Kubernetes生产实践系列之二十一：ServiceMesh之通过ambassador对Kubernetes外部的gRPC服务进行负载均衡

深碍√TFBOYSˉ_ 2023-03-13 13:04 32阅读 0赞

## **一、前言** ##

ambassador除了可以对Kubernetes上的gRPC服务进行负载均衡，还可以对外部gRPC服务进行负载均衡。这其中关键的一步是将外部gRPC服务注册为Kubernetes的service。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70][]

转载自https://blog.csdn.net/cloudvtech

## **二、部署外部服务并注册到Kubernetes** ##

### 2.1 部署外部服务 ###

将文章[《Kubernetes生产实践系列之十九：使用Ingress Nginx暴露Kubernetes上的gRPC服务》][Kubernetes_Ingress Nginx_Kubernetes_gRPC]里面的grpc\_server服务分别部署在172.3.0.11(k8s-master-03.novalocal)和172.3.0.17(k8s-master-02.novalocal)两个机器上

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 1][]

### 2.2 将外部服务部署到Kubernetes ###

external-grpcserver.yaml

apiVersion: v1
    kind: Service
    metadata:
      name: external-grpc
    spec:
      ports:
      - port: 50051
        targetPort: 50051
        protocol: TCP
    ---
    apiVersion: v1
    kind: Endpoints
    metadata:
      name: external-grpc
    subsets:
      - addresses:
        - ip: 172.3.0.11
        - ip: 172.3.0.17
        ports:
        - port: 50051
          protocol: TCP

部署结果：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 2][]

转载自https://blog.csdn.net/cloudvtech

## **三、通过ambassador暴露gRPC服务** ##

### 3.1 配置ambassador服务发现和负载均衡 ###

相较于基于etcd的客户端服务发现和负载均衡方案，类似于Ingress Nginx和ambassador的方案做到了负载均衡器所要达到的两大效果：

*  后端服务的发现和状态维护
 *  负载均衡策略
 *  gRPC的七层负载均衡

ambassador-external-grpc.yaml

---
    apiVersion: getambassador.io/v2
    kind: KubernetesEndpointResolver
    metadata:
      name: grpcserver-endpoint-resolver
    ---
    apiVersion: getambassador.io/v2
    kind: Mapping
    metadata:
      name: external-grpcserver
    spec:
      grpc: true
      prefix: /greet.GrpcService/
      rewrite: /greet.GrpcService/
      service: external-grpc.grpcserver:50051
      resolver: grpcserver-endpoint-resolver
      load_balancer:
        policy: round_robin

部署之后的ambassador控制面状态如下：

Ambassador Route Table：

![20200513214524741.png][]

Currently active Envoy Routes：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 3][]

Currently active Envoy Clusters：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 4][]

YAML input documents — these are what Ambassador is currently reading for its configuration：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 5][]

### 3.2 通过长连接访问服务 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 6][]

成功实现长连接负载均衡

### 3.3 通过短连接访问服务 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 7][]

占用了大量端口，gRPC服务被轮流访问到

转载自https://blog.csdn.net/cloudvtech

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70]: /images/20230312/94dbd6b3aeed459d8d27a9fa88fcd413.png
[Kubernetes_Ingress Nginx_Kubernetes_gRPC]: https://blog.csdn.net/cloudvtech/article/details/106058828
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 1]: /images/20230312/55f2a5efbbd344f9aa02347809aa5d2b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 2]: /images/20230312/d5c592e904204c31b1af0a7b431eaee8.png
[20200513214524741.png]: https://img-blog.csdnimg.cn/20200513214524741.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200513214614905.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200513214741142.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/20200513214833819.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20200513214058752.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200513214243726.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2Nsb3VkdnRlY2g=,size_16,color_FFFFFF,t_70