[Starlingx-discuss] CNI Chaining
Hi STX community, I ve been aware that Calico shall be used as the main CNI in Stx deployments. However, I am wondering what would be your opinion of using Cilium CNI chaining in conjunction with Calico - https://docs.cilium.io/en/v1.9/gettingstarted/cni-chaining-calico/ which would give “ With Cilium CNI chaining, the base network connectivity and IP address management is managed by the non-Cilium CNI plugin, but Cilium attaches eBPF programs to the network devices created by the non-Cilium plugin to provide L3/L4/L7 network visibility & policy enforcement and other advanced features like transparent encryption.” Do you think it’s safe enough and good practice overall to mix it up this way or it’s better to avoid doing it? Thank you Regards
Hi there - we discussed this on the community call today. While Cilium isn't officially supported in StarlingX, we encourage you to share your results if you want to do some testing/experimentation. Bill... -----Original Message----- From: bnovickovs@weecodelab.com <bnovickovs@weecodelab.com> Sent: Tuesday, December 15, 2020 11:18 PM To: starlingx-discuss@lists.starlingx.io Subject: [Starlingx-discuss] CNI Chaining [Please note this e-mail is from an EXTERNAL e-mail address] Hi STX community, I ve been aware that Calico shall be used as the main CNI in Stx deployments. However, I am wondering what would be your opinion of using Cilium CNI chaining in conjunction with Calico - https://docs.cilium.io/en/v1.9/gettingstarted/cni-chaining-calico/ which would give “ With Cilium CNI chaining, the base network connectivity and IP address management is managed by the non-Cilium CNI plugin, but Cilium attaches eBPF programs to the network devices created by the non-Cilium plugin to provide L3/L4/L7 network visibility & policy enforcement and other advanced features like transparent encryption.” Do you think it’s safe enough and good practice overall to mix it up this way or it’s better to avoid doing it? Thank you Regards _______________________________________________ Starlingx-discuss mailing list Starlingx-discuss@lists.starlingx.io http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss
participants (2)
-
bnovickovs@weecodelab.com
-
Zvonar, Bill