当网络fabric执行源/目的地址检查并丢弃不识别的地址流量时，可能需要启用IP-in-IP封装以避免丢包。在公共云环境中，由于对网络的控制有限，特别是无法在Calico节点和网络路由器之间建立BGP对等，这种情况很常见。Calico可以通过在IP池资源上启用IPIP选项来配置使用IP-in-IP。这使得Calico在将数据包路由到IP池范围内的工作负载IP时使用IP-in-IP封装。
Configuring IP-in-IP
If your network fabric performs source/destination address checks and drops traffic when those addresses are not recognized, it may be necessary to enable IP-in-IP encapsulation of the inter-workload traffic.
This is often the case for public-cloud environments where you have limited control over the network, and in particular you have no option to set up BGP peering between your Calico nodes and the network routers.
Calico can be configured to use IP-in-IP encapsulation by enabling the IPIP option on the IP pool resource. When enabled, Calico will use IP-in-IP encapsulation when routing packets to workload IPs falling in the IP pool range.
An optional mode field toggles when IP-in-IP is used, see following sections for details.
最低0.47元/天 解锁文章
扫一扫
1921
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
