github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-29 14:37:00 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #70325 from islinwb/ipvs_fix

Browse Source 
add module 'nf_conntrack' in ipvs prerequisite check
This commit is contained in:
k8s-ci-robot 2018-10-29 12:08:22 -07:00 committed by GitHub
commit d05622bee6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 17 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/proxy/ipvs/README.md
View File

@ -259,7 +259,7 @@ ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 match-set KUBE-EXT
Currently, local-up scripts, GCE scripts and kubeadm support switching IPVS proxy mode via exporting environment variables or specifying flags. Currently, local-up scripts, GCE scripts and kubeadm support switching IPVS proxy mode via exporting environment variables or specifying flags.
### Prerequisite ### Prerequisite
Ensure IPVS required kernel modules Ensure IPVS required kernel modules (**Notes**: use `nf_conntrack` instead of `nf_conntrack_ipv4` for Linux kernel 4.19 and later)
```shell ```shell
ip_vs ip_vs
ip_vs_rr ip_vs_rr

18
pkg/proxy/ipvs/proxier.go
View File

@ -163,6 +163,7 @@ var ipvsModules = []string{
"ip_vs_wrr", "ip_vs_wrr",
"ip_vs_sh", "ip_vs_sh",
"nf_conntrack_ipv4", "nf_conntrack_ipv4",
"nf_conntrack",
} }
// In IPVS proxy mode, the following flags need to be set // In IPVS proxy mode, the following flags need to be set
@ -489,8 +490,21 @@ func CanUseIPVSProxier(handle KernelHandler, ipsetver IPSetVersioner) (bool, err
wantModules.Insert(ipvsModules...) wantModules.Insert(ipvsModules...)
loadModules.Insert(mods...) loadModules.Insert(mods...)
modules := wantModules.Difference(loadModules).UnsortedList() modules := wantModules.Difference(loadModules).UnsortedList()
if len(modules) != 0 { var missingMods []string
return false, fmt.Errorf("IPVS proxier will not be used because the following required kernel modules are not loaded: %v", modules) ConntrackiMissingCounter := 0
for _, mod := range modules {
if strings.Contains(mod, "nf_conntrack") {
ConntrackiMissingCounter++
} else {
missingMods = append(missingMods, mod)
}
}
if ConntrackiMissingCounter == 2 {
missingMods = append(missingMods, "nf_conntrack_ipv4(or nf_conntrack for Linux kernel 4.19 and later)")
}
if len(missingMods) != 0 {
return false, fmt.Errorf("IPVS proxier will not be used because the following required kernel modules are not loaded: %v", missingMods)
} }
// Check ipset version // Check ipset version