support DSR in VXLAN tunneling mode

[brb]

[inju-song]

Hello, @brb @borkmann and Cilium team,

We are a team that provides K8s cluster and network dataplane, and we are currently developing to provide Cilium-based k8 cluster as our company's container platform.

Our K8s cluster need to provide DSR in the tunneling mode. So, we developed this feature and use this feature to provide the load balancer DSR function in the VXLAN environment.

Cilium doesn't have feature that to enable DSR in the tunneling mode, so we can contribute this feature to the Cilium community. So I'm curious about your future plans for this issue.

[borkmann]

Our K8s cluster need to provide DSR in the tunneling mode. So, we developed this feature and use this feature to provide the load balancer DSR function in the VXLAN environment.

Cilium doesn't have feature that to enable DSR in the tunneling mode, so we can contribute this feature to the Cilium community. So I'm curious about your future plans for this issue.

If you have implemented DSR with tunneling mode, that would be awesome and very much appreciated if you could upstream it to mainline Cilium.

Thanks Inju!

[brb]

@inju-song Hey, are you still on the issue?

[anfernee]

I am trying to look into this issue. Is the key to forward to a node that shares the same subnet as the service VIP? Is there any other caveat comparing to non-tunnel mode?

[julianwiedmann]

I am trying to look into this issue. Is the key to forward to a node that shares the same subnet as the service VIP? Is there any other caveat comparing to non-tunnel mode?

FYI, v1.14 will offer DSR using GENEVE tunneling (https://github.com/cilium/cilium/pull/23890).