Dockin CNI - Dockin Container Network Interface

English | 中文

For more Dockin components, please visit https://github.com/WeBankFinTech/Dockin

Dockin cni

dockin cni used to manager pod network, interact with resource manager(rm), support:

• create single network
• create multiple network
• only support dockin-ipam ipam plugin
• only support bridge to manage network

dockin cni must work with

• dockin-cni, main plugin, used to call bridge to manage network, and communicate with rm
• dockin-ipam, used to assign ip
• bridge, used to manage network

cni configuration

configuration sample

{
    "cniVersion": "0.2.0",
    "name": "dockin-cni",
    "type": "dockin-cni",
    "confDir": "/etc/cni/dockin/net.d",
    "binDir": "/opt/cni/bin",
    "logFile": "/data/kubernetes/dockin-cni.log",
    "logLevel": "debug",
    "backend": "http://localhost:8080/rm"
}

all the parameters a described as follows:

• cniVersion, support version
• name, the name about this cni plugin
• type, binary execution file, always be dockin-cni
• confDir, the dir about network configuration
• binDir, the binary execution about bridge
• logFile, file to store the dockin-cni's log
• logLevel, log level, support error/info/debug
• backend, the rm service api address

rm data sample

{
    "code": 0,
    "reqId": "1234",
    "message": "success",
    "data": [
        {
            "type": "test",
            "podIp": "192.168.1.2",
            "subnetMask": "255.255.255.0",
            "gateway": "192.168.1.1",
            "ifName": "eth0",
            "master": true
        },
        {
            "type": "dockin",
            "podIp": "192.168.2.2",
            "subnetMask": "255.255.255.0",
            "gateway": "192.168.1.1",
            "ifName": "net0",
            "master": false
        }
    ]
}

in the sample:

• code, indicates the response code, 0 means success, otherwise failed
• message, indicates the description about this response, success or failed message
• data, is the array about network information
  • type, network type,
  • podIp, the ip which will assign to this network
  • subnetMask, mask about this network
  • gateway, the gateway about this network
  • ifName, the network device name about this network, which will show in ifconfig or ip a
  • master, weather the main network, which will show in kubectl get pods, and this must be single in a pod

network configuration

network configuration is the bridge configuration, for more details:

https://github.com/containernetworking/plugins/tree/master/plugins/main/bridge

network configuration are json files which stored in binDir set in the cni configuration. and will pass to kubelet create network.

{
  "cniVersion": "0.2.0",
  "name": "dockin",
  "type": "bridge",
  "bridge": "br1"
}

• cniVersion, indicate the version support in this cni
• name, the network name, must be same with the rm type
• type, only support bridge to manage network
• bridge, the bridge name about this network, multiple network can assign different bridge name

---

Dockin-ipam: static IP address management plugin

Overview

static IPAM is very simple IPAM plugin that assigns IPv4 and IPv6 addresses statically to container. This will be useful in case of assign same IP address in different vlan/vxlan to containers.

Example configuration

{
	"ipam": {
		"type": "static",
		"addresses": [
			{
				"address": "192.168.0.1/24",
				"gateway": "192.168.0.254"
			},
			{
				"address": "3ffe:ffff:0:01ff::1/64",
				"gateway": "3ffe:ffff:0::1"
			}
		],
		"routes": [
			{ "dst": "0.0.0.0/0" },
			{ "dst": "192.168.0.0/16", "gw": "192.168.1.1" },
			{ "dst": "3ffe:ffff:0:01ff::1/64" }
		],
		"dns": {
			"nameservers" : ["8.8.8.8"],
			"domain": "example.com",
			"search": [ "example.com" ]
		}
	}
}

Network configuration reference

• type (string, required): "static"
• addresses (array, optional): an array of ip address objects:
  • address (string, required): CIDR notation IP address.
  • gateway (string, optional): IP inside of "subnet" to designate as the gateway.
• routes (string, optional): list of routes add to the container namespace. Each route is a dictionary with "dst" and optional "gw" fields. If "gw" is omitted, value of "gateway" will be used.
• dns (string, optional): the dictionary with "nameservers", "domain" and "search".

Supported arguments

The following CNI_ARGS are supported:

• IP: request a specific CIDR notation IP addresses, comma separated

• GATEWAY: request a specific gateway address

  (example: CNI_ARGS="IP=192.168.1.1/24;GATEWAY=192.168.1.254")

The plugin also support following capability argument.

• ips: Pass IP addresses for CNI interface

The following args conventions are supported:

• ips (array of strings): A list of custom IPs to attempt to allocate, with prefix (e.g. '192.168.1.1/24')

Notice: If some of above are used at same time, only one will work according to the priorities below

1. capability argument
2. args conventions
3. CNI_ARGS