Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Question] pod-to-pod networking failed #2194

Open
nelzhang02184516 opened this issue Nov 19, 2024 · 4 comments
Open

[Question] pod-to-pod networking failed #2194

nelzhang02184516 opened this issue Nov 19, 2024 · 4 comments
Labels
kind/question kind/question

Comments

@nelzhang02184516
Copy link

nelzhang02184516 commented Nov 19, 2024

What happened:

My cluster cannot pass the pod-to-pod(edge to edge) networking test
image

Follow the steps in the document it seems that the raven0 network card is not started
image

iz2vcbqht61jy7tsvof5u7z node raven-agent did not report any errors
image

What you expected to happen:

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

  • OpenYurt version:v1.4.4

  • Kubernetes version (use kubectl version):v1.25.6

  • OS (e.g: cat /etc/os-release):centos

  • Kernel (e.g. uname -a):3.10.0-1160.119.1.el7.x86_64

  • Install tools:

  • Others:

others
/kind question

@nelzhang02184516 nelzhang02184516 added the kind/question kind/question label Nov 19, 2024
@River-sh
Copy link
Contributor

River-sh commented Nov 19, 2024

The raven0 network interface is the VXLAN interface of this network domain. If there is only one node in this network domain, raven0 is not needed (no intra-domain container traffic forwarding) @nelzhang02184516

@nelzhang02184516
Copy link
Author

The raven0 network interface is the VXLAN interface of this network domain. If there is only one node in this network domain, raven0 is not needed (no intra-domain container traffic forwarding) @nelzhang02184516

Thank you for your answer. How can I set up communication between pods.I tried to obtain the traffic of the target node cni0 through tcpdump, but it didn't work. @River-sh

@River-sh
Copy link
Contributor

The raven gateway on the edge will build an IPSec VPN with the raven gateway in the center. You can exec into the raven container and use the ipsec command to check whether the VPN connection is success.

@nelzhang02184516
Copy link
Author

The raven gateway on the edge will build an IPSec VPN with the raven gateway in the center. You can exec into the raven container and use the ipsec command to check whether the VPN connection is success.

Thank you for your answer. After checking, I found that the security group did not open the UDP port. After adding security group rules, nodes can communicate normally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/question kind/question
Projects
None yet
Development

No branches or pull requests

2 participants