Lionel Jouin

NSM datapath monitoring on proxy and TAPA NSC

1

## Description Introduce optional NSM datapath monitoring/healing (or liveness check) checking if the connection is alive by pinging endpoint from the client. This option is for now available only between...

Update to newer Spire version

1

## Description ## Issue link ## Checklist - Purpose - [ ] Bug fix - [ ] New functionality - [ ] Documentation - [x] Refactoring - [ ] CI...

## Description Multi NAD allows multiple network interfaces to be added to the attractor pods. The feature is already developed, only some conditions prevented its usage. The interface name that...

## Description - Profilier disabled by default - Exposed on port 9995 by default except in fe where 9996 is used (to avoid port conflict with load-balancer) - Exposed via...

NSP Target Registry chained server

3

## Description * New target registry server pattern allowing future feature, e.g.: * Logger / Metrics / Trace * KeepAlive * NSP multi-replicas support * Current chain: watch handler ->...

Debugging Tool: privileged daemonset

43

## Description * Daemonset to have access to all worker * Sharing host network namespace to have access to NetNs of all pods * /run/netns and /run/contained shared * New...

Collect Metrics

2

**Is your feature request related to a problem? Please describe.** Add metrics to Meridio to improve observability tools. Here is some slides: https://docs.google.com/presentation/d/1yuiDj7H4NZTea7dJAKPK4SBvkHtZyWrn5HisNe1shuI And OpenTelemetry/Prometheus/Grafana stack deployment instruction: https://gist.github.com/LionelJouin/cfa15a569f1f23d8a84d43dc73b5f373 **Describe...

**Describe the bug** The proxy creates policy routes for each VIP address, so it creates a routing table with a new number for each of them. https://github.com/Nordix/Meridio/blob/v1.0.5/pkg/proxy/proxy.go#L393 At some point,...

**Is your feature request related to a problem? Please describe.** Users should be able to add VIP range and not only VIP with `/32` (for IPv4) and `128` (for IPv6)...

Allow child resources to be deployed before trench

1

**Is your feature request related to a problem? Please describe.** Currently, deploying an attractor, gateway, conduit, stream, flow and vip requires the user to specify an existing trench. If the...