# 2. 实施步骤
# 步骤1：部署K3s
# 步骤2：优化K3s配置
# 步骤3：优化容器运行时
# 步骤4：优化内核参数
# 步骤5：验证性能改进

# 3. 应用效果
# 提高了边缘节点的性能
# 减少了资源消耗
# 提高了系统的可靠性

# 部署K3s
curl -sfL https://get.k3s.io | sh –

# 优化K3s配置
cat > /etc/systemd/system/k3s.service.d/override.conf << 'EOF' [Service] Environment="K3S_NODE_NAME=fgedu-edge-01" Environment="K3S_KUBECONFIG_MODE=644" Environment="K3S_MAX_PODS=50" Environment="K3S_EXECUTOR=containerd" Environment="K3S_CLUSTER_CIDR=10.42.0.0/16" Environment="K3S_SERVICE_CIDR=10.43.0.0/16" Environment="K3S_KUBELET_ARGS=--cpu-manager-policy=static --cpu-cfs-quota=true --cpu-cfs-quota-period=100ms --memory-manager-policy=static --topology-manager-policy=best-effort" Environment="K3S_SERVER_ARGS=--disable-cloud-controller --disable-scheduler --disable-kube-proxy" EOF # 重启K3s服务 systemctl daemon-reload systemctl restart k3s # 优化容器运行时配置 cat > /etc/containerd/config.toml << 'EOF' version = 2 root = "/var/lib/containerd" state = "/run/containerd" [grpc] address = "/run/containerd/containerd.sock" uid = 0 gid = 0 [plugins] [plugins."io.containerd.runtime.v1.linux"] no_shim = false runtime = "runc" runtime_root = "" shim = "containerd-shim" shim_debug = false [plugins."io.containerd.runtime.v2.task"] platforms = ["linux/amd64", "linux/arm64"] [plugins."io.containerd.grpc.v1.cri"] sandbox_image = "k3s.gcr.io/pause:3.1" max_container_log_line_size = -1 [plugins."io.containerd.grpc.v1.cri.containerd"] snapshotter = "overlayfs" default_runtime_name = "runc" [plugins."io.containerd.grpc.v1.cri.containerd.runtimes"] [plugins."io.containerd.grpc.v1.cri.containerd.runtimes.runc"] runtime_type = "io.containerd.runtime.v1.linux" runtime_engine = "runc" runtime_root = "" [plugins."io.containerd.grpc.v1.cri.cni"] bin_dir = "/var/lib/rancher/k3s/data/current/bin" conf_dir = "/var/lib/rancher/k3s/agent/etc/cni/net.d" EOF # 重启containerd服务 systemctl restart containerd # 优化内核参数 cat > /etc/sysctl.d/edge.conf << 'EOF' # 网络优化 net.core.somaxconn = 65535 net.ipv4.tcp_max_syn_backlog = 65535 net.ipv4.tcp_fin_timeout = 30 net.ipv4.tcp_keepalive_time = 1200 net.ipv4.tcp_keepalive_probes = 5 net.ipv4.tcp_keepalive_intvl = 15 # 内存优化 vm.swappiness = 10 vm.overcommit_memory = 1 vm.overcommit_ratio = 90 # 文件系统优化 fs.file-max = 65536 EOF # 应用sysctl配置 sysctl -p /etc/sysctl.d/edge.conf # 部署应用 cat > app.yaml << 'EOF' apiVersion: apps/v1 kind: Deployment metadata: name: fgedu-edge-app namespace: default spec: replicas: 3 selector: matchLabels: app: fgedu-edge-app template: metadata: labels: app: fgedu-edge-app spec: containers: - name: fgedu-edge-app image: nginx:alpine resources: requests: memory: 64Mi cpu: 100m limits: memory: 128Mi cpu: 200m ports: - containerPort: 80 --- apiVersion: v1 kind: Service metadata: name: fgedu-edge-app namespace: default spec: selector: app: fgedu-edge-app ports: - port: 80 targetPort: 80 type: NodePort EOF kubectl apply -f app.yaml # 验证性能改进 kubectl get pods kubectl get services kubectl top nodes kubectl top pods

# 2. 实施步骤
# 步骤1：部署网络插件
# 步骤2：优化网络配置
# 步骤3：优化内核参数
# 步骤4：验证网络性能

# 3. 应用效果
# 提高了边缘网络的性能
# 减少了网络延迟
# 提高了系统的可靠性

# 部署K3s
curl -sfL https://get.k3s.io | sh –

# 查看网络插件状态
kubectl get pods -n kube-system

# 优化网络配置
# 修改Flannel配置
cat > /var/lib/rancher/k3s/agent/etc/cni/net.d/10-flannel.conf << 'EOF' { "name": "cbr0", "type": "flannel", "delegate": { "hairpinMode": true, "isDefaultGateway": true, "mtu": 1450 } } EOF # 重启K3s服务 systemctl restart k3s # 优化内核参数 cat > /etc/sysctl.d/network.conf << 'EOF' # 网络优化 net.core.somaxconn = 65535 net.ipv4.tcp_max_syn_backlog = 65535 net.ipv4.tcp_fin_timeout = 30 net.ipv4.tcp_keepalive_time = 1200 net.ipv4.tcp_keepalive_probes = 5 net.ipv4.tcp_keepalive_intvl = 15 net.ipv4.ip_forward = 1 net.ipv4.conf.all.forwarding = 1 net.ipv4.conf.default.forwarding = 1 net.ipv4.conf.all.rp_filter = 0 net.ipv4.conf.default.rp_filter = 0 EOF # 应用sysctl配置 sysctl -p /etc/sysctl.d/network.conf # 测试网络性能 # 测试网络延迟 iperf3 -s & iperf3 -c localhost -t 60 # 测试网络吞吐量 iperf3 -s & iperf3 -c localhost -t 60 -P 10 # 查看网络状态 netstat -s ss -s

