{"id":81593,"date":"2020-05-15T01:42:36","date_gmt":"2020-05-14T23:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2"},"modified":"2020-05-15T01:42:36","modified_gmt":"2020-05-14T23:42:36","slug":"tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2","title":{"rendered":"MetalLB L2 re\u017eiimis suunamise peene seadistamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"MetalLB L2 re\u017eiimis suunamise peene seadistamine\" src=\"\/wp-content\/uploads\/2020\/05\/d03a56702a85f4c8c80a6cac3e489980.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nHiljuti kohtusin \u00fcsna ebatavalise \u00fclesandega MetalLB marsruutimise seadistamiseks. See ei tohiks olla probleem, sest tavaliselt ei ole MetalLB jaoks vaja mingeid lisameetmeid, kuid meie puhul on tegemist piisavalt suure klastriga, millel on \u00fcsna lihtne v\u00f5rgu konfiguratsioon.<\/p>\n<p><\/p>\n<p>Selles artiklis r\u00e4\u00e4gin, kuidas seadistada source-based ja policy-based marsruutimist teie klastrisse suunatud v\u00e4listesse v\u00f5rkudesse.<\/p>\n<p><\/p>\n<p>Ma ei hakka \u00fcksikasjalikult peatuma MetalLB installimisel ja seadistamisel, kuna eeldan, et teil on juba mingit kogemust. Pakun, et liigume kohe asja juurde, nimelt marsruutimise seadistamisele. Seega on meil neli juhtumit:<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h1 id=\"sluchay-1-kogda-nastroyka-ne-trebuetsya\">Juhtum 1: Kui seadistamine ei ole vajalik<\/h1>\n<p><\/p>\n<p>Vaatame lihtsat juhtumit.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"MetalLB L2 re\u017eiimis suunamise peene seadistamine\" src=\"\/wp-content\/uploads\/2020\/05\/f79cc1169741b899c95e76d5d4cf60fc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Lisaks marsruutimise seadistamine ei ole vajalik, kui MetalLB v\u00e4lja antud aadressid asuvad samas alamv\u00f5rgus kui teie s\u00f5lmede aadressid.<\/p>\n<p><\/p>\n<p>N\u00e4iteks teil on alamv\u00f5rk <code>192.168.1.0\/24<\/code>, millel on marsruuter <code>192.168.1.1<\/code>, ja teie s\u00f5lmed saavad aadresse: <code>192.168.1.10-30<\/code>, siis saate MetalLB jaoks seadistada vahemiku <code>192.168.1.100-120<\/code> ja olla kindel, et need t\u00f6\u00f6tavad ilma igasuguste t\u00e4iendavate seadistusteta.<\/p>\n<p><\/p>\n<p>Miks see nii on? Sest teie s\u00f5lmedel on juba seadistatud marsruudid:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># ip route\ndefault via 192.168.1.1 dev eth0 onlink \n192.168.1.0\/24 dev eth0 proto kernel scope link src 192.168.1.10<\/code><\/pre>\n<p><\/p>\n<p>Ja jaotuse piires olevad aadressid saavad neid kasutada ilma t\u00e4iendavate sammudeta.<\/p>\n<p><\/p>\n<h1 id=\"sluchay-2-kogda-trebuetsya-dopolnitelnaya-nastroyka\">Juhtum 2: Kui on vajalik t\u00e4iendav seadistamine<\/h1>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"MetalLB L2 re\u017eiimis suunamise peene seadistamine\" src=\"\/wp-content\/uploads\/2020\/05\/02392fbc3c16bdf52f0c5ddaf5688e7d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Te peaksite seadistama t\u00e4iendavad marsruudid iga kord, kui teie noodidel ei ole seadistatud <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/lir\/ipv4\/\"   title=\"IP-aadressid\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"666\">IP-aadressid<\/a> v\u00f5i marsruuti alamv\u00f5rku, mille jaoks MetalLB aadresse v\u00e4ljastab.<\/p>\n<p><\/p>\n<p>Selgitan natuke l\u00e4hemalt. Iga kord, kui MetalLB aadressi v\u00e4ljastab, sarnaneb see lihtsa m\u00e4\u00e4ramisega:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">ip addr add 10.9.8.7\/32 dev lo<\/code><\/pre>\n<p><\/p>\n<p>Pange t\u00e4hele:<\/p>\n<p><\/p>\n<ul>\n<li><strong>a)<\/strong> Aadress m\u00e4\u00e4ratakse eelistuks <code>\/32<\/code> st, et marsruuti alamv\u00f5rku selle jaoks automaatselt ei lisandu (see on lihtsalt aadress)<\/li>\n<li><strong>b)<\/strong> Aadress kinnitatakse mistahes noodide liidesele (n\u00e4iteks loopback). Siinkohal tasub mainida Linuxi v\u00f5rgu stack'i omadust. Pole t\u00e4htis, millisele liidesele aadressi lisate, tuum k\u00e4sitleb alati arp-p\u00e4ringute ja saadab arp-vastuseid mistahes neist, see k\u00e4itumine on korrektne ja mida kasutatakse laialdaselt d\u00fcnaamilises keskkonnas nagu Kubernetes.