Networking Module implements in-cluster networking functionality for the SIGHUP Distribution (SD) via Container Network Interface (CNI) plugins.
If you are new to SD please refer to the official documentation on how to get started with SD.
Kubernetes has adopted the Container Network Interface (CNI) specification for managing network resources on a cluster.
Networking Module makes use of CNCF Projects Tigera Calico and Cilium, open-source networking and network security solutions for containers, virtual machines, and bare-metal workloads, to bring networking features to the SIGHUP Distribution.
Networking Module provides the following packages:
| Package | Version | Description |
|---|---|---|
| cilium | 1.18.11 |
Cilium CNI Plugin. For cluster with < 200 nodes. |
| tigera | 1.40.13 (Calico 3.31.6) |
Tigera Operator, a Kubernetes Operator for Calico, provides pre-configured installations for on-prem and for EKS in policy-only mode. |
Click on each package to see its full documentation.
| Kubernetes Version | Compatibility | Notes |
|---|---|---|
1.32.x |
✅ | No known issues |
1.33.x |
✅ | No known issues |
1.34.x |
✅ | No known issues |
Check the compatibility matrix for additional information on previous releases of the module.
| Tool | Version | Description |
|---|---|---|
| furyctl | >=0.6.0 |
The recommended tool to download and manage SD modules and their packages. To learn more about furyctl read the official documentation. |
| kustomize | =3.5.3 |
Packages are customized using kustomize. To learn how to create your customization layer with kustomize, please refer to their repository. |
- List the packages you want to deploy and their version in a
Furyfile.yml
bases:
- name: networking
version: "v3.1.0"See
furyctldocumentation for additional details aboutFuryfile.ymlformat.
-
Execute
furyctl vendor -Hto download the packages -
Inspect the download packages under
./vendor/katalog/networking. -
Define a
kustomization.yamlthat includes the./vendor/katalog/networkingdirectory as a resource.
resources:
- ./vendor/katalog/networking/tigera/operator
- ./vendor/katalog/networking/tigera/on-premOr if you want to use Cilium:
resources:
- ./vendor/katalog/networking/cilium- To deploy the packages to your cluster, execute:
kustomize build . | kubectl apply -f -The Networking module includes out-of-the-box metrics monitoring and alerting features for its components.
You can monitor the status of the networking stack from the provided Grafana dashboards:
click on each screenshot for the full screen version
The following set of alerts is included with the networking module:
| Alert Name | Summary | Description |
|---|---|---|
| CalicoDataplaneFailuresHigh | A high number of dataplane failures within Felix are happening | Calico node pod {{ $labels.pod }} ({{ $labels.instance }}) has seen {{ $value }} dataplane failures within the last hour |
| CalicoIpsetErrorsHigh | A high number of ipset errors within Felix are happening | Calico node pod {{ $labels.pod }} ({{ $labels.instance }}) has seen {{ $value }} ipset errors within the last hour |
| CalicoIptableSaveErrorsHigh | A high number of iptable save errors within Felix are happening | Calico node pod {{ $labels.pod }} ({{ $labels.instance }}) has seen {{ $value }} iptable save errors within the last hour |
| CalicoIptableRestoreErrorsHigh | A high number of iptable restore errors within Felix are happening | Calico node pod {{ $labels.pod }} ({{ $labels.instance }}) has seen {{ $value }} iptable restore errors within the last hour |
| CalicoErrorsWhileLoggingHigh | A high number of errors within Felix while loggging are happening | Calico node pod {{ $labels.pod }} ({{ $labels.instance }}) has seen {{ $value }} errors while logging within the last ten minutes |
| TyphaPingLatency | Typha Round-trip ping latency to client (cluster {{ $labels.cluster }}) | Typha latency is growing (ping operations > 100ms). VALUE = {{ $value }}. LABELS = {{ $labels }} |
| TyphaClientWriteLatency | Typha unusual write latency (instance {{ $labels.cluster }}) | Typha client latency is growing (write operations > 100ms). VALUE = {{ $value }}. LABELS = {{ $labels }} |
| TyphaErrorsWhileLoggingHigh | A high number of errors within Typha while loggging are happening | Typha pod {{ $labels.pod }} ({{ $labels.instance }}) has seen {{ $value }} errors while logging within the last ten minutes |
Before contributing, please read first the Contributing Guidelines.
In case you experience any problems with the module, please open a new issue.
This module is open-source and it's released under the following LICENSE