NodePort vs ClusterIP on Kubernetes, 쿠버네티스 서비스

Kubernetes(k8s)에 대해 전문가 수준의 이해를 돕기 위해 몇 가지 중요한 개념을 설명드리겠습니다. Kubernetes는 컨테이너화된 애플리케이션을 자동화하고 관리하는 오픈 소스 플랫폼입니다. 다음은 Kubernetes 전문가가 이해해야 할 핵심 주제들입니다.

1. Kubernetes의 핵심 컴포넌트

  • Pod: Kubernetes의 기본 배포 단위로, 하나 이상의 컨테이너를 포함합니다.
  • Node: 애플리케이션이 실행되는 물리적 또는 가상 머신입니다.
  • Cluster: 여러 노드가 모인 집합으로, 전체적으로 애플리케이션을 실행하는 단위입니다.
  • Control Plane: Kubernetes 클러스터를 관리하는 중앙 관리 엔티티입니다. 주요 구성

Kubernetes에서 NodePort와 ClusterIP를 동시에 지원하는 설정을 만들기 위해서는 Kubernetes Service를 사용하는 것이 핵심입니다. NodePort는 클러스터 외부에서 접근할 수 있도록 하며, ClusterIP는 클러스터 내부에서 접근할 수 있게 해줍니다.

Kubernetes의 Service는 기본적으로 하나의 방식으로 트래픽을 전달하지만, 하나의 애플리케이션에 대해 여러 방식으로 접근을 제공하는 방법은 가능합니다. 여기에서는 하나의 Service를 NodePort와 ClusterIP로 동시에 사용하는 설정을 구성하는 방법을 설명드리겠습니다.

설정 방법

  1. NodePort와 ClusterIP를 동시에 사용하는 방식
    • NodePort는 외부에서 접근할 수 있는 고정된 포트로, ClusterIP는 내부 클러스터에서의 접근을 위해 사용됩니다.
    • 두 가지 방식을 동시에 사용하려면 기본적으로 LoadBalancer 타입의 Service를 설정하고, externalTrafficPolicy: Local을 통해 두 방식의 트래픽을 모두 처리할 수 있도록 합니다.

예시 YAML 파일

apiVersion: v1
kind: Service
metadata:
  name: my-service
  namespace: default
spec:
  selector:
    app: my-app
  ports:
    - protocol: TCP
      port: 80         # ClusterIP 접근용 포트
      targetPort: 8080  # 실제 컨테이너의 포트
    - protocol: TCP
      port: 30000      # NodePort 접근용 포트
      targetPort: 8080  # 실제 컨테이너의 포트
      nodePort: 30080  # 고정된 NodePort 번호 (생략하면 자동 할당)
  type: LoadBalancer   # LoadBalancer를 사용하여 NodePort와 ClusterIP를 동시에 지원
  externalTrafficPolicy: Local

설명:

  • type: LoadBalancer: LoadBalancer 타입은 내부적으로 NodePort와 ClusterIP를 함께 사용할 수 있도록 설정됩니다. 외부에서 직접 NodePort로 접근할 수 있으며, 내부적으로는 ClusterIP로도 접근이 가능합니다.
  • ports: 여러 포트를 설정할 수 있습니다. 여기서는 ClusterIP 포트와 NodePort 포트를 각각 설정했습니다.
  • nodePort: 외부에서 접근할 수 있는 고정 포트입니다.
  • externalTrafficPolicy: Local: 트래픽을 로컬 노드로만 전달하여 효율적인 네트워크 트래픽 처리가 가능합니다.

결과

이 설정을 사용하면:

  • NodePort(30080)를 통해 클러스터 외부에서 접근이 가능하고,
  • ClusterIP(80)를 통해 클러스터 내부에서 접근할 수 있습니다.

이 방식은 외부와 내부에서 동시에 트래픽을 처리할 수 있는 환경을 제공하므로, 유연한 네트워크 설정이 가능합니다.

