calico - support ebpf in AKS

Calico support ebpf in AKS. Tried that with version kubernetes 1.30. The default installation uses iptables dataplane but you can easily convert that into ebpf using the followings command:- 


kubectl patch installation.operator.tigera.io default --type merge -p '{"spec":{"calicoNetwork":{"linuxDataplane":"BPF"}}}'

Then watch for the calico operator by running 

watch kubectl get pods -n calico-system

It is important to look for restarts. 


Having kube-proxy at this stage can waste resources, therefor it can be removed

kubectl patch ds -n kube-system kube-proxy -p '{"spec":{"template":{"spec":{"nodeSelector":{"non-calico": "true"}}}}}' 

To revert back to IpTable please run the following command:-

kubectl patch installation.operator.tigera.io default --type merge -p '{"spec":{"calicoNetwork":{"linuxDataplane":"Iptables"}}}'

To revert kube-proxy change, you can edit the daemonset and remove the selector defined above.







Comments

Post a Comment

Popular posts from this blog

The specified initialization vector (IV) does not match the block size for this algorithm

Image
If you're getting  exception when trying to assigned key to a symmetric key and getting error message below :- The specified initialization vector (IV) does not match the block size for this algorithm And your code probably look like something below :- Then you need to go into debug mode and start looking into the supported size for IV as shown in diagram below :- As you can see, IV is 16 bytes, so you need to provide 16 bytes. The same goes for Key field too, if you're adding anything to it. As long as you provide a valid key size, then we're good and you're code will be ready.
Read more