# 2. 实施步骤
# 步骤1：部署Longhorn
# 步骤2：优化存储配置
# 步骤3：优化文件系统
# 步骤4：验证存储性能

# 3. 应用效果
# 提高了边缘存储的性能
# 减少了存储延迟
# 提高了系统的可靠性

# 部署K3s
curl -sfL https://get.k3s.io | sh –

# 部署Longhorn
kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/master/deploy/longhorn.yaml

# 查看Longhorn状态
kubectl get pods -n longhorn-system

# 优化Longhorn配置
kubectl patch configmap longhorn-default-setting -n longhorn-system –type=merge -p ‘{“data”: {“default-data-path”: “/var/lib/longhorn”, “backup-target”: “”, “backup-target-credential-secret”: “”, “default-replica-count”: “2”, “default-storage-class”: “longhorn”, “guaranteed-engine-cpu”: “0.25”, “default-longhorn-static-storage-class”: “longhorn-static”, “backupstore-poll-interval”: “300”, “taint-toleration”: “”, “system-managed-components-node-selector”: “”, “priority-class”: “”, “auto-salvage”: “true”, “auto-delete-pod-when-volume-detached-unexpectedly”: “false”, “disable-scheduling-on-cordoned-node”: “true”, “replica-soft-anti-affinity”: “false”, “storage-over-provisioning-percentage”: “200”, “storage-minimal-available-percentage”: “10”, “upgrade-checker”: “true”, “default-volume-recurrence”: “”, “concurrent-automatic-engine-upgrade-per-node-limit”: “1”, “default-node-selector”: “”, “default-engine-image”: “”, “default-backing-image-manager-image”: “”, “default-share-manager-image”: “”, “allow-recurring-job-while-volume-detached”: “false”, “disable-replica-rebuild”: “false”, “replica-replenishment-wait-interval”: “60”, “disable-revision-counter”: “false”, “revision-counter-enabled”: “true”, “snapshot-data-integrity”: “false”, “fast-replica-rebuild”: “false”, “priority-class-system-cluster-critical”: “system-cluster-critical”, “priority-class-system-node-critical”: “system-node-critical”, “engine-snapshot-limit”: “20”, “replica-snapshot-reserve-percentage”: “10”, “disable-snapshot-creation”: “false”, “create-default-disk-labeled-nodes”: “true”, “node-down-pod-deletion-policy”: “do-nothing”, “allow-node-drain-with-last-healthy-replica”: “false”, “mkfs-ext4-parameters”: “-O ^64bit”, “volume-attachment-recovery-policy”: “wait”, “restore-volume-recurrence-policy”: “enabled”, “default-volume-owner”: “”, “acme-email”: “”, “backing-image-cleanup-threshold”: “3”, “backing-image-cleanup-interval”: “12”, “guaranteed-engine-manager-cpu”: “0.1”, “guaranteed-replica-manager-cpu”: “0.1”, “replica-manager-pod-request-cpu”: “0.1”, “engine-manager-pod-request-cpu”: “0.1”, “replica-manager-pod-limit-cpu”: “”, “engine-manager-pod-limit-cpu”: “”, “replica-resync-node-timeout”: “60”, “replicas-hard-anti-affinity”: “false”, “longhorn-backend-store-pod-node-selector”: “”, “longhorn-ui-pod-node-selector”: “”, “longhorn-conversion-webhook-pod-node-selector”: “”, “longhorn-admission-webhook-pod-node-selector”: “”, “system-managed-pods-image-pull-policy”: “IfNotPresent”, “private-registry”: “”, “registry-secret”: “”, “insecure-registry”: “false”, “default-backup-target”: “”, “default-backup-target-credential-secret”: “”, “backupstore-poll-interval”: “300”, “backupstore-retry-attempts”: “3”, “backupstore-retry-interval”: “5”, “backupstore-retry-max-interval”: “60”, “backupstore-retry-factor”: “2”, “backupstore-disabled”: “false”, “backup-target”: “”, “backup-target-credential-secret”: “”, “backupstore-poll-interval”: “300”, “backupstore-retry-attempts”: “3”, “backupstore-retry-interval”: “5”, “backupstore-retry-max-interval”: “60”, “backupstore-retry-factor”: “2”, “backupstore-disabled”: “false”}}’

# 优化文件系统
# 格式化存储设备
mkfs.ext4 /dev/sdb

# 挂载存储设备
mkdir -p /var/lib/longhorn
cat >> /etc/fstab << 'EOF' /dev/sdb /var/lib/longhorn ext4 defaults,noatime,nodiratime,barrier=0 0 0 EOF mount -a # 测试存储性能 # 测试读写速度 dd if=/dev/zero of=/var/lib/longhorn/test.img bs=1G count=1 oflag=direct dd if=/var/lib/longhorn/test.img of=/dev/null bs=1G count=1 iflag=direct # 测试IOPS fio --name=randwrite --rw=randwrite --direct=1 --ioengine=libaio --bs=4k --size=1G --numjobs=4 --runtime=60 --group_reporting # 查看存储状态 df -h lsblk