Merge pull request #41544 from my-git9/2023-06-09-dl-adopt-cdn
sync blog: 2023-06-09-dl-adopt-cdn.mdpull/41591/head
Kubernetes Prow Robot
GitHub
commit
b654221cd6
|
|
@ -0,0 +1,191 @@
|
|||
---
|
||||
layout: blog
|
||||
title: "dl.k8s.io 采用内容分发网络（CDN）"
|
||||
date: 2023-06-09
|
||||
slug: dl-adopt-cdn
|
||||
---
|
||||
|
||||
<!--
|
||||
layout: blog
|
||||
title: "dl.k8s.io to adopt a Content Delivery Network"
|
||||
date: 2023-06-09
|
||||
slug: dl-adopt-cdn
|
||||
-->
|
||||
|
||||
<!--
|
||||
**Authors**: Arnaud Meukam (VMware), Hannah Aubry (Fast Forward), Frederico
|
||||
Muñoz (SAS Institute)
|
||||
-->
|
||||
**作者**：Arnaud Meukam (VMware), Hannah Aubry (Fast Forward), Frederico Muñoz (SAS Institute)
|
||||
|
||||
**译者**：[Xin Li](https://github.com/my-git9) (Daocloud)
|
||||
|
||||
<!--
|
||||
We're happy to announce that dl.k8s.io, home of the official Kubernetes
|
||||
binaries, will soon be powered by [Fastly](https://www.fastly.com).
|
||||
|
||||
Fastly is known for its high-performance content delivery network (CDN) designed
|
||||
to deliver content quickly and reliably around the world. With its powerful
|
||||
network, Fastly will help us deliver official Kubernetes binaries to users
|
||||
faster and more reliably than ever before.
|
||||
-->
|
||||
我们很高兴地宣布，官方 Kubernetes 二进制文件的主页 dl.k8s.io 很快将由
|
||||
[Fastly](https://www.fastly.com) 提供支持。
|
||||
|
||||
Fastly 以其高性能内容分发网络（CDN）而闻名，
|
||||
该网络旨在全球范围内快速可靠地分发内容。凭借其强大的网络，Fastly
|
||||
将帮助我们实现比以往更快、更可靠地向用户分发官方 Kubernetes 二进制文件。
|
||||
|
||||
<!--
|
||||
The decision to use Fastly was made after an extensive evaluation process in
|
||||
which we carefully evaluated several potential content delivery network
|
||||
providers. Ultimately, we chose Fastly because of their commitment to the open
|
||||
internet and proven track record of delivering fast and secure digital
|
||||
experiences to some of the most known open source projects (through their [Fast
|
||||
Forward](https://www.fastly.com/fast-forward) program).
|
||||
-->
|
||||
使用 Fastly 是在经过广泛的评估过程后做出的决定，
|
||||
在该过程中我们仔细评估了几个潜在的内容分发网络提供商。最终，我们选择
|
||||
Fastly 是因为他们对开放互联网的承诺以及在为一些著名的开源项目（通过他们的
|
||||
[Fast Forward](https://www.fastly.com/fast-forward)
|
||||
计划）提供快速和安全的数字体验方面的良好记录。
|
||||
|
||||
<!--
|
||||
## What you need to know about this change
|
||||
|
||||
- On Monday, July 24th, the IP addresses and backend storage associated with the
|
||||
dl.k8s.io domain name will change.
|
||||
- The change will not impact the vast majority of users since the domain
|
||||
name will remain the same.
|
||||
- If you restrict access to specific IP ranges, access to the dl.k8s.io domain
|
||||
could stop working.
|
||||
-->
|
||||
## 关于本次更改你需要了解的信息
|
||||
|
||||
- 7 月 24 日星期一，与 dl.k8s.io 域名关联的 IP 地址和后端存储将发生变化。
|
||||
- 由于域名将保持不变，因此更改不会影响绝大多数用户。
|
||||
- 如果你限制对特定 IP 范围的访问，则对 dl.k8s.io 域的访问可能会停止工作。
|
||||
|
||||
<!--
|
||||
If you think you may be impacted or want to know more about this change,
|
||||
please keep reading.
|
||||
-->
|
||||
如果你认为你可能会受到影响或想了解有关此次更改的更多信息，请继续阅读。
|
||||
|
||||
<!--
|
||||
## Why are we making this change
|
||||
|
||||
The official Kubernetes binaries site, dl.k8s.io, is used by thousands of users
|
||||
all over the world, and currently serves _more than 5 petabytes of binaries each
|
||||
month_. This change will allow us to improve access to those resources by
|
||||
leveraging a world-wide CDN.
|
||||
-->
|
||||
## 我们为什么要进行此更改
|
||||
|
||||
官方 Kubernetes 二进制文件网站 dl.k8s.io 被全世界成千上万的用户使用，
|
||||
目前**每月提供超过 5 PB 的二进制文件服务**。本次更改将通过充分利用全球
|
||||
CDN 来改善对这些资源的访问。
|
||||
|
||||
<!--
|
||||
## Does this affect dl.k8s.io only, or are other domains also affected?
|
||||
|
||||
Only dl.k8s.io will be affected by this change.
