[kata-dev] network implementation simplification for Kata

Xu Wang xu at hyper.sh
Wed Jun 12 02:59:55 UTC 2019


I am fine to remove the bridge and I don't think there are cases could only
work with the bridge.

My colleague Wei has some thoughts on the tc-filter as default, I am asking
him to post his concern here.

On Wed, Jun 12, 2019 at 3:57 AM Ernst, Eric <eric.ernst at intel.com> wrote:

> Hey cloudy-virt-buds –
>
>
>
> We have a long standing PR from Manohar Castelino in the runtime repo,
> [1], which removes the bridge networking model.
>
>
>
> In the bridge networking model, a bridge is created in the network
> namespace, and the veth is connected to the VM’s tap. This is the least
> performant and a bit more complex than necessary.  We recommend end-users
> utilize tc-filter (default) or macvtap.
>
>
>
> Zhang Wei brought up the concern of whether end-users could be using
> bridge today.  I hope they aren’t, but am now considering whether this
> should be a 2.0 candidate, and whether this should be considered a breaking
> change.
>
>
>
> Feedback?  I’d like input from other AC members here so we can make
> forward progress on this PR, and/or on 2.0 planning.
>
>
>
> Thanks,
>
> Eric
>
>
>
> [1] - https://github.com/kata-containers/runtime/pull/1214
>
>
> _______________________________________________
> kata-dev mailing list
> kata-dev at lists.katacontainers.io
> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
>


-- 
Xu Wang
Senior Staff Engineer at AntFin
A member of Kata Containers project
github/twitter/wechat: @gnawux
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.katacontainers.io/pipermail/kata-dev/attachments/20190612/a03a0dd8/attachment.html>


More information about the kata-dev mailing list