搭建k8s集群验证子网是否正常

1.搭建k8s集群验证子网是否正常

2.准备集群IP

192.168.79.137 master
192.168.79.138 node01

3.验证子网IP

172.2.5.5

4. 我的网卡是ens33

ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.79.138  netmask 255.255.255.0  broadcast 192.168.79.255
        inet6 fe80::9fbc:628d:89b6:e0e4  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:a3:a0:82  txqueuelen 1000  (Ethernet)
        RX packets 887  bytes 526156 (513.8 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 657  bytes 104912 (102.4 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

5.在master节点添加IP

ip addr add 172.2.5.5/32 dev ens33

添加完如下：

[root@master ~]# ip -4 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 192.168.79.137/24 brd 192.168.79.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet 172.2.5.5/32 scope global ens33
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
5: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
7: kube-ipvs0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default
    inet 10.96.0.1/32 brd 10.96.0.1 scope global kube-ipvs0
       valid_lft forever preferred_lft forever
    inet 10.96.0.10/32 brd 10.96.0.10 scope global kube-ipvs0
       valid_lft forever preferred_lft forever
    inet 10.98.114.224/32 brd 10.98.114.224 scope global kube-ipvs0
       valid_lft forever preferred_lft forever
8: flannel.1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN group default
    inet 10.244.0.0/32 brd 10.244.0.0 scope global flannel.1
       valid_lft forever preferred_lft forever
9: cni0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default qlen 1000
    inet 10.244.0.1/24 brd 10.244.0.255 scope global cni0
       valid_lft forever preferred_lft forever

6.在node01执行添加一个路由，IP替换为master的IP地址192.168.79.137

ip route add 172.2.5.0/24 via 192.168.79.137 dev ens33

添加完如下：

[root@node01 ~]# ip route add 172.2.5.0/24 via 192.168.79.137 dev ens33
[root@node01 ~]# ip route show
default via 192.168.79.2 dev ens33 proto static metric 100
10.244.0.0/24 via 10.244.0.0 dev flannel.1 onlink
10.244.2.0/24 via 10.244.2.0 dev flannel.1 onlink
172.2.5.0/24 via 192.168.79.137 dev ens33
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1
192.168.79.0/24 dev ens33 proto kernel scope link src 192.168.79.138 metric 100
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1

7.在node01执行Ping命令

ping 172.2.5.5 

[root@node01 ~]# ping 172.2.5.5
PING 172.2.5.5 (172.2.5.5) 56(84) bytes of data.
64 bytes from 172.2.5.5: icmp_seq=1 ttl=64 time=0.261 ms
64 bytes from 172.2.5.5: icmp_seq=2 ttl=64 time=0.483 ms
64 bytes from 172.2.5.5: icmp_seq=3 ttl=64 time=0.464 ms
64 bytes from 172.2.5.5: icmp_seq=4 ttl=64 time=0.569 ms

如果通子网地址是开放的，如果不通子网地址没有开放，进行抓包。

8.测试完删除
sudo ip addr del <IP地址/子网掩码> dev <接口名>
ip addr add del 172.2.5.5/32 dev ens33