#Deploy ALB

#ALB

ALB is a custom resource that represents a load balancer. The alb-operator, which is embedded by default in all clusters, watches for create/update/delete operations on ALB resources and creates corresponding deployments and services in response.

For each ALB, a corresponding Deployment watches all Frontends and Rules attached to that ALB and routes requests to backends based on those configurations.

#Prerequisites

The high availability of the Load Balancer requires a VIP. Please refer to Configure VIP.

#Configure ALB

There are three parts to an ALB configuration.

# test-alb.yaml
apiVersion: crd.alauda.io/v2beta1
kind: ALB2
metadata:
  name: alb-demo
  namespace: cpaas-system
spec:
  address: 192.168.66.215
  config:
    vip:
      enableLbSvc: false
      lbSvcAnnotations: {}
    networkMode: host
    nodeSelector:
      cpu-model.node.kubevirt.io/Nehalem: "true"
    replicas: 1
    resources:
      alb:
        limits:
          cpu: 200m
          memory: 256Mi
        requests:
          cpu: 200m
          memory: 256Mi
      limits:
        cpu: 200m
        memory: 256Mi
      requests:
        cpu: 200m
        memory: 256Mi
    projects:
      - ALL_ALL
  type: nginx

#Resource Configuration

resource related field describes the deployment configuration for the alb.

#Networking Configuration

Networking fields describe how to access the ALB. For example, in host mode, alb will use hostnetwork, and you can access the ALB via the node IP.

#project configuration

Adding an ALB to a project means:

1. In the web UI, only users in the given project can find and configure this ALB.
2. This ALB will handle ingress resources belonging to this project. Please refer to ingress-sync.
3. In the web UI, rules created in project X cannot be found or configured under project Y.

If you enable port project and assign a port range to a project, this means:

1. You cannot create ports that do not belong to the port range assigned to the project.

#tweak configuration

there are some global config which can be tweaked in alb cr.

• bind-nic
• ingress-sync

#Operation On ALB

#Creating

#Using the web console.

Some common configuration is exposed in the web UI. Follow these steps to create a load balancer:

1. Navigate to Administrator.
2. In the left sidebar, click on Network Management > Load Balancer.
3. Click on Create Load Balancer.

Each input item in the web UI corresponds to a field of the CR:

#Using the CLI.

kubectl apply -f test-alb.yaml -n cpaas-system

#Update

#Using the web console

1. Enter Administrator.

2. In the left navigation bar, click Network Management > Load Balancer.

3. Click ⋮ > Update.

4. Update the network and resource configuration as needed.

   • Please set specifications reasonably according to business needs. You can also refer to the relevant How to properly allocate CPU and memory resources for guidance.

   • Internal routing only supports updating from Disabled state to Enabled state.

5. Click Update.

#Delete

#Using the web console

1. Enter Administrator.

2. In the left navigation bar, click Network Management > Load Balancer.

3. Click ⋮ > Delete, and confirm.

#Using the CLI

kubectl delete alb2 alb-demo -n cpaas-system

#Listener Ports (Frontend)

Frontend is a custom resource that defines the listener port and protocol for an ALB. Supported protocols: L7 (http|https|grpc|grpcs) and L4 (tcp|udp). In L4 Proxy use frontend to configure backend service directly. In L7 Proxy use frontend to configure listener ports, and use rule to configure backend service. If you need to add an HTTPS listener port, you should also contact the administrator to assign a TLS certificate to the current project for encryption.

#Prerequisites

Create a ALB first.

#Configure Frontend

# alb-frontend-demo.yaml
apiVersion: crd.alauda.io/v1
kind: Frontend
metadata:
  labels:
    alb2.cpaas.io/name: alb-demo
  name: alb-demo-00080
  namespace: cpaas-system
spec:
  port: 80
  protocol: http
  certificate_name: ""
  backendProtocol: "http"
  serviceGroup:
    session_affinity_policy: ""
    services:
      - name: hello-world
        namespace: default
        port: 80
        weight: 100

#Operation On Frontend

#Creating

#using the web console

1. Go to Container Platform.

2. In the left navigation bar, click Network > Load Balancing.

3. Click the name of the load balancer to enter the details page.

4. Click Add Port.

Each input item on the webui corresponds to a field of the CR

#using the CLI

kubectl apply -f alb-frontend-demo.yaml -n cpaas-system

#Subsequent Actions

For traffic from HTTP, gRPC, and HTTPS ports, in addition to the default internal routing group, you can set more varied back-end service matching rules. The load balancer will initially match the corresponding backend service according to the set rules; if the rule match fails, it will then match the backend services corresponding to the aforementioned internal routing group.

#Related Operations

You can click the ⋮ icon on the right side of the list page or click Actions in the upper right corner of the details page to update the default route or delete the listener port as needed.

#Logs and Monitoring

By combining logs and monitoring data, you can quickly identify and resolve load balancer issues.

#Viewing Logs

1. Go to Administrator.

2. In the left navigation bar, click on Network Management > Load Balancer.

3. Click on Load Balancer Name.

4. In the Logs tab, view the logs of the load balancer's runtime from the container's perspective.

#Monitoring Metrics

1. Go to Administrator.

2. In the left navigation bar, click on Network Management > Load Balancer.

3. Click on Load Balancer Name.

4. In the Monitoring tab, view the metric trend information of the load balancer from the node's perspective.

   • Usage Rate: The real-time usage of CPU and memory by the load balancer on the current node.

   • Throughput: The overall incoming and outgoing traffic of the load balancer instance.

For more detailed information about monitoring metrics please refer to ALB Monitoring.