From c090a7fedbfe87f377faebd9fe0e06de07f24ff4 Mon Sep 17 00:00:00 2001 From: Christopher Tauchen Date: Mon, 23 Dec 2024 12:21:24 +0000 Subject: [PATCH] Fixes terminology for direct server return mode --- calico-cloud/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-20-2/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- calico-enterprise/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.17/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.18-2/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.19-2/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.20-1/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.20-2/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- calico/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.26/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.27/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.28/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- .../version-3.29/operations/ebpf/enabling-ebpf.mdx | 6 ++++-- 13 files changed, 52 insertions(+), 26 deletions(-) diff --git a/calico-cloud/operations/ebpf/enabling-ebpf.mdx b/calico-cloud/operations/ebpf/enabling-ebpf.mdx index ca8f92a173..7b41867d3c 100644 --- a/calico-cloud/operations/ebpf/enabling-ebpf.mdx +++ b/calico-cloud/operations/ebpf/enabling-ebpf.mdx @@ -232,9 +232,11 @@ The operator rolls out the change with a rolling update (non-disruptive) and the ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-cloud_versioned_docs/version-20-2/operations/ebpf/enabling-ebpf.mdx b/calico-cloud_versioned_docs/version-20-2/operations/ebpf/enabling-ebpf.mdx index ebf13f45a7..b899c910a5 100644 --- a/calico-cloud_versioned_docs/version-20-2/operations/ebpf/enabling-ebpf.mdx +++ b/calico-cloud_versioned_docs/version-20-2/operations/ebpf/enabling-ebpf.mdx @@ -232,9 +232,11 @@ The operator rolls out the change with a rolling update (non-disruptive) and the ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-enterprise/operations/ebpf/enabling-ebpf.mdx b/calico-enterprise/operations/ebpf/enabling-ebpf.mdx index 75ca38043d..bfc09542b5 100644 --- a/calico-enterprise/operations/ebpf/enabling-ebpf.mdx +++ b/calico-enterprise/operations/ebpf/enabling-ebpf.mdx @@ -203,9 +203,11 @@ The operator rolls out the change with a rolling update (non-disruptive) and the ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-enterprise_versioned_docs/version-3.17/operations/ebpf/enabling-ebpf.mdx b/calico-enterprise_versioned_docs/version-3.17/operations/ebpf/enabling-ebpf.mdx index 73f1d8646d..e1b3f41362 100644 --- a/calico-enterprise_versioned_docs/version-3.17/operations/ebpf/enabling-ebpf.mdx +++ b/calico-enterprise_versioned_docs/version-3.17/operations/ebpf/enabling-ebpf.mdx @@ -190,9 +190,11 @@ by having the operator do the update in two phases. ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-enterprise_versioned_docs/version-3.18-2/operations/ebpf/enabling-ebpf.mdx b/calico-enterprise_versioned_docs/version-3.18-2/operations/ebpf/enabling-ebpf.mdx index 3c9672f695..8bbaeb6065 100644 --- a/calico-enterprise_versioned_docs/version-3.18-2/operations/ebpf/enabling-ebpf.mdx +++ b/calico-enterprise_versioned_docs/version-3.18-2/operations/ebpf/enabling-ebpf.mdx @@ -190,9 +190,11 @@ by having the operator do the update in two phases. ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-enterprise_versioned_docs/version-3.19-2/operations/ebpf/enabling-ebpf.mdx b/calico-enterprise_versioned_docs/version-3.19-2/operations/ebpf/enabling-ebpf.mdx index c4fd629714..51d4bc1f85 100644 --- a/calico-enterprise_versioned_docs/version-3.19-2/operations/ebpf/enabling-ebpf.mdx +++ b/calico-enterprise_versioned_docs/version-3.19-2/operations/ebpf/enabling-ebpf.mdx @@ -213,9 +213,11 @@ The operator rolls out the change with a rolling update (non-disruptive) and the ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-enterprise_versioned_docs/version-3.20-1/operations/ebpf/enabling-ebpf.mdx b/calico-enterprise_versioned_docs/version-3.20-1/operations/ebpf/enabling-ebpf.mdx index 72ad8c4ea6..3dceb5f705 100644 --- a/calico-enterprise_versioned_docs/version-3.20-1/operations/ebpf/enabling-ebpf.mdx +++ b/calico-enterprise_versioned_docs/version-3.20-1/operations/ebpf/enabling-ebpf.mdx @@ -188,9 +188,11 @@ The operator rolls out the change with a rolling