Tuesday, 2022-05-24

kata-irc-bot<liuj97> @me1533 we are comparing our internal implementation and the PR, and will comment the PR once have some ideas:-)03:17
kata-irc-bot<gkurz> @bbolroc ^^07:01
kata-irc-bot<brueckner> @christophe On s390x, there is no mem hotplug (yet). There are some more work required on the virtio-mem area. There was a discussion on this topic some time ago: https://github.com/kata-containers/kata-containers/issues/141207:36
kata-irc-bot<me1533> This sounds really interesting. So you’re kube-proxy on the physical host is able to talk to each kata workloads ipvs server which then makes the subsequent requests to the kata containers ipvs to via netlink to write the rules?  I’m fairly new to how ipvs actually works, your “ipvs server” isn’t something open sourced already, right?16:24
kata-irc-bot<me1533> Does your setup also manage IPTables?16:26
kata-irc-bot<eric.ernst> This sounds like a very customer guest kernel, is that correct?16:26
kata-irc-bot<me1533> @hzt731tim how do you handle the iptables that are also necessary to use w/ ipvs?17:41
kata-irc-bot<weiling6> @hzt731tim If my understanding is correct, the setup in your use case is: one kube-proxy on a host, sending update commands towards multiple IPVS servers sitting in guest kernels. But if the use cases is to have different iptables rules for different guests, your approach may end up having multiple kube-proxys on a host and selectively connect kubeproxy to certain ipvs servers. This is why Eric adds a generic APIs to allow iptables18:51
kata-irc-botrestores on guest kernel, this can make IPVS on guest work independently without connecting to a common Kube-proxy.18:51
kata-irc-bot<eric.ernst> A heads up — we had added changes to leverage latest kernel’s core-scheduling features,  to better manage isolation of processes when running on HT enabled systems.  see https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/core-scheduling.html. If this sounds interesting to you, please check out the PR for enabling: https://github.com/kata-containers/kata-containers/pull/431018:56

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!