댓글

댓글 쓰기

이 블로그의 인기 게시물

Using the MinIO API via curl

Using the MinIO API via curl is straightforward, as MinIO is compatible with Amazon S3 API, so most commands follow a similar syntax. Here’s a guide on how to use curl with the MinIO API for some common operations like uploading, downloading, and managing objects. Prerequisites Access Key and Secret Key : Obtain your MinIO Access Key and Secret Key. MinIO Endpoint : Know your MinIO server endpoint, e.g., http://localhost:9000 . Bucket : You may need an existing bucket name, or create a new one using the commands below. Authentication Header For requests to work with MinIO, you need to include authentication in the headers. MinIO uses AWS Signature Version 4 for signing requests. Common Examples 1. List Buckets To list all buckets in your MinIO account, use: curl -X GET \ - -url "http://localhost:9000/" \ - H "Authorization: AWS <AccessKey>:<Signature>" 2. Create a Bucket To create a new bucket, use: curl -X PUT \ - -url "htt...
자세한 내용 보기

Install and run an FTP server using Docker

To install and run an FTP server using Docker, follow these steps. We’ll use the popular stilliard/pure-ftpd image, which is a lightweight and widely used FTP server. Step 1: Install Docker Make sure Docker is installed on your machine. If it isn’t, install it using the instructions below: Ubuntu/Debian: sudo apt update sudo apt install docker.io -y Mac: Install Docker Desktop from Docker's website . Windows: Install Docker Desktop from Docker's website . Verify Docker is installed: docker --version Step 2: Pull the FTP Server Docker Image Use the stilliard/pure-ftpd image, which is a simple and effective FTP server. docker pull stilliard/ pure -ftpd Step 3: Run the FTP Server Run the FTP server container using the following command: docker run -d --name ftp-server \ - p 21 : 21 -p 30000 - 30009 : 30000 - 30009 \ - e FTP_USER_NAME=testuser \ - e FTP_USER_PASS=testpass \ - e FTP_USER_HOME= /home/testuser \ stilliard/pure-ftpd Explanation...
자세한 내용 보기

PYTHONPATH, Python 모듈 환경설정

In Python, an environment variable for a module or Python environment is a way to configure certain settings or provide data paths before running a Python program. Environment variables can be used to: Control Python's runtime behavior (e.g., specifying paths for module search). Pass configuration or sensitive data (like API keys) to Python applications. Set up virtual environments for Python project isolation. Here are some common environment variables related to Python and its modules: 1. PYTHONPATH : This variable defines the search path for modules. It allows you to specify additional directories for Python to look for modules and packages. If you want Python to find your custom modules, you can set this environment variable. Example: export PYTHONPATH= "/path/to/your/module: $PYTHONPATH " In Windows: set PYTHONPATH=C:\ path \ to \your\ module ;%PYTHONPATH% This tells Python to also search for modules in /path/to/your/module . 2. PYTHONHOME : ...
자세한 내용 보기

Elasticsearch Ingest API

Elasticsearch Ingest is a feature that allows you to preprocess documents before indexing them. It consists of a pipeline of processors that can manipulate the contents of the documents. One way to test the effectiveness of an Ingest pipeline is to simulate its execution on a sample document. This can be done using the Elasticsearch Ingest API's "simulate" endpoint. To use the "simulate" endpoint, you need to provide a JSON object that represents the document you want to test, and a JSON object that represents the pipeline you want to simulate. Here is an example of how to use the "simulate" endpoint: curl -H 'Content - Type : application/json' -XGET 'localhost : 9200 /_ingest/pipeline/_simulate' -d '{ "pipeline" : { "description" : "Sample pipeline" , "processors" : [ { "set" : { "field" : "foo" , "value" :...
자세한 내용 보기

How to checkout branch of remote git, 깃 리모트 브랜치 체크아웃

To check out a branch from a remote Git repository, you can follow these steps: 1. Fetch the remote branches First, ensure that your local repository is aware of the remote branches by using git fetch . This updates your local references to the remote branches. git fetch origin 2. Check out the remote branch Once the remote branches are fetched, you can check out the desired branch using git checkout -b and specifying the remote branch. Command: git checkout -b < local -branch- name > origin/<remote-branch- name > Explanation: <local-branch-name> : The name you want to give to your local branch. origin/<remote-branch-name> : Refers to the branch on the remote called origin (which is the default name for the main remote repository) and the branch you want to check out. Example: If the remote branch is called feature-branch and you want to create a local branch with the same name, you would run: git checkout -b feature -branch origin / feature -...
자세한 내용 보기

