add ipvs配置打开strictARP #1298

easzlab · Aug 1, 2023 · 70dd0ef · 70dd0ef
1 parent b99b744
commit 70dd0ef
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/roles/kube-node/templates/kube-proxy-config.yaml.j2 b/roles/kube-node/templates/kube-proxy-config.yaml.j2
@@ -15,3 +15,14 @@ healthzBindAddress: 0.0.0.0:10256
 hostnameOverride: "{{ K8S_NODENAME }}"
 metricsBindAddress: 0.0.0.0:10249
 mode: "{{ PROXY_MODE }}"
+{% if PROXY_MODE == "ipvs" %}
+ipvs:
+  excludeCIDRs: null
+  minSyncPeriod: 0s
+  scheduler: ""
+  strictARP: {{ ENABLE_IPVS_STRICT_ARP }}
+  syncPeriod: 30s
+  tcpFinTimeout: 0s
+  tcpTimeout: 0s
+  udpTimeout: 0s
+{% endif %}
diff --git a/roles/kube-node/vars/main.yml b/roles/kube-node/vars/main.yml
@@ -9,3 +9,6 @@ CLUSTER_DNS_SVC_IP: "{{ SERVICE_CIDR.split('.')[0] }}.{{ SERVICE_CIDR.split('.')
 
 # pod-max-pids
 POD_MAX_PIDS: 1024
+
+# Enable strict ARP by setting arp_ignore to 1 and arp_announce to 2
+ENABLE_IPVS_STRICT_ARP: false