daemon

Documentation

Index

• Constants
• func GetDefaultRouteDst(protocol string) net.IPNet
• func InitMetrics()
• func InitMirror(config *Configuration) error
• func InitNodeGateway(config *Configuration) error
• func InitOVSBridges() (map[string]string, error)
• func RunServer(config *Configuration, controller *Controller)
• func TurnOffNicTxChecksum(nicName string) error
• type Configuration
  • func ParseFlags() *Configuration
  • func (config *Configuration) Init(nicBridgeMappings map[string]string) error
• type Controller
  • func NewController(config *Configuration, stopCh <-chan struct{}, ...) (*Controller, error)
  • func (c *Controller) CreateIPSecKeys() error
  • func (c *Controller) FlushIPxfrmRule() error
  • func (c *Controller) ManageIPSecKeys() error
  • func (c *Controller) RemoveIPSecKeys() error
  • func (c *Controller) Run(stopCh <-chan struct{})
  • func (c *Controller) StartIPSecService() error
  • func (c *Controller) StartTProxyForwarding()
  • func (c *Controller) StartTProxyTCPPortProbe()
  • func (c *Controller) StopAndClearIPSecResouce() error
  • func (c *Controller) StopIPSecService() error
• type ControllerRuntime

Constants

const (
	ServiceSet                 = "services"
	SubnetSet                  = "subnets"
	SubnetNatSet               = "subnets-nat"
	SubnetDistributedGwSet     = "subnets-distributed-gw"
	LocalPodSet                = "local-pod-ip-nat"
	OtherNodeSet               = "other-node"
	IPSetPrefix                = "ovn"
	NatOutGoingPolicySubnetSet = "subnets-nat-policy"
	NatOutGoingPolicyRuleSet   = "natpr-"
)

const (
	NAT                        = util.NAT
	MANGLE                     = util.Mangle
	Prerouting                 = util.Prerouting
	Postrouting                = util.Postrouting
	Output                     = util.Output
	OvnPrerouting              = util.OvnPrerouting
	OvnPostrouting             = util.OvnPostrouting
	OvnOutput                  = util.OvnOutput
	OvnMasquerade              = util.OvnMasquerade
	OvnNatOutGoingPolicy       = util.OvnNatOutGoingPolicy
	OvnNatOutGoingPolicySubnet = util.OvnNatOutGoingPolicySubnet
)

const (
	OnOutGoingNatMark     = "0x90001/0x90001"
	OnOutGoingForwardMark = "0x90002/0x90002"
	TProxyOutputMark      = util.TProxyOutputMark
	TProxyOutputMask      = util.TProxyOutputMask
	TProxyPreroutingMark  = util.TProxyPreroutingMark
	TProxyPreroutingMask  = util.TProxyPreroutingMask
)

Functions

func GetDefaultRouteDst

func GetDefaultRouteDst(protocol string) net.IPNet

func InitMetrics

func InitMetrics()

func InitMirror

func InitMirror(config *Configuration) error

func InitNodeGateway

func InitNodeGateway(config *Configuration) error

InitNodeGateway init ovn0

func InitOVSBridges

func InitOVSBridges() (map[string]string, error)

InitOVSBridges initializes OVS bridges

func RunServer

func RunServer(config *Configuration, controller *Controller)

RunServer runs the cniserver

func TurnOffNicTxChecksum

func TurnOffNicTxChecksum(nicName string) error

Types

type Configuration

type Configuration struct {
	InstallCNIConfig bool
	CniConfDir       string
	CniConfFile      string
	CniConfName      string

	Iface                     string
	DPDKTunnelIface           string
	MTU                       int
	MSS                       int
	EnableMirror              bool
	MirrorNic                 string
	BindSocket                string
	OvsSocket                 string
	KubeConfigFile            string
	KubeClient                kubernetes.Interface
	KubeOvnClient             clientset.Interface
	NodeName                  string
	ServiceClusterIPRange     string
	ClusterRouter             string
	NodeSwitch                string
	EncapChecksum             bool
	EnablePprof               bool
	MacLearningFallback       bool
	PprofPort                 int32
	SecureServing             bool
	NetworkType               string
	DefaultProviderName       string
	DefaultInterfaceName      string
	ExternalGatewayConfigNS   string
	ExternalGatewaySwitch     string // provider network underlay vlan subnet
	EnableMetrics             bool
	EnableOVNIPSec            bool
	EnableArpDetectIPConflict bool
	KubeletDir                string
	EnableVerboseConnCheck    bool
	TCPConnCheckPort          int32
	UDPConnCheckPort          int32
	EnableTProxy              bool
	OVSVsctlConcurrency       int32
	SetVxlanTxOff             bool
	// contains filtered or unexported fields
}

Configuration is the daemon conf

func ParseFlags

func ParseFlags() *Configuration

ParseFlags will parse cmd args then init kubeClient and configuration TODO: validate configuration

func (*Configuration) Init

func (config *Configuration) Init(nicBridgeMappings map[string]string) error

type Controller

type Controller struct {
	ControllerRuntime
	// contains filtered or unexported fields
}

Controller watch pod and namespace changes to update iptables, ipset and ovs qos

func NewController

func NewController(config *Configuration, stopCh <-chan struct{}, podInformerFactory, nodeInformerFactory informers.SharedInformerFactory, kubeovnInformerFactory kubeovninformer.SharedInformerFactory) (*Controller, error)

NewController init a daemon controller

func (*Controller) CreateIPSecKeys

func (c *Controller) CreateIPSecKeys() error

func (*Controller) FlushIPxfrmRule

func (c *Controller) FlushIPxfrmRule() error

func (*Controller) ManageIPSecKeys

func (c *Controller) ManageIPSecKeys() error

func (*Controller) RemoveIPSecKeys

func (c *Controller) RemoveIPSecKeys() error

func (*Controller) Run

func (c *Controller) Run(stopCh <-chan struct{})

Run starts controller

func (*Controller) StartIPSecService

func (c *Controller) StartIPSecService() error

func (*Controller) StartTProxyForwarding

func (c *Controller) StartTProxyForwarding()

func (*Controller) StartTProxyTCPPortProbe

func (c *Controller) StartTProxyTCPPortProbe()

func (*Controller) StopAndClearIPSecResouce

func (c *Controller) StopAndClearIPSecResouce() error

func (*Controller) StopIPSecService

func (c *Controller) StopIPSecService() error

type ControllerRuntime

type ControllerRuntime struct {
	// contains filtered or unexported fields
}

ControllerRuntime represents runtime specific controller members