High-scale IPcache: Chapter 4 #25591
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pchaigno
added
sig/datapath
pchaigno
force-pushed
the
hs-ipcache-geneve-encap
branch
from
7d05313
to
912aad5
Compare
This commit exposes the tunneling protocol from the agent to the BPF code, to be used in a later commit. Two constants are also generated by the agent to hold the values for tunneling protocols VXLAN and GENEVE. Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
In high-scale ipcache mode, we have a special tunnel where the outer IP addresses are also the inner IP addresses. For that reason, we need to manually (using BPF helpers) decapsulate the ingressing packets or the Linux kernel would deliver encapsulated packets to the target pods. This manual decapsulation is only performed for VXLAN now. The present commit adds support for decapsulating GENEVE packets. The GENEVE header consists of a fixed-length part, and variable-length options. So when stripping off the encapsulation, also consider the options. Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com> Signed-off-by: Julian Wiedmann <jwi@isovalent.com>
This commit refactors the test logic into a function so that we can call this code twice with the two supported tunneling protocols. Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
pchaigno
force-pushed
the
hs-ipcache-geneve-encap
branch
from
912aad5
to
4dd73e1
Compare
|
/test |
nebril
approved these changes
May 23, 2023
jschwinger233
approved these changes
May 24, 2023
ti-mo
approved these changes
May 24, 2023
maintainer-s-little-helper
bot
added
the
ready-to-merge
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is in the context of the high-scale ipcache feature described at cilium/design-cfps#7.
This pull request adds support for GENEVE encapsulation in addition to the existing VXLAN support.
Updates: #25243.