Page MenuHomePhabricator

Handling inbound IPIP traffic on low traffic LVS k8s based realservers
Open, Needs TriagePublic

Description

Traffic is currently experimenting with IPIP encapsulation on IPVS using tcp-mss-clamper to perform MSS clamping and handling inbound IPIP traffic using the Linux networking stack IPIP and IP6IP6 support.

We should analyze the viability of this approach for realservers running on Kubernetes

Event Timeline

@akosiaris as mentioned on the meeting we need the following questions answered:

  • Is it OK to clamp all egress traffic on a k8s node?
  • IPIP encapsulation needs rp filtering disabled on the ipip / ip6ip6 interface in order to work, is that something calico supports?