Fundamentals of English Grammar #1

That's a great textbook table of contents! It covers the fundamental tenses in English. Here is a summary of the highlighted sections, with example sentences and key learning tips. PRESENT TIME Item Topic Example Sentence(s) Learning Summary 1-1 The simple present and the present progressive Simple Present: The sun rises in the east. (Fact/Habit) / Present Progressive: She is studying for her exam right now. (Action in progress) Simple Present is for facts, habits, and routines . Present Progressive is for actions happening at the moment of speaking or temporary situations . 1-3 Frequency adverbs I always drink coffee in the morning. / He is never late for class. These adverbs ( always, usually, often, sometimes, rarely, never ) describe how often an action occurs. Their position is key: before the main verb, but after the verb to be or auxiliary verbs. 1-4, 1-5 Final -s / Spelling of final -s/-es He read s a book. / She watch es TV. The final -s (or -es ) is adde...
자세한 내용 보기

You can use Sublime Text from the command line by utilizing the subl command

You can use Sublime Text from the command line by utilizing the subl command. Here’s how you can set it up and use it: 1. Install Sublime Text If you haven't already installed Sublime Text, download and install it from the Sublime Text website . 2. Add subl Command to Path (if not already done) On macOS: The subl command is typically added automatically, but if it isn't, follow these steps: Open Sublime Text . Press Cmd + Shift + P to open the command palette. Type Install 'subl' command in PATH and select the option to install it. If you prefer to do it manually, you can create a symbolic link: ln -s "/Applications/Sublime Text.app/Contents/SharedSupport/bin/subl" /usr/ local /bin/ subl On Linux: If the subl command isn't available, you can create a symbolic link to it: sudo ln -s /opt/ sublime_text /sublime_text /u sr /local/ bin /subl On Windows: You can add Sublime Text to the system PATH manually by: Right-clicking on This...
자세한 내용 보기

How to start computer vision ai

Getting started with computer vision AI can seem overwhelming, but breaking it down into steps makes it manageable. Here’s a guide to get you going: 1. Understand the Basics of Computer Vision and Machine Learning Computer Vision (CV): CV is a field of AI focused on enabling computers to interpret and process visual information. Start by understanding fundamental tasks such as image classification , object detection , segmentation , and tracking . Machine Learning and Deep Learning Basics: CV often relies on machine learning and, increasingly, deep learning techniques. Familiarize yourself with supervised learning (classification and regression), unsupervised learning, neural networks, and especially convolutional neural networks (CNNs) , which are widely used in CV. 2. Learn Python and Essential Libraries Python is the go-to language for AI and computer vision. Learn essential libraries: NumPy for numerical operations OpenCV for image processing (reading, transforming i...
자세한 내용 보기

Catch multiple exceptions in Python

In Python, you can catch multiple exceptions in a single except block by using a tuple of exception types. Here's an example: Code Example: Catching Multiple Exceptions def process_data (data) : try : # Simulate a potential error result = 10 / data # Could raise ZeroDivisionError or TypeError print(f "Result: {result}" ) except (ZeroDivisionError, TypeError) as e: print(f "Error caught: {e.__class__.__name__} - {e}" ) except Exception as e: # Catch any other exceptions print(f "Unexpected error: {e.__class__.__name__} - {e}" ) else : # Execute if no exception occurs print( "Processing completed successfully." ) finally : # Execute whether or not an exception occurs print( "Cleanup actions (if any)." ) # Test cases process_data( 5 ) # Valid input process_data( 0 ) # ZeroDivisionError process_data( "a" ...
자세한 내용 보기

git 명령어

$ git remote -v origin git@github.daumkakao.com:dennis-lee/vertx-sample.git (fetch) origin git@github.daumkakao.com:dennis-lee/vertx-sample.git (push) $ git log -2 commit 69b4285dd8d1df3debdc24c24a9ee2c22c797931 Author: dennis.lee Date: Mon May 29 18:29:43 2017 +0900 json prettify commit de8c8a8f8a55a4b9a4a89d13cfa04e5001004c1e Author: dennis.lee Date: Mon May 29 18:17:22 2017 +0900 added BodyHandler $ git status On branch master Your branch is up-to-date with 'origin/master'. Changes not staged for commit: (use "git add ..." to update what will be committed) (use "git checkout -- ..." to discard changes in working directory) modified: pom.xml Untracked files: (use "git add ..." to include in what will be committed) src/main/java/net/sample/ no changes added to commit (use "git add" and/or "git commit -a") $ git branch b1 $ git branch b1 * master $ git checkout -b b2 M pom.xml Switched ...
자세한 내용 보기