Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CI gate for Nftables based environment #3055

Open
yboaron opened this issue Jun 20, 2024 · 1 comment
Open

Add CI gate for Nftables based environment #3055

yboaron opened this issue Jun 20, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@yboaron
Copy link
Contributor

yboaron commented Jun 20, 2024

A new [1] packetfilter module was recently added to Submariner,
the packetfilter component provides an API for creating chains, rules and sets in a generic way.
packetfilter supports both Nftables and IPTables underlying implementations ( default is IPTables).

In addition, an nftables-based backend for kube-proxy [2] has also recently been added.

With the changes mentioned above, submariner can be tested in an nftables based environment by:

  • KIND clusters deployment with kube-proxy backend set to nftables.
  • Updated submariner to use nftables underlying for packet filtering.

The ability to test Submariner in Nftables environment will help detect bugs and ensure that code changes do not break Submariner Nftables support.

[1]
https://docs.google.com/document/d/1PAjU61XUGaQ2qZZu_66clxadC997lsBGYcjydYEayR0/edit?usp=sharing
[2]
https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/3866-nftables-proxy/README.md

Copy link
Contributor

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further
activity occurs. Thank you for your contributions.

@github-actions github-actions bot added the stale label Oct 24, 2024
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Oct 31, 2024
@github-project-automation github-project-automation bot moved this from Todo to Done in Submariner 0.19 Oct 31, 2024
@tpantelis tpantelis removed the stale label Oct 31, 2024
@github-project-automation github-project-automation bot moved this to Backlog in Backlog Oct 31, 2024
@tpantelis tpantelis reopened this Oct 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: Backlog
Development

No branches or pull requests

3 participants