<\/li>\n<\/ul>\n<p><\/p>\n<p>Seda k\u00e4itumist saab seadistada, n\u00e4iteks lubades range arp:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">echo 1 &gt; \/proc\/sys\/net\/ipv4\/conf\/all\/arp_ignore\necho 2 &gt; \/proc\/sys\/net\/ipv4\/conf\/all\/arp_announce<\/code><\/pre>\n<p><\/p>\n<p>Selles olukorras saadetakse arp-vastused ainult siis, kui liides sisaldab selgelt konkreetset IP-aadressi. See seade on kohustuslik, kui plaanite kasutada MetalLB-d ja teie kube-proxy t\u00f6\u00f6tab IPVS-re\u017eiimis.<\/p>\n<p><\/p>\n<p>Siiski ei kasuta MetalLB kerne arp-p\u00e4ringute t\u00f6\u00f6tlemiseks, vaid teeb seda ise kasutajaruumi tasemel. Seet\u00f5ttu ei m\u00f5juta see valik MetalLB t\u00f6\u00f6d.<\/p>\n<p><\/p>\n<p>Naaseme meie \u00fclesande juurde. Kui teie s\u00f5lmedel ei ole v\u00e4ljastatavate aadresside marsruuti, lisage see eelnevalt k\u00f5ikidele s\u00f5lmedele:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">ip route add 10.9.8.0\/24 dev eth1<\/code><\/pre>\n<p><\/p>\n<h1 id=\"sluchay-3-kogda-ponadobitsya-source-based-routing\">Juhtum 3: Kui on vajalik source-based routing<\/h1>\n<p><\/p>\n<p>Source-based routing tuleb seadistada, kui saate pakette l\u00e4bi eraldi v\u00e4rava, mitte selle, mis on teie vaikimisi seadistatud. Seet\u00f5ttu peavad ka vastavad paketid minema l\u00e4bi sama v\u00e4rava.<\/p>\n<p><\/p>\n<p>N\u00e4iteks, teil on sama alamv\u00f5rk <code>192.168.1.0\/24<\/code> kasutamiseks teie s\u00f5lmedele, kuid soovite v\u00e4liseid aadresse MetalLB abil v\u00e4ljastada. Oletame, et teil on mitu aadressi alamv\u00f5rgus <code>1.2.3.0\/24<\/code> VLAN 100, ja soovite neid kasutada Kubernetes teenustele v\u00e4ljastamiseks.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"MetalLB L2 re\u017eiimis suunamise peene seadistamine\" src=\"\/wp-content\/uploads\/2020\/05\/9360f35c4bfae25b12fc5aab2644b775.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Kui p\u00f6\u00f6rdute aadressile <code>1.2.3.4<\/code> teete p\u00e4ringuid teisest alamv\u00f5rgust kui <code>1.2.3.0\/24<\/code> ja oodata vastust. S\u00f5lm, mis hetkel on MetalLB aadressi jaoks meistriks <code>1.2.3.4<\/code>, saab paketi ruuterilt <code>1.2.3.1<\/code>, kuid vastus peab liikuma sama marsruudi kaudu, l\u00e4bi <code>1.2.3.1<\/code>.<\/p>\n<p><\/p>\n<p>Kuna meie s\u00f5lm on juba seadistatud vaikimisi gateway'iks <code>192.168.1.1<\/code>, siis vastus saadetakse vaikimisi sinna, mitte <code>1.2.3.1<\/code>, l\u00e4bi mille me paketi saime.<\/p>\n<p><\/p>\n<p>Kuidas sellises olukorras toime tulla?<\/p>\n<p><\/p>\n<p>Sellisel juhul peate valmistama k\u00f5ik oma s\u00f5lmed ette nii, et need oleksid valmis teenindama v\u00e4liseid aadresse ilma lisaseadeteta. Nii et \u00fclaltoodud n\u00e4ite puhul peate eelnevalt looma VLAN-liidese s\u00f5lmes:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">ip link add link eth0 name eth0.100 type vlan id 100\nip link set eth0.100 up<\/code><\/pre>\n<p><\/p>\n<p>Ja siis lisada marsruutide:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">ip route add 1.2.3.0\/24 dev eth0.100 table 100\nip route add default via 1.2.3.1 table 100<\/code><\/pre>\n<p><\/p>\n<p>Pange t\u00e4hele, et marsruute lisame eraldi marsruutimistabelisse <code>100<\/code> see sisaldab ainult kahte marsruuti, mis on vajalikud vastupaketi saatmiseks l\u00e4bi gateway <code>1.2.3.1<\/code>, mis asub liidese taga <code>eth0.100<\/code>.<\/p>\n<p><\/p>\n<p>N\u00fc\u00fcd peame lisama lihtsa reegli:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">ip rule add from 1.2.3.0\/24 lookup 100<\/code><\/pre>\n<p><\/p>\n<p>mis \u00fctleb selgelt: kui paketi allika aadress on <code>1.2.3.0\/24<\/code>, siis tuleb kasutada marsruutimistabelit <code>100<\/code>. See on meil juba kirjeldatud marsruut, mis saadab selle l\u00e4bi <code>1.2.3.1<\/code><\/p>\n<p><\/p>\n<h1 id=\"sluchay-4-kogda-ponadobitsya-policy-based-routing\">Juhtum 4: Kui on vajalik poliitikap\u00f5hine marsruutimine<\/h1>\n<p><\/p>\n<p>V\u00f5rgutopoloogia nagu eelnevas n\u00e4ites, kuid oletame, et soovite ka v\u00f5imalust p\u00f6\u00f6rduda v\u00e4listesse aadressidesse grupist <code>1.2.3.0\/24<\/code> teie pod'idest:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"MetalLB L2 re\u017eiimis suunamise peene seadistamine\" src=\"\/wp-content\/uploads\/2020\/05\/46f1f7c2826d87ec1fe8499862ccdd1a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Eelis seisneb selles, et p\u00f6\u00f6rdudes mis tahes aadressi poole <code>1.2.3.0\/24<\/code>, j\u00f5uab vastav pakett s\u00f5lme ja sellel on allika aadress vahemikus <code>1.2.3.0\/24<\/code> saab see usaldusv\u00e4\u00e4rselt saadetud <code>eth0.100<\/code>, kuid me soovime, et Kubernetes suunaks selle meie esimesse pod'i, mis algselt saatis p\u00e4ringu.