-
Notifications
You must be signed in to change notification settings - Fork 716
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Track when we can enable the ipvs mode for the kube-proxy by default #817
Comments
There are no current releases targeted for GA at this time. We are still assembling the GA criteria and gathering feedback from the community. |
Okay, thanks |
Only updating to track for this cycle. |
@kubernetes/sig-network-misc any updates on when ipvs will be the default? |
@caseydavenport any insight? |
cc: @Lion-Wei |
IPVS kube-proxy went GA in v1.11 - kubernetes/enhancements#265 However, there seem to be a few issues open affecting IPVS mode re: the version of iptables/ipset shipped in the kube-proxy container image that might inhibit its adoption in kubeadm, that we'll need to sort out first.
CC @m1093782566 |
Thanks, @bowei |
These issues you mentioned has already been fixed and we only need to cherry-pick the fixes. |
@caseydavenport @Lion-Wei @m1093782566 - Is there any reason for it to not be the default for all deployments? |
as a side note, our e2e by default does iptables currently. |
Hi, @timothysc , I think there still an issue kubernetes/kubernetes#70747 we should pay attention. |
k, I'm thinking we should make this a default for 1.14 out of the gate move the feature gate. |
clearly is not ready for defaulting |
Issues go stale after 90d of inactivity. If this issue is safe to close now please do so with Send feedback to sig-testing, kubernetes/test-infra and/or fejta. |
adding some feedback to this old issue. with Windows nodes in the picture and with the planned changes for multi-OS in the kube-proxy config things are moving in this space. given the complications i've seen in past reports with IPVS kernel modules missing or disabled on user nodes, i'm inclined to recommend that we do not enable IPVS as the default mode yet. iptables works and people are familiar with it, IPVS is advanced, faster and feels to me it should be the decisions on the side of cluster operators. |
@andrewsykim @lbernail Do you think we should close this issue ? I agree with @neolit123 's comments and I'm not sure if this issue makes sense to keep open. |
Yeah I agree, not sure that it was ever intended for IPVS to be the default. |
Yeah I think at one point we really wanted to try but we are still lacking tests. I'd say for mid-size clusters iptables is very good because it's very well tested. ipvs makes more sense in large clusters but still does not completely align with what support in iptables mode |
thanks for the comments. let's continue keeping iptables as the default with opt-in for IPVS, maybe one day making IPVS the default if kube-proxy has it as the default. |
xref: #816 and #782
cc @kubernetes/sig-network-feature-requests when is ipvs going GA?
The text was updated successfully, but these errors were encountered: