-
Notifications
You must be signed in to change notification settings - Fork 94
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
pkg: Do not set MTU greater than 1450 for VXLAN #68
Conversation
MTU of a VXLAN interface in a pod VM becomes greater than 1450, which is the maximum allowed size for VxLAN packets, when a CNI plugin such as Calico IPIP uses a MTU greater than 1450. This may cause undesirable packet fragmentation. This patch fixes the issue. Fixes confidential-containers#67 Signed-off-by: Yohei Ueda <yohei@jp.ibm.com>
Ran go mod tidy, since kata-container CCv0 was updated. Signed-off-by: Yohei Ueda <yohei@jp.ibm.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The code changes look good to me, and I've tested it out with the ibmcloud provider and was able to successfully create an nginx peer pod
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
@yoheiueda is it possible to accept the MTU as a parameter rather than a hard-coded const? i think Calico MTU is configurable. |
@huoqifeng MTU is not hard-coded. MTU of the interface created by a CNI plugin is detected at a worker node. Then, the detected MTU is set to the interface of the pod VM. When a detected MTU is greater than 1450, which is the maximum allowed MTU for VXLAN, MTU of the interface of the pod VM is set to 1450. cloud-api-adaptor/pkg/podnetwork/workernode.go Lines 114 to 118 in 41b75cc
cloud-api-adaptor/pkg/podnetwork/tunneler/vxlan/podnode.go Lines 67 to 71 in 41b75cc
|
MTU of a VXLAN interface in a pod VM becomes greater than 1450,
which is the maximum allowed size for VxLAN packets, when a CNI
plugin such as Calico IPIP uses a MTU greater than 1450. This may
cause undesirable packet fragmentation. This patch fixes the issue.
Fixes #67
Signed-off-by: Yohei Ueda yohei@jp.ibm.com