的服务暴露分为以下几种情况： hostNetwork hostPort NodePort LoadBalancer Ingresshttps://icloudnative.io/posts/calico-rr/Thu, 01 Feb 2018 11:03:49 +0000https://icloudnative.io/posts/calico-rr/名词解释 # endpoint：接入到网络中的设备称为 endpoint :heart: AS：https://icloudnative.io/posts/use-devicemapper/Mon, 22 Jan 2018 16:17:11 +0800https://icloudnative.io/posts/use-devicemapper/准备条件 # devicemapper 存储驱动是 RHEL, CentOS 和 Oracle Linux 系统上唯一一个支持 Docker EE 和 Commercially Supportedhttps://icloudnative.io/posts/thin-provisioning/Mon, 22 Jan 2018 16:00:22 +0800https://icloudnative.io/posts/thin-provisioning/Thin Provisioning Snapshot 演示 # 上一篇我们介绍了 Device Mapper 框架的技术原理及其核心概念，https://icloudnative.io/posts/devicemapper-theory/Sun, 21 Jan 2018 09:28:41 +0000https://icloudnative.io/posts/devicemapper-theory/Device Mapper 简介 # Device Mapper 是 linux 的内核用来将块设备映射到虚拟块设备的 frahttps://icloudnative.io/posts/%E5%90%91%E9%87%8F%E7%9A%84%E5%8F%89%E4%B9%98%E4%B8%8E%E8%A1%8C%E5%88%97%E5%BC%8F/Sat, 03 Dec 2016 23:59:48 +0000https://icloudnative.io/posts/%E5%90%91%E9%87%8F%E7%9A%84%E5%8F%89%E4%B9%98%E4%B8%8E%E8%A1%8C%E5%88%97%E5%BC%8F/为了循序渐进，先从二维开始讲起，然后过渡到三维 1. 二维空间 # 我https://icloudnative.io/posts/%E5%AD%90%E7%A9%BA%E9%97%B4%E6%8A%95%E5%BD%B1/Sat, 04 Jun 2016 17:18:59 +0000https://icloudnative.io/posts/%E5%AD%90%E7%A9%BA%E9%97%B4%E6%8A%95%E5%BD%B1/为了弄明白子空间投影是怎么一回事，我们遵循从低维到高维的规律https://icloudnative.io/posts/%E5%8D%81%E5%88%86%E9%92%9F%E5%91%8A%E8%AF%89%E4%BD%A0%E4%BB%80%E4%B9%88%E6%98%AF%E6%9C%80%E5%B0%8F%E4%BA%8C%E4%B9%98%E6%B3%95/Sat, 04 Jun 2016 13:28:25 +0000https://icloudnative.io/posts/%E5%8D%81%E5%88%86%E9%92%9F%E5%91%8A%E8%AF%89%E4%BD%A0%E4%BB%80%E4%B9%88%E6%98%AF%E6%9C%80%E5%B0%8F%E4%BA%8C%E4%B9%98%E6%B3%95/曾经看过国内各种关于讲解最小二乘法的教科书，但都是一大堆枯燥https://icloudnative.io/go/Mon, 01 Jan 0001 00:00:00 +0000https://icloudnative.io/go/