|
||||
-->
|
||||
## 这只影响 dl.k8s.io，还是其他域也受到影响？
|
||||
|
||||
只有 dl.k8s.io 会受到本次变更的影响。
|
||||
|
||||
<!--
|
||||
## My company specifies the domain names that we are allowed to be accessed. Will this change affect the domain name?
|
||||
|
||||
No, the domain name (`dl.k8s.io`) will remain the same: no change will be
|
||||
necessary, and access to the Kubernetes release binaries site should not be
|
||||
affected.
|
||||
-->
|
||||
## 我公司规定了允许我们访问的域名，此更改会影响域名吗？
|
||||
|
||||
不，域名（`dl.k8s.io`）将保持不变：无需更改，不会影响对 Kubernetes
|
||||
发布二进制文件站点的访问。
|
||||
|
||||
<!--
|
||||
## My company uses some form of IP filtering. Will this change affect access to the site?
|
||||
|
||||
If IP-based filtering is in place, it’s possible that access to the site will be
|
||||
affected when the new IP addresses become active.
|
||||
-->
|
||||
## 我的公司使用某种形式的 IP 过滤，此更改会影响对站点的访问吗？
|
||||
|
||||
如果已经存在基于 IP 的过滤，则当新 IP 地址变为活动状态时，对站点的访问可能会受到影响。
|
||||
|
||||
<!--
|
||||
## If my company doesn’t use IP addresses to restrict network traffic, do we need to do anything?
|
||||
|
||||
No, the switch to the CDN should be transparent.
|
||||
-->
|
||||
## 如果我的公司不使用 IP 地址来限制网络流量，我们需要做些什么吗？
|
||||
|
||||
不，切换到 CDN 的过程应该是透明的。
|
||||
|
||||
<!--
|
||||
## Will there be a dual running period?
|
||||
|
||||
**No, it is a cutover.** You can, however, test your networks right now to check
|
||||
if they can route to the new public IP addresses from Fastly. You should add
|
||||
the new IPs to your network's `allowlist` before July 24th. Once the transfer is
|
||||
complete, ensure your networks use the new IP addresses to connect to
|
||||
the `dl.k8s.io` service.
|
||||
-->
|
||||
## 会有双运行期吗？
|
||||
|
||||
**不，这是切换。**但是，你现在可以测试你的网络，检查它们是否可以从 Fastly
|
||||
路由到新的公共 IP 地址。 你应该在 7 月 24 日之前将新 IP 添加到你网络的 `allowlist`（白名单）中。
|
||||
切换完成后，确保你的网络使用新的 IP 地址连接到 `dl.k8s.io` 服务。
|
||||
|
||||
<!--
|
||||
## What are the new IP addresses?
|
||||
|
||||
If you need to manage an allow list for downloads, you can get the ranges to
|
||||
match from the Fastly API, in JSON: [public IP address
|
||||
ranges](https://api.fastly.com/public-ip-list). You don't need any credentials
|
||||
to download that list of ranges.
|
||||
-->
|
||||
## 新 IP 地址是什么？
|
||||
|
||||
如果你需要管理下载允许列表，你可以从 Fastly API 中获取需要匹配的范围，
|
||||
JSON 格式地址：[公共 IP 地址范围](https://api.fastly.com/public-ip-list)。
|
||||
|
||||
你不需要任何凭据即可下载该范围列表。
|
||||
|
||||
<!--
|
||||
## What next steps would you recommend?
|
||||
|
||||
If you have IP-based filtering in place, we recommend the following course of
|
||||
action **before July, 24th**:
|
||||
-->
|
||||
## 推荐哪些后续操作？
|
||||
|
||||
如果你已经有了基于 IP 的过滤，我们建议你**在 7 月 24 日**之前采取以下行动：
|
||||
|
||||
<!--
|
||||
- Add the new IP addresses to your allowlist.
|
||||
- Conduct tests with your networks/firewall to ensure your networks can route to
|
||||
the new IP addresses.
|
||||
|
||||
After the change is made, we recommend double-checking that HTTP calls are
|
||||
accessing dl.k8s.io with the new IP addresses.
|
||||
-->
|
||||
- 将新的 IP 地址添加到你的白名单。
|
||||
- 对你的网络/防火墙进行测试，以确保你的网络可以路由到新的 IP 地址。
|
||||
|
||||
进行更改后，我们建议仔细检查 HTTP 调用是否正在使用新 IP 地址访问 dl.k8s.io。
|
||||
|
||||
<!--
|
||||
## What should I do if I detect some abnormality after the cutover date?
|
||||
|
||||
If you encounter any weirdness during binaries download, please [open an
|
||||
issue](https://github.com/kubernetes/k8s.io/issues/new/choose).
|
||||
-->
|
||||
## 切换后发现异常怎么办？
|
||||
|
||||
如果你在二进制文件下载过程中遇到任何异常，
|
||||
请[提交 Issue](https://github.com/kubernetes/k8s.io/issues/new/choose)。
|
||||
Loading…
Reference in New Issue