Pod to pod communication not working with Cilium
Hi. I installed Cilium as per instructions in Dec 2023 lab exercises (using the supplied manifest cilium-cni.yaml).
I've noticed that after creating the nginx deployment and service in Exercise 3.4 that it can only be reached from the node the pod is running on. If I scale up the deployment then it seems to be hit and miss whether curl succeeds (I assume depending on which endpoint the request is handed off to by the service).
Running cilium connectivity tests as advised on the cilium website (using kubectl apply -n cilium-test -f https://raw.githubusercontent.com/cilium/cilium/1.15.0/examples/kubernetes/connectivity-check/connectivity-check.yaml) confirms the problem, with failure on all tests of the type pod-to-b-multi-node.... or host-to-b-multi-node.
Why would this be happening and what should be done to put it right?
I should point out that my two nodes are both in the same VPC in AWS and both have completely open security groups.
Cheers
Steve
Answers
-
Ahh I worked it out. Turns out that opening up TCP was not enough. Cilium relies on UDP encapsulated packets. Opening up everything on UDP fixed it.
1 -
Hi @smarshie73,
The introductory chapter has a demo video on AWS EC2 lab environment, which covers critical details such as SG rules, instance size, and recommended OS.
Regards,
-Chris0 -
@smarshie73 said:
Ahh I worked it out. Turns out that opening up TCP was not enough. Cilium relies on UDP encapsulated packets. Opening up everything on UDP fixed it.+1
Thanks so much!0
Categories
- All Categories
- 177 LFX Mentorship
- 177 LFX Mentorship: Linux Kernel
- 750 Linux Foundation IT Professional Programs
- 373 Cloud Engineer IT Professional Program
- 169 Advanced Cloud Engineer IT Professional Program
- 74 DevOps IT Professional Program - Discontinued
- 4 DevOps & GitOps IT Professional Program
- 99 Cloud Native Developer IT Professional Program
- 7.6K Training Courses & Learning Paths
- 1 AI & ML Training
- 1 Blockchain & Decentralized Identity Training
- 4 Cloud & Containers Training
- 1 Cybersecurity Training
- 2 DevOps & Site-Reliability Training
- 1 Linux Kernel Development Training
- 1 Networking Training
- 2 Open Source Best Practice Training
- 1 System Administration Training
- 1 System Engineering Training
- 1 Web & Application Development Training
- 792 Hardware
- 202 Drivers
- 68 I/O Devices
- 37 Monitors
- 95 Multimedia
- 173 Networking
- 91 Printers & Scanners
- 87 Storage
- 769 Linux Distributions
- 81 Debian
- 68 Fedora
- 22 Linux Mint
- 13 Mageia
- 24 openSUSE
- 150 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 356 Ubuntu
- 465 Linux System Administration
- 31 Cloud Computing
- 73 Command Line/Scripting
- Github systems admin projects
- 98 Linux Security
- 78 Network Management
- 101 System Management
- 46 Web Management
- 106 Mobile Computing
- 18 Android
- 73 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 392 Off Topic
- 121 Introductions
- 181 Small Talk
- 29 Study Material
- 955 Programming and Development
- 310 Kernel Development
- 627 Software Development
- 983 Software
- 375 Applications
- 182 Command Line
- 5 Compiling/Installing
- 68 Games
- 317 Installation
- Archived
- 2 LFD140 Class Forum
- 1.4K LFS258 Class Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)