LINE’s Private Cloud Yutaro Hayakawa October 28, 2020 • Messaging & many family services • 185 million global MAU • 3Tbps+ network traffic in total LINE Verda: LINE’s Private Cloud Service IaaS LB and XDP Based L4 Load Balancer Service • Part of our private cloud service since 2017 • 5100 private, 760 public VIPs • k8s CCM integration (Type: LoadBalancer) L4LB Node L4LB Architecture XDP DPlane

Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Environments via SSH VMs for Testing VM images Known Issues and Workarounds Further Assistance Integration Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity

Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity underlying networking infrastructure. This mode works well with: Native IPv6 networks In conjunction with cloud network routers If you are already running routing daemons Load Balancing Cilium implements distributed

Innovations 008 Server 009 DPUDirect 009 eNFS 011 HPCRunner 013 WayCa Scheduler 015 Cloud Computing and Cloud Native 017 HybridSched 017 KubeOS 018 NestOS 020 Rubik 021 Embedded 023 GearOS by the OpenAtom Foundation. openEuler is a digital infrastructure OS that fits into any server, cloud computing, edge computing, and embedded deployment. This secure, stable, and easy-to-use open source a full-stack atomization decoupling and Lego-style architecture, making it ideal for servers, cloud computing, edge computing, and embedded systems. This white paper aims to provide a comprehensive

Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity underlying networking infrastructure. This mode works well with: Native IPv6 networks In conjunction with cloud network routers If you are already running routing daemons Load Balancing Cilium implements distributed

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity underlying networking infrastructure. This mode works well with: Native IPv6 networks In conjunction with cloud network routers If you are already running routing daemons Load balancing Distributed load balancing

Multi Host Networking Security Datapath Failure Behavior Architecture Datapath Scale Kubernetes Integration Getting Help FAQ Slack GitHub Security Bugs Integrations Kubernetes Introduction Concepts supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity underlying networking infrastructure. This mode works well with: Native IPv6 networks In conjunction with cloud network routers If you are already running routing daemons Load balancing Distributed load balancing

Multi Host Networking Security Datapath Failure Behavior Architecture Datapath Scale Kubernetes Integration Getting Help FAQ Slack GitHub Security Bugs Integrations Kubernetes Introduction Concepts supported by Linux can be enabled. When to use this mode: This mode has minimal infrastructure and integration requirements. It works on almost any network infrastructure as the only requirement is IP connectivity underlying networking infrastructure. This mode works well with: Native IPv6 networks In conjunction with cloud network routers If you are already running routing daemons Load balancing Distributed load balancing

..................................................................... 317 6. Active Directory Integration .............................................................................................. ................. 344 3. Cloud images and uvtool ......................................................................................................... 346 4. Ubuntu Cloud ......................... installer offers the choice to install the system as a vanilla Ubuntu server, a MAAS5 bare-metal cloud rack controller or a MAAS6 region controller. If you select one of the MAAS options you will be asked

initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 3.7.4 Cloud system initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . modern network configuration for cloud . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 5.4.1 The modern network configuration for cloud with DHCP . . . . . . . . . . . . 2 The modern network configuration for cloud with static IP . . . . . . . . . . . . . . . . . . . . . . . . . 104 5.4.3 The modern network configuration for cloud with Network Manger . . . . . . . . .