[DCOS_OSS-674] Add support for minuteman to work with isolated virtual networks. Created: 27/Feb/17  Updated: 09/Nov/18  Resolved: 14/Jun/18

Status: Resolved
Project: DC/OS
Component/s: networking
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Medium
Reporter: Avinash Sridharan (Inactive) Assignee: Deepak Goel
Resolution: Done  
Labels: minuteman, networking
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Team: DELETE Networking Team


Currently minuteman does load balancing by setting up a kernel in the host network namespace. This works fine for containers on virtual networks, where the default route is always set towards the host network namespace. However, for virtual networks where the default route is outside the host network namespace (say through OVS, or a linux bridge) the traffice from containers never hits the host network namespace effectively making minuteman disfunctional in such an environment.


To support such virtual networks (over CNI) we need minuteman to create IPVS in each container's network namespace so the loadbalancing can kick in the container's network namespace instead of the host network namespace.

Comment by Deepak Goel [ 14/Jun/18 ]

One can use DCOS CNI plugin to do this https://github.com/dcos/dcos-cni

Generated at Tue May 24 05:04:27 CDT 2022 using JIRA 7.8.4#78004-sha1:5704c55c9196a87d91490cbb295eb482fa3e65cf.