From 6faccbc721941687757afb405a8036eb3927117b Mon Sep 17 00:00:00 2001 From: Karim Naufal Date: Fri, 3 Sep 2021 12:43:13 +0200 Subject: [PATCH] Cilium full native routing and DSR --- manifests/helm/cilium/values.yaml | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/manifests/helm/cilium/values.yaml b/manifests/helm/cilium/values.yaml index 9d8e786..a056655 100644 --- a/manifests/helm/cilium/values.yaml +++ b/manifests/helm/cilium/values.yaml @@ -15,10 +15,10 @@ ipam: # -- Configure the encapsulation configuration for communication between nodes. # Possible values: -# - disabled (breaks csi-controller) -# - vxlan (default) +# - disabled (native routing on the hetzner network) +# - vxlan # - geneve -tunnel: geneve +tunnel: disabled # -- Specify the IPv4 CIDR for native routing (ie to avoid IP masquerade for). # This value corresponds to the configured cluster-cidr. @@ -105,6 +105,11 @@ loadBalancer: # selection e.g. random or maglev algorithm: maglev + # -- mode is the operation mode of load balancing for remote backends + # e.g. snat, dsr, hybrid + # dsr requires native routing via tunnel disabled (set by default above), see https://docs.cilium.io/en/latest/gettingstarted/kubeproxy-free/ + mode: dsr + # -- The agent can be put into one of the three policy enforcement modes: # default, always and never. # ref: https://docs.cilium.io/en/stable/policy/intro/#policy-enforcement-modes