Skip to content

Commit

Permalink
docs: Mention about KubeVirt in KPR docs
Browse files Browse the repository at this point in the history
To make LB to work in KubeVirt, socket-lb has to be disabled in the pod
netns.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
  • Loading branch information
brb committed Nov 10, 2021
1 parent b90000d commit 4fb5a1b
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion Documentation/gettingstarted/kubeproxy-free.rst
Original file line number Diff line number Diff line change
Expand Up @@ -498,7 +498,8 @@ Socket LoadBalancer Bypass in Pod Namespace

Cilium has built-in support for bypassing the socket-level loadbalancer and falling back
to the tc loadbalancer at the veth interface when a custom redirection/operation relies
on the original ClusterIP within pod namespace (e.g., Istio side-car).
on the original ClusterIP within pod namespace (e.g., Istio side-car) or due to the Pod's
nature the socket-level loadbalancer is ineffective (e.g., KubeVirt, Kata Containers).

Setting ``hostServices.hostNamespaceOnly=true`` enables this bypassing mode. When enabled,
this circumvents socket rewrite in the ``connect()`` and ``sendmsg()`` syscall bpf hook and
Expand Down

0 comments on commit 4fb5a1b

Please sign in to comment.