<\/p>\n<p><\/p>\n<p>Selle probleemi lahendamine osutus keeruliseks, kuid see sai v\u00f5imalikuks poliitikap\u00f5hise marsruutimise t\u00e4nu:<\/p>\n<p><\/p>\n<p>Protsessi parema m\u00f5istmise nimel toon v\u00e4lja netfilter'i plokkskeemi:<br \/>\n<img decoding=\"async\" alt=\"MetalLB L2 re\u017eiimis suunamise peene seadistamine\" src=\"\/wp-content\/uploads\/2020\/05\/6b2f117c2dcddad85190156d566231c8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Alustuseks, nagu eelnevas n\u00e4ites, loome lisaks marsruuditabeli:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">ip route add 1.2.3.0\/24 dev eth0.100 table 100\nip route add default via 1.2.3.1 table 100<\/code><\/pre>\n<p><\/p>\n<p>N\u00fc\u00fcd lisame iptables'esse m\u00f5ned reeglid:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">iptables -t mangle -A PREROUTING -i eth0.100 -j CONNMARK --set-mark 0x100\niptables -t mangle -A PREROUTING -j CONNMARK --restore-mark\niptables -t mangle -A PREROUTING -m mark ! --mark 0 -j RETURN\niptables -t mangle -A POSTROUTING -j CONNMARK --save-mark<\/code><\/pre>\n<p><\/p>\n<p>Need reeglid m\u00e4rgistavad sisenevad \u00fchendused liideses <code>eth0.100<\/code>, t\u00e4histades k\u00f5iki pakette sildiga <code>0x100<\/code>, sama sildiga m\u00e4rgistatakse ka vastused \u00fche \u00fchenduse raames.<\/p>\n<p><\/p>\n<p>N\u00fc\u00fcd saame lisada marsruutimise reegli:<\/p>\n<p><\/p>\n<pre><code class=\"plaintext\">ip rule add from 1.2.3.0\/24 fwmark 0x100 lookup 100<\/code><\/pre>\n<p><\/p>\n<p>See t\u00e4hendab, et k\u00f5ik paketid, mille allika aadress on <code>1.2.3.0\/24<\/code> ja silt <code>0x100<\/code> peavad olema marsruutitud kasutades tabelit <code>100<\/code>.<\/p>\n<p><\/p>\n<p>Seega ei kuulu teised paketid, mis saavad teise liidese kaudu, sellele reeglile, mis v\u00f5imaldab neil olla marsruutitud Kubernetes'e tavaliste vahenditega.<\/p>\n<p><\/p>\n<p>On veel \u00fcks aga, Linuxis on olemas nn tagasitee filtrid, mis rikuvad kogu olukorra \u2014 nad teevad lihtsa kontrolli: k\u00f5ikide sisse tulevate pakettide puhul muudavad nad paketi allika aadressi saatja aadressiks ja kontrollivad, kas pakett saab minna sama liidese kaudu, mille kaudu seda saadi; kui ei, siis filtreeritakse see v\u00e4lja.<\/p>\n<p><\/p>\n<p>Probleem on selles, et meie puhul t\u00f6\u00f6tab see eba\u00fchtlaselt, aga me saame selle keelata:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">echo 0 &gt; \/proc\/sys\/net\/ipv4\/conf\/all\/rp_filter\necho 0 &gt; \/proc\/sys\/net\/ipv4\/conf\/eth0.100\/rp_filter<\/code><\/pre>\n<p><\/p>\n<p>Pange t\u00e4hele, et esimene k\u00e4sk kontrollib rp_filter globaalset k\u00e4itumist; kui seda ei keelata, siis teine k\u00e4sk ei toimi. Siiski j\u00e4\u00e4vad teised liidesed rp_filteriga sisse l\u00fclitatud.<\/p>\n<p><\/p>\n<p>Kuna mitte piirata filtri t\u00f6\u00f6d t\u00e4ielikult, saame kasutada rp_filter'i rakendust netfilter'is. Kasutades rpfilter'it iptables'i moodulina, on v\u00f5imalik seadistada piisavalt paindlikke reegleid, n\u00e4iteks:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">iptables -t raw -A PREROUTING -i eth0.100 -d 1.2.3.0\/24 -j RETURN\niptables -t raw -A PREROUTING -i eth0.100 -m rpfilter --invert -j DROP<\/code><\/pre>\n<p><\/p>\n<p>l\u00fclitage rp_filter sisse liidesel <code>eth0.100<\/code> k\u00f5igi aadresse v\u00e4lja arvatud <code>1.2.3.0\/24<\/code>.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/501842\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435 \u0442\u0430\u043a \u0434\u0430\u0432\u043d\u043e \u044f \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0449\u0430\u0446\u0438\u0438 \u0434\u043b\u044f MetalLB. \u0412\u0441\u0451 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u0442.