Documentation ¶
Index ¶
Constants ¶
View Source
const ( // IPTable chains used by RouteAgent. SmPostRoutingChain = "SUBMARINER-POSTROUTING" SmInputChain = "SUBMARINER-INPUT" SmForwardChain = "SUBMARINER-FORWARD" PostRoutingChain = "POSTROUTING" InputChain = "INPUT" ForwardChain = "FORWARD" MangleTable = "mangle" RemoteCIDRIPSet = "SUBMARINER-REMOTECIDRS" LocalCIDRIPSet = "SUBMARINER-LOCALCIDRS" // In order to support connectivity from HostNetwork to remoteCluster, route-agent tries // to discover the CNIInterface[#] on the respective node and does SNAT of outgoing // traffic from that node to the corresponding CNIInterfaceIP. It is to be noted that // only traffic destined to the remoteClusters connected via Submariner is SNAT'ed and not // any other traffic. // At the same time, when Globalnet controller is deployed (i.e., clusters with overlapping // Service/Cluster CIDRs) it needs this information so that it can map the CNIInterfaceIP // with the corresponding globalIP assigned to the node. Since globalnet controller does // not run on all the worker-nodes and there is no well defined mechanism to get the // CNIInterfaceIP for each of the nodes, we annotate the node with CNIInterfaceIPInfo as // part of route-agent and this will subsequently be used in globalnet controller for // supporting connectivity from HostNetwork to remoteClusters. // [#] interface on the node that has an IPAddress from the clusterCIDR. CNIInterfaceIP = "submariner.io/cniIfaceIp" RouteAgentInterClusterNetworkTableID = 149 // To support connectivity for Pods with HostNetworking on the GatewayNode, we program // certain routing rules in table 150. As part of these routes, we set the source-ip of // the egress traffic to the corresponding CNIInterfaceIP on that host. RouteAgentHostNetworkTableID = 150 NATTable = "nat" FilterTable = "filter" OvnTransitSwitchIPAnnotation = "k8s.ovn.org/node-transit-switch-port-ifaddr" OvnZoneAnnotation = "k8s.ovn.org/zone-name" )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.