Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable checksum offload on the VXLAN tunnel for kernels <v5.7. #2811

Merged
merged 6 commits into from
May 18, 2021

Conversation

fasaxc
Copy link
Member

@fasaxc fasaxc commented May 14, 2021

Description

The combination of iptables MASQUERADE --random-fully and such kernels results in broken checksum calculations.

Fixes projectcalico/calico#3145

Todos

  • Unit tests (full coverage)
  • Integration tests (delete as appropriate) In plan/Not needed/Done
  • Documentation
  • Backport
  • Release note

Release Note

Disable VXLAN tunnel checksum offload on kernels <v5.7.  Works around https://github.com/projectcalico/calico/issues/3145.

@marvin-tigera marvin-tigera added this to the Calico v3.20.0 milestone May 14, 2021
@fasaxc fasaxc marked this pull request as ready for review May 14, 2021 14:08
@fasaxc fasaxc requested a review from a team as a code owner May 14, 2021 14:08
Copy link
Member

@nelljerram nelljerram left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

Copy link
Member

@caseydavenport caseydavenport left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

fasaxc added 6 commits May 17, 2021 14:50
Ignore infra logs during stop.
Log command output inline rather than buffer.
The combination of iptables MASQUERADE --random-fully and such
kernels results in broken checksum calculations.
Use reflection to access the feature fields to avoid needing
code or every field.
@fasaxc
Copy link
Member Author

fasaxc commented May 18, 2021

/merge-when-ready

@marvin-tigera
Copy link
Contributor

OK, I will merge the pull request when it's ready, leave the commits as is when I merge it, and leave the branch after I've merged it.

@champtar
Copy link

This disable VXLAN offload for RHEL/CentOS 8.x that is supposed to be fixed, any plan to improve the detection ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
5 participants