\u043a. \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043b\u044f MetalLB \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043d\u043e \u0432 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0445\u0438\u0442\u0440\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c source-based \u0438 policy-based routing \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430. \u042f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":81594,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-81593","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435 \u0442\u0430\u043a \u0434\u0430\u0432\u043d\u043e \u044f \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0449\u0430\u0446\u0438\u0438 \u0434\u043b\u044f MetalLB. \u0412\u0441\u0451 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u0442.\u043a. \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043b\u044f MetalLB \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043d\u043e \u0432 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0445\u0438\u0442\u0440\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c source-based \u0438 policy-based routing \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430. \u042f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u043e\u043d\u043a\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f MetalLB \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 L2 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435 \u0442\u0430\u043a \u0434\u0430\u0432\u043d\u043e \u044f \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0449\u0430\u0446\u0438\u0438 \u0434\u043b\u044f MetalLB. \u0412\u0441\u0451 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u0442.\u043a. \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043b\u044f MetalLB \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043d\u043e \u0432 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0445\u0438\u0442\u0440\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c source-based \u0438 policy-based routing \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430. \u042f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-14T23:42:36+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-14T23:42:36+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00e4iendav marsruutimise seadistus MetalLB jaoks L2 re\u017eiimis | ProHoster","description":"Hiljuti kohtasin ma \u00fcsna ebatavalist \u00fclesannet MetalLB marsruutimise seadistamiseks. Tavalistes oludes ei ole MetalLB jaoks vaja mingeid lisak\u00e4ike, kuid meie juhul on piisavalt suur klaster, millel on \u00fcsna lihtne v\u00f5rgu konfiguratsioon. Selles artiklis r\u00e4\u00e4gin, kuidas seadistada source-based ja policy-based marsruutimist teie klastrite v\u00e4listesse v\u00f5rkudesse. Ma","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u043e\u043d\u043a\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f MetalLB \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 L2 | ProHoster","og:description":"\u041d\u0435 \u0442\u0430\u043a \u0434\u0430\u0432\u043d\u043e \u044f \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0449\u0430\u0446\u0438\u0438 \u0434\u043b\u044f MetalLB. \u0412\u0441\u0451 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u0442.\u043a. \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043b\u044f MetalLB \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u043d\u043e \u0432 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u043d\u0435\u0445\u0438\u0442\u0440\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c source-based \u0438 policy-based routing \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430. \u042f","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/tonkaya-nastrojka-marshrutizaczii-dlya-metallb-v-rezhime-l2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-14T23:42:36+00:00","article:modified_time":"2020-05-14T23:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"81593","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:55:42","updated":"2026-02-08 20:23:59"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/81593","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=81593"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/81593\/revisions"}],"predecessor-version":[{"id":157857,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/81593\/revisions\/157857"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/81594"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=81593"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=81593"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=81593"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}