Nikita V. Shirokov
Nikita V. Shirokov
Hey, Daniel! In our setup each container (aka pod) has tunl interface in its namespace. So we terminate ipip there
Yeah. I think recalc offset as I proposed above seems easier. And in our internal setup it is actually works as expected (at least all FW features seems working as...
Thanks. We are mostly done with testing and I'm planning to upstream our internal Patches in next few weeks. One less thing to do :)
119 is resolved. Ipip is still not supported in upstream. But we have some internal patches and testing it with v4 and things looks promising right now. Hopefully I would...
We have custom patch and it works just fine for us. I just need to find time to do proper upstreaming... Honestly with amount of other work it is most...
Yeah. I will post it a bit later. We made it works for ipv4 but it is trivial to make the same for v6 if requires. The overall idea is...
https://gist.github.com/tehnerd/f217e4ebf75d08f8d6dc3ffee4392ae4 on top of 1.15 version
sudo sysctl -a | grep bpf ?
Hmm. Strange. Please collect 1 perf record -a -F 23 -- sleep 10 2 same perf as before (in your previous pictures; I guess you were using -g as well)....
Also how the traffic pattern looks like ? Are they real tcp streams or just random packets