Overview of hybrid cloud node pools

更新时间:
复制 MD 格式

Hybrid cloud node pools allow you to add computing resources from on-premises data centers (IDCs) or multicloud environments as nodes to an ACK managed cluster (Pro) for unified management. This approach reduces the complexity of managing heterogeneous environments, enables flexible resource scheduling, and ensures high business availability.

Introduction to hybrid cloud node pools

Important

The hybrid cloud node pool feature for ACK managed clusters (Pro) is available through a whitelist. To enable this feature, contact your account manager.

Scope

Features

  • Unified resource access: Add server resources from on-premises IDCs or multicloud environments to an ACK managed cluster (Pro) in a standardized way. This provides a consistent experience for deployment, O&M, monitoring, upgrades, and security control, similar to that of on-cloud ECS nodes. This significantly reduces the complexity of managing heterogeneous environments.

  • Deep capability integration: Integrates core capabilities of ACK managed clusters (Pro), such as elastic scaling, observability (monitoring, logs, and tracing), security hardening, storage, and networking. This ensures a highly unified technology stack across cloud and on-premises environments.

  • High-performance networking: Uses the Terway Hybrid network plugin to enable network connectivity for containers between cloud and on-premises environments. It also supports the NodeLocal DNSCache component, which provides a DNS cache in your on-premises IDC. This improves DNS performance and stability, and reduces the load on your leased line.

  • Flexible capacity expansion: Addresses challenges such as cloud resource shortages or capacity limitations in a single region. You can flexibly expand cluster capacity by adding other cloud resource pools, which ensures business continuity and high availability.

image.png

Billing

When you use a hybrid cloud node pool in an ACK managed cluster (Pro), the total cost consists of three parts: a cluster management fee, a hybrid cloud node management fee (currently free during the invitational preview), and cloud product resource fees.

Node Pool Feature Comparison

Feature

Node pools

Hybrid cloud node pools

Create, edit, delete, and view

  • Create node pools in the console and configure basic information, network settings, instance specifications, storage settings, and the number of expected nodes.

  • Modify some configurations of existing node pools. For more information about the editable configuration items and notes, see the referenced document.

  • Delete node pools when they are no longer needed. The behavior of node release is affected by whether the expected number of nodes is enabled for the node pool and the billing method of the nodes.

  • View the details of a node pool, including basic configuration information, resource monitoring dashboards, node lists, and scaling activities.

For more information, see Create and manage a node pool.

  • Create a hybrid cloud node pool in the console and configure its basic information and network settings.

  • Modify some configurations of an existing hybrid cloud node pool.

  • Delete a hybrid cloud node pool when its nodes are no longer needed.

  • View the details of a hybrid cloud node pool, including basic configuration information, resource monitoring dashboards, and the hybrid cloud node list.

For more information, see Create and manage a hybrid cloud node pool.

Manual or automatic scaling

  • Manually adjust the expected number of nodes in a node pool to scale it in or out. This keeps the number of nodes at the desired level and saves resource costs.

    Some non-standard removal, modification, or release operations may prevent the node pool from scaling out as expected. For more information, see the referenced document.

  • Configure an automatic scaling solution for nodes. This automatically scales node resources when the cluster's capacity planning cannot meet application pod scheduling needs.

For more information, see Manually scale a node pool and Node scaling.

Not supported

Add existing nodes

Use the add existing nodes feature to add a purchased ECS instance to an ACK cluster as a worker node, or to rejoin a worker node to a node pool after removing it. This feature has some limits and notes. For more information, see the referenced document.

For more information, see Add existing nodes to an ACK cluster.

You must first register your hybrid cloud nodes as Alibaba Cloud managed instances before you can add them to an ACK cluster for unified management.

For more information, see Add a hybrid cloud node.

Remove nodes

If you no longer need certain nodes, remove them from the cluster or node pool. Follow the standard procedure for removal to avoid unexpected behavior.

For more information, see Remove nodes.

If some hybrid cloud nodes are no longer needed, you can remove them from the cluster or the hybrid cloud node pool.

