From 3639f9fb4a019e019e1d3f178cff9765fecf16bb Mon Sep 17 00:00:00 2001 From: Sri Saran Balaji Vellore Rajakumar Date: Fri, 30 Oct 2020 15:16:07 -0700 Subject: [PATCH] Update README for DISABLE_TCP_EARLY_DEMUX --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index c95d528328..7847106e76 100644 --- a/README.md +++ b/README.md @@ -432,10 +432,10 @@ Type: Boolean as a String Default: `false` -If `ENABLE_POD_ENI` is set to `true`, in order for the kubelet on the node to connect via TCP to pods that are using -per pod security groups, `DISABLE_TCP_EARLY_DEMUX` should be set to `true`. This will increase the local TCP connection -latency slightly, that is why it is not on by default. Details on why this is needed can be found in -this [#1212 comment](https://github.com/aws/amazon-vpc-cni-k8s/pull/1212#issuecomment-693540666). +If `ENABLE_POD_ENI` is set to `true`, in order for the kubelet to connect via TCP (for liveness or readiness probes) +to pods that are using per pod security groups, `DISABLE_TCP_EARLY_DEMUX` should be set to `true` for `amazon-k8s-cni-init` +container under `initcontainers`. This will increase the local TCP connection latency slightly. +Details on why this is needed can be found in this [#1212 comment](https://github.com/aws/amazon-vpc-cni-k8s/pull/1212#issuecomment-693540666). To use this setting, a Linux kernel version of at least 4.6 is needed on the worker node. ### ENI tags related to Allocation