Tomas Hruby
Tomas Hruby
@pf2rich what is your bond mode? My mode is 802.3ad layer3+4 so the vxlan tunnel between two nodes is always pinned to the same phys dev.
@esimest thanks for testing it! Much appreciated!
Although the fix for the issue that triggered this suggestion is merged, I will keep this it open for the sake of the suggestion.
What calico version do you use? Do you have enough IPs in ippools?
@Zorlin any update?
@astenmco I do not see that happening any time soon, even though essentially the only real problem is that our ebpf platform expects little endian arch. Afaict PPC64 is unfortunately...
As far as I can tell, the ebpf code should work OK on any LE architecture. We now support ebpf on arm64 LE without any major eng effort, but @hjiawei...
This seems related to iptables dataplane. Do you see an MASQUERADE rule hit and is it from kube-proxy or calico? It seems like this is kube-proxy's doing. I wonder whether...
That is correct observation. Unfortunately, ebpf dataplane does not support ip fragmentation as only the first fragment contains udp ports. The subsequent fragments cannot be matched reliably with the ongoing...
Thanks for the pointer. Problem with kfunc is that they are in "newer" kernels only and are not necessarily a stable API. But we could perhaps add it for kernels...