[Starlingx-discuss] CNI Chaining

Zvonar, Bill Bill.Zvonar at windriver.com
Wed Dec 16 15:43:11 UTC 2020


Hi there - we discussed this on the community call today.

While Cilium isn't officially supported in StarlingX, we encourage you to share your results if you want to do some testing/experimentation.

Bill...  

-----Original Message-----
From: bnovickovs at weecodelab.com <bnovickovs at weecodelab.com> 
Sent: Tuesday, December 15, 2020 11:18 PM
To: starlingx-discuss at lists.starlingx.io
Subject: [Starlingx-discuss] CNI Chaining

[Please note this e-mail is from an EXTERNAL e-mail address]

Hi STX community,

I ve been aware that Calico shall be used as the main CNI in Stx deployments. However, I am wondering what would be your opinion of using Cilium CNI chaining in conjunction with Calico - https://docs.cilium.io/en/v1.9/gettingstarted/cni-chaining-calico/ which would give

“ With Cilium CNI chaining, the base network connectivity and IP address management is managed by the non-Cilium CNI plugin, but Cilium attaches eBPF programs to the network devices created by the non-Cilium plugin to provide L3/L4/L7 network visibility & policy enforcement and other advanced features like transparent encryption.”

Do you think it’s safe enough and good practice overall to mix it up this way or it’s better to avoid doing it? Thank you

Regards

_______________________________________________
Starlingx-discuss mailing list
Starlingx-discuss at lists.starlingx.io
http://lists.starlingx.io/cgi-bin/mailman/listinfo/starlingx-discuss


More information about the Starlingx-discuss mailing list