Hero Image
Nodus

Image ovn4nfv-k8s-plugin NFN-Operator Exposes virtual, provider chaning CRDs to external world Programs OVN to create L2 switch Watches for PODs being coming up Assigns IP address ofr every network of the deployments Looks for replics and auto create routes for chaning to work Create LBs for distributing the load across CNF replicas OVN4NFV NFN-Agent Performs CNI operations Configuration VLAN and Routes in Linux Kernel(in case of ruotes, it cloud do it in both root and network namespace) Communicates with OVSDB to inform og provider interface.

January 1, 0001 Read
Hero Image
Nodus Dev Note

SFC for IPV6 vagrant file updte: mount a local file to the VM 1config.vm.synced_folder "/home/ubuntu/qiang/nodus-1.24/SDEWAN-SetUp/", "/home/vagrant/mnt" vagrant version update to 2.2.19 1vagrant_version=2.2.19 enable ipv4_forward in calico configuration update ovn deploy yaml: update image tag, update ovn_subnet 1 OVN_SUBNET: "10.154.141.0/18" 2OVN_GATEWAYIP: "10.154.141.1/18" 3 4 5 privileged: true 6 mountPropagation: Bidirectional 1apiVersion: k8s.plugin.opnfv.org/v1alpha1 2kind: NetworkChaining 3metadata: 4 name: example-networkchaining 5spec: 6 # Add fields here 7 chainType: "Routing" 8 routingSpec: 9 namespace: "default" 10 networkChain: "net=virtual-net1,app=slb,net=dync-net1,app=ngfw,net=dync-net2,app=sdewan,net=virtual-net2" 11 left: 12 - networkName: "left-pnetwork" 13 gatewayIp: "172.

January 1, 0001 Read
Hero Image
ODMS Install

Home Page: https://wiki.ith.intel.com/display/ITSODMS/Observability+Data+Management+Suite+Home [TOC] Operator Prometheus-operator https://prometheus-operator.dev/ https://github.com/prometheus-operator/prometheus-operator The prometheus operator manages the Promentheus Clust atop Kubernetes. Opentelemetry-operator https://github.com/open-telemetry/opentelemetry-operator Kubernetes reflector https://github.com/emberstack/kubernetes-reflector Reflector is a Kubernetes addon designed to monitor changes to resources (secrets and configmaps) and reflect changes to mirror resources in the same or other namespaces. OpenTelemetry Agent & Gateway Configure by CR opentelemetrycollectors.opentelemetry.io Agent collect Metric, Logs, and can add labels or attributes, and finally push the data to the opentelemetry gateway.

January 1, 0001 Read
Hero Image
OpenVPN Setup

Configuration Server side Server.conf 1# /etc/openvpn/server/server.conf 2local 10.0.0.230 3port 1194 4proto udp 5dev tun 6ca ca.crt 7cert server.crt 8key server.key 9dh dh.pem 10auth SHA512 11tls-crypt tc.key 12topology subnet 13client-config-dir /etc/openvpn/ccd # bind ip with client name 14route 192.166.0.0 255.255.255.0 # route add to server side 15push "route 192.167.0.0 255.255.255.0" # route add to client side 16server 10.8.0.0 255.255.255.0 17push "redirect-gateway def1 bypass-dhcp" 18ifconfig-pool-persist ipp.txt 19push "dhcp-option DNS 10.0.0.1" 20keepalive 10 120 21cipher AES-256-CBC 22user nobody 23group nogroup 24persist-key 25persist-tun 26verb 4 # log level, 1-11, bigger more details 27crl-verify crl.

January 1, 0001 Read
Hero Image
OS memory

What is the maximum size of the stack? It depends on your operating system. On Windows, the typical maximum size for a stack is 1MB, whereas it is 8MB on a typical modern Linux, although those values are adjustable in various ways. If the sum of your stack variables (including low-level overhead such as return addresses, stack-based arguments, return value placeholders, and alignment bytes) in the entire call stack exceeds that limit, you get a stack overflow, which typically takes down your program without any chance at recovery.

January 1, 0001 Read
Hero Image
OVN Open virtual Network

Open Virtual Network OVN(Open Virtual Network) is a series of daemons for the Open vSwitch that translate virtual network configuration into OpenFlow. OVN provides a higher-layer of abstraction than Open vSwitch, working with logical routers and logical switches, rather than flows. Why did we choose OVN for Nodus? One of the best programmable controller Hides OVS complexity Broader eco-system L2 CNI - Support for unicast, multicast, broadcast applications One site level IPAM - No IP address restriction with number of nodes