Important

Removing a hybrid cloud node from a hybrid cloud node pool does not unregister it as an Alibaba Cloud managed instance.

For more information, see Remove a hybrid cloud node.

Upgrade the kubelet version

You can automatically upgrade clusters to automatically upgrade the kubelet and runtime.

Upgrade the kubelet and containerd versions of nodes in a node pool.

For more information, see Upgrade a node pool.

Upgrade the kubelet and containerd versions of hybrid cloud nodes in a hybrid cloud node pool.

Important

ACK managed ECS nodes can be automatically upgraded. For Alibaba Cloud managed instances, you must perform the upgrade manually.

Change the operating system

Upgrade the operating system version or change the operating system type. For example, switch an EOL operating system to ContainerOS or Alibaba Cloud Linux.

For more information, see Change the operating system of nodes in a node pool.

Not supported

Fix CVE vulnerabilities

You can enable automated O&M capabilities

Manually scan for CVE vulnerabilities and fix security vulnerabilities in the node operating system. Some CVE vulnerability fixes require a node restart. For more information about the feature and related notes, see the referenced document.

For more information, see Manually fix OS CVEs.

Provides CVE vulnerability scanning and fixing solutions for Kubernetes components such as containerd and kubelet in a hybrid cloud node pool.

Customize kubelet parameters for a node pool

Customize kubelet parameters for nodes at the node pool level to adjust node behavior. For example, adjust cluster resource reservation to manage resource usage.

For more information, see Customize the kubelet configurations of a node pool.

Customize the kubelet parameters for hybrid cloud nodes at the hybrid cloud node pool level to adjust node behavior. For example, you can adjust cluster resource reservations to manage resource usage.

Customize OS parameters for a node pool

Customize OS parameters for nodes at the node pool level to optimize system performance.

For more information, see Manage OS parameters of a node pool.

You can use Cloud Assistant to run preset commands for kernel parameter tuning.

Shared responsibility for security

The shared responsibility model is as follows:

  • Alibaba Cloud is responsible for:

    • The security of the control plane infrastructure, including computing, storage, and network resources.

    • For hybrid cloud node pools, providing vulnerability patches and version updates for Kubernetes components.

  • You are responsible for:

    • The network connectivity between hybrid cloud nodes and the ACK control plane.

    • The stability and security of the hybrid cloud nodes themselves, and the stability and security of the operating system on these nodes. This includes but is not limited to fixing security vulnerabilities and performing version updates.

    • The security protection of your business applications, and the secure configuration and updates of your hybrid cloud nodes.

Operating system compatibility

The following table lists the operating systems supported by hybrid cloud node pools. To use other operating systems, contact your account manager for an evaluation.

Image type

Platform

System architecture

Image name (including version)

Image ID

Alibaba Cloud Linux 3.2104 LTS 64-bit Container-Optimized Edition

Alibaba Cloud

x86_64

Alibaba Cloud Linux 3.2104 Container-Optimized

aliyun_3_x64_20G_container_optimized_20241226.vhd

Uses cgroup v2 by default

Alibaba Cloud Linux 3

Alibaba Cloud

x86_64

Alibaba Cloud Linux 3.2104 LTS 64-bit

aliyun_3_x64_20G_alibase_20240528.vhd

Alibaba Cloud Linux 3 (ARM)

Alibaba Cloud

arm64

Alibaba Cloud Linux 3.2104 LTS 64-bit ARM Edition

aliyun_3_arm64_20G_alibase_20240528.vhd

Alibaba Cloud Linux UEFI 3

Alibaba Cloud

x86_64

Alibaba Cloud Linux UEFI 3.2104 Security Enhanced

aliyun_3_x64_20G_uefi_alibase_20230727.vhd

Red Hat

Red Hat

x86_64

Red Hat Enterprise Linux (RHEL) 9.3 64-bit

Red Hat Enterprise Linux 9.3 64-bit

RHEL 9 and later use cgroup v2 by default

Ubuntu

Ubuntu

x86_64

Ubuntu 22.04 64-bit

Ubuntu 24.04 64-bit

None