-
Notifications
You must be signed in to change notification settings - Fork 240
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
CNI to support transparent mode (#279)
* added changes in azure cni to support transparent mode * cni for calico policy controller * removed unused parameter * minor fix * addressed review comments * addressed review comments * modified vethname generation and the hostbveth prefix * removed setting arp for default gw * minor fix
- Loading branch information
1 parent
f816f8e
commit b7f6742
Showing
7 changed files
with
201 additions
and
14 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,153 @@ | ||
| package network | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "net" | ||
|
|
||
| "github.com/Azure/azure-container-networking/log" | ||
| "github.com/Azure/azure-container-networking/netlink" | ||
| "github.com/Azure/azure-container-networking/network/epcommon" | ||
| "github.com/Azure/azure-container-networking/platform" | ||
| ) | ||
|
|
||
| const ( | ||
| FAKE_GW_IP = "169.254.1.1/32" | ||
| DEFAULT_GW = "0.0.0.0/0" | ||
| ) | ||
|
|
||
| type TransparentEndpointClient struct { | ||
| bridgeName string | ||
| hostPrimaryIfName string | ||
| hostVethName string | ||
| containerVethName string | ||
| hostPrimaryMac net.HardwareAddr | ||
| containerMac net.HardwareAddr | ||
| hostVethMac net.HardwareAddr | ||
| mode string | ||
| } | ||
|
|
||
| func NewTransparentEndpointClient( | ||
| extIf *externalInterface, | ||
| hostVethName string, | ||
| containerVethName string, | ||
| mode string, | ||
| ) *TransparentEndpointClient { | ||
|
|
||
| client := &TransparentEndpointClient{ | ||
| bridgeName: extIf.BridgeName, | ||
| hostPrimaryIfName: extIf.Name, | ||
| hostVethName: hostVethName, | ||
| containerVethName: containerVethName, | ||
| hostPrimaryMac: extIf.MacAddress, | ||
| mode: mode, | ||
| } | ||
|
|
||
| return client | ||
| } | ||
|
|
||
| func setArpProxy(ifName string) error { | ||
| cmd := fmt.Sprintf("echo 1 > /proc/sys/net/ipv4/conf/%v/proxy_arp", ifName) | ||
| _, err := platform.ExecuteCommand(cmd) | ||
| return err | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) AddEndpoints(epInfo *EndpointInfo) error { | ||
| if err := epcommon.CreateEndpoint(client.hostVethName, client.containerVethName); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| containerIf, err := net.InterfaceByName(client.containerVethName) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| client.containerMac = containerIf.HardwareAddr | ||
|
|
||
| hostVethIf, err := net.InterfaceByName(client.hostVethName) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| client.hostVethMac = hostVethIf.HardwareAddr | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) AddEndpointRules(epInfo *EndpointInfo) error { | ||
| var routeInfoList []RouteInfo | ||
|
|
||
| // ip route add <podip> dev <hostveth> | ||
| // This route is needed for incoming packets to pod to route via hostveth | ||
| for _, ipAddr := range epInfo.IPAddresses { | ||
| var routeInfo RouteInfo | ||
| ipNet := net.IPNet{IP: ipAddr.IP, Mask: net.CIDRMask(32, 32)} | ||
| log.Printf("[net] Adding route for the ip %v", ipNet.String()) | ||
| routeInfo.Dst = ipNet | ||
| routeInfoList = append(routeInfoList, routeInfo) | ||
| if err := addRoutes(client.hostVethName, routeInfoList); err != nil { | ||
| return err | ||
| } | ||
| } | ||
|
|
||
| log.Printf("calling setArpProxy for %v", client.hostVethName) | ||
| if err := setArpProxy(client.hostVethName); err != nil { | ||
| log.Printf("setArpProxy failed with: %v", err) | ||
| return err | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) DeleteEndpointRules(ep *endpoint) { | ||
| var routeInfoList []RouteInfo | ||
|
|
||
| // ip route del <podip> dev <hostveth> | ||
| // Deleting the route set up for routing the incoming packets to pod | ||
| for _, ipAddr := range ep.IPAddresses { | ||
| var routeInfo RouteInfo | ||
| ipNet := net.IPNet{IP: ipAddr.IP, Mask: net.CIDRMask(32, 32)} | ||
| log.Printf("[net] Deleting route for the ip %v", ipNet.String()) | ||
| routeInfo.Dst = ipNet | ||
| routeInfoList = append(routeInfoList, routeInfo) | ||
| deleteRoutes(client.hostVethName, routeInfoList) | ||
| } | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) MoveEndpointsToContainerNS(epInfo *EndpointInfo, nsID uintptr) error { | ||
| // Move the container interface to container's network namespace. | ||
| log.Printf("[net] Setting link %v netns %v.", client.containerVethName, epInfo.NetNsPath) | ||
| if err := netlink.SetLinkNetNs(client.containerVethName, nsID); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) SetupContainerInterfaces(epInfo *EndpointInfo) error { | ||
| if err := epcommon.SetupContainerInterface(client.containerVethName, epInfo.IfName); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| client.containerVethName = epInfo.IfName | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) ConfigureContainerInterfacesAndRoutes(epInfo *EndpointInfo) error { | ||
| if err := epcommon.AssignIPToInterface(client.containerVethName, epInfo.IPAddresses); err != nil { | ||
| return err | ||
| } | ||
|
|
||
| return addRoutes(client.containerVethName, epInfo.Routes) | ||
| } | ||
|
|
||
| func (client *TransparentEndpointClient) DeleteEndpoints(ep *endpoint) error { | ||
| log.Printf("[net] Deleting veth pair %v %v.", ep.HostIfName, ep.IfName) | ||
| err := netlink.DeleteLink(ep.HostIfName) | ||
| if err != nil { | ||
| log.Printf("[net] Failed to delete veth pair %v: %v.", ep.HostIfName, err) | ||
| return err | ||
| } | ||
|
|
||
| return nil | ||
| } |