January 1, 0001 Read
Hero Image
Performance profiling

Linux Performance Counter Hardware Event CPU Performance Monitor Unit Instruction retired Processor clock cycles Cache Software Event Software counter/tracepoint Page fault process context Tracepints is the hook in the Linux kernel. 在特定代码执行的时候会被触发。 1ls /sys/kernel/debug/tracing/events ![image-20221201151615697](/Users/airren/Library/Application Support/typora-user-images/image-20221201151615697.png) If the machine not a baremetal, it can’t collect hardware event. For example in a esxi VM. Request LLC-load-misses Instructions Cycles The ODMS containes now: Dashboard consists of 12 panels based on following metrics:

January 1, 0001 Read
Hero Image
PKCS11

PKCS#11 Terminology Cryptoki Cryptoki(Cryptographic Token Interfaces) is a library(dll or so file) that is provided by the cryptographic device vendors. It contains an implementation of the PLCS#11 C header files. Every cryptographic device vendor provides its own PKCS#11 complaint library. Applications has to load this library in order to access the cryptographic device. Slots Slots are the logical partitions in the cryptographic device. In case of HSMs, there could be hundreds or more slots are available while in the case of smart cards, there could be only on slot available.

January 1, 0001 Read
Hero Image
React

React 入门笔记 1. 自定义组件—在html中使用react 1<!DOCTYPE html> 2<html> 3 <head> 4 <title>Hello React</title> 5 <meta charset="utf-8"> 6 </head> 7 <body> 8 <div id="app"> 9 <!--应用渲染位置 --> 10 </div> 11 <script src="react/build/react.js"></script> 12 <script src="react/build/react-dom.js"></script> 13 <script> 14 // 应用的JavaScript代码 15 ReactDOM.render( 16 React.DOM.h1(null, "hello world"), 17 document.getElementByID("app") 18 ) 19 </script> 20 </body> 21</html> React.DOM.*的使用 1React.DOM.h1( 2 { 3 id: "my-heading" // 第一参数用于指定该组件的DOM 属性 4 }, 5 "hello world" // 第二个参数定义该组件的子元素 6), 7 8// 可以有多个子元素 9Reat.

January 1, 0001 Read
Hero Image
Redis

bitmap 背景知识 文件： ​ 数据可以存在文件里，通过grep awk 查找文件。 ​ 如果文件变大，10M -> 1T , 查找会变慢。全量扫描IO。 数据库：（受限于IO） ​ mysql 存储， 存储分块，可以通过索引直接获取datapage中的数据。 索引也是数据块 二级索引，给索引建立索引 表很大，如果连接比较少，读 如果命中索引，查询还是毫秒级别 如果并发很大（足够大），如果每个查询的数据都是独立的，会收到吞吐的限制。 Redis+数据库：（内存与磁盘的折中方案） nosql -> key vale 短域名-> 长域名，计数 关联表的数据也放置在value中。只关注每条记录自身。 基于内存的 worker 单线程 6.x IO threads value 是有类型的 string、list、set、hash、zset；且每种类型有自己的本地方法。 数据向计算移动 计算向数据移动 连接池： socket list 线程池： 可以使用一个线程去处理连接池中的连接（nio，多路复用，epoll） 内存数据库：（受限于成本） Hana https://bytedance.feishu.cn/docs/doccnwV2ZxHYiLagaPOQSZ3ldlr 常识：s<- ms <-us <-ns 硬盘： 带宽、吞吐：百兆，1-2G pci-e/ nvme 3G/s 寻址时间 ms 内存: 寻址时间 ns redis 安装 http://db-engines.com http://redis.io 编译安装

January 1, 0001 Read
Hero Image
Reflect, Unsafe, and Cgo

Reflect Reflection Let Us Work with Types at Runtime But sometimes, relying on only compilation-time information is a limitation. You might need to work with variables at runtime using information that didn’t exist when the program was written. Maybe you’re trying to map data from a file or network request into a variable, or you want to build a single function that works with different types. In those situations, you need to use reflection.

January 1, 0001 Read
Hero Image
SDEWAN AWS test nodus

ICN-SDWAN-Virginia AWS2 IPv4 Prefixes Public IPv4 Private IPv4 ICN-SDWAN-Virginia-Eth1 3.211.4.230 10.20.0.232 ICN-SDWAN-Virginia-Eth0 34.230.111.156 10.20.0.23 ICN-SDWAN- California AWS5 IPv4 Prefixes Public IPv4 Private IPv4 ICN-SDWAN-California-Eth1 54.177.9.32 172.16.182.169 ICN-SDWAN-California-Eth0 54.241.18.249 172.16.182.237 iptables -I POSTROUTING -d 172.17.0.2/32 -j SNAT –to-source 192.169.0.4 -t nat iptables -I POSTROUTING -d 10.0.0.1/24 -j SNAT –to-source 10.8.0.1 -t nat AWS2 eth1 MAC Address 0e:4e:31:15:1a:ed 0e:4e:31:15:1a:ed 1ip addr add 10.20.0.232/20 dev 1eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 0e:4e:31:15:1a:ed brd ff:ff:ff:ff:ff:ff inet 10.

January 1, 0001 Read