update (non-disruptive) and the ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico-enterprise_versioned_docs/version-3.20-2/operations/ebpf/enabling-ebpf.mdx b/calico-enterprise_versioned_docs/version-3.20-2/operations/ebpf/enabling-ebpf.mdx index b7f223a4d1..c6c23d8235 100644 --- a/calico-enterprise_versioned_docs/version-3.20-2/operations/ebpf/enabling-ebpf.mdx +++ b/calico-enterprise_versioned_docs/version-3.20-2/operations/ebpf/enabling-ebpf.mdx @@ -203,9 +203,11 @@ The operator rolls out the change with a rolling update (non-disruptive) and the ::: -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `kubectl`: diff --git a/calico/operations/ebpf/enabling-ebpf.mdx b/calico/operations/ebpf/enabling-ebpf.mdx index b5785da5ae..b9a6fdbac0 100644 --- a/calico/operations/ebpf/enabling-ebpf.mdx +++ b/calico/operations/ebpf/enabling-ebpf.mdx @@ -351,9 +351,11 @@ calicoctl patch felixconfiguration default --patch='{"spec": {"bpfEnabled": true When enabling eBPF mode, preexisting connections continue to use the non-BPF datapath; such connections should not be disrupted, but they do not benefit from eBPF mode’s advantages. -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `calicoctl`: diff --git a/calico_versioned_docs/version-3.26/operations/ebpf/enabling-ebpf.mdx b/calico_versioned_docs/version-3.26/operations/ebpf/enabling-ebpf.mdx index 762b225c82..164aa43ad0 100644 --- a/calico_versioned_docs/version-3.26/operations/ebpf/enabling-ebpf.mdx +++ b/calico_versioned_docs/version-3.26/operations/ebpf/enabling-ebpf.mdx @@ -329,9 +329,11 @@ calicoctl patch felixconfiguration default --patch='{"spec": {"bpfEnabled": true When enabling eBPF mode, preexisting connections continue to use the non-BPF datapath; such connections should not be disrupted, but they do not benefit from eBPF mode’s advantages. -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `calicoctl`: diff --git a/calico_versioned_docs/version-3.27/operations/ebpf/enabling-ebpf.mdx b/calico_versioned_docs/version-3.27/operations/ebpf/enabling-ebpf.mdx index 7492f66c9c..4f37650b7d 100644 --- a/calico_versioned_docs/version-3.27/operations/ebpf/enabling-ebpf.mdx +++ b/calico_versioned_docs/version-3.27/operations/ebpf/enabling-ebpf.mdx @@ -343,9 +343,11 @@ calicoctl patch felixconfiguration default --patch='{"spec": {"bpfEnabled": true When enabling eBPF mode, preexisting connections continue to use the non-BPF datapath; such connections should not be disrupted, but they do not benefit from eBPF mode’s advantages. -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `calicoctl`: diff --git a/calico_versioned_docs/version-3.28/operations/ebpf/enabling-ebpf.mdx b/calico_versioned_docs/version-3.28/operations/ebpf/enabling-ebpf.mdx index a347d0fdeb..f29904a88c 100644 --- a/calico_versioned_docs/version-3.28/operations/ebpf/enabling-ebpf.mdx +++ b/calico_versioned_docs/version-3.28/operations/ebpf/enabling-ebpf.mdx @@ -351,9 +351,11 @@ calicoctl patch felixconfiguration default --patch='{"spec": {"bpfEnabled": true When enabling eBPF mode, preexisting connections continue to use the non-BPF datapath; such connections should not be disrupted, but they do not benefit from eBPF mode’s advantages. -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `calicoctl`: diff --git a/calico_versioned_docs/version-3.29/operations/ebpf/enabling-ebpf.mdx b/calico_versioned_docs/version-3.29/operations/ebpf/enabling-ebpf.mdx index d9467b72a5..0a3d107084 100644 --- a/calico_versioned_docs/version-3.29/operations/ebpf/enabling-ebpf.mdx +++ b/calico_versioned_docs/version-3.29/operations/ebpf/enabling-ebpf.mdx @@ -351,9 +351,11 @@ calicoctl patch felixconfiguration default --patch='{"spec": {"bpfEnabled": true When enabling eBPF mode, preexisting connections continue to use the non-BPF datapath; such connections should not be disrupted, but they do not benefit from eBPF mode’s advantages. -### Try out DSR mode +### Try out direct server return mode -Direct return mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. +Direct server return (DSR) mode skips a hop through the network for traffic to services (such as node ports) from outside the cluster. +This reduces latency and CPU overhead but it requires the underlying network to allow nodes to send traffic with each other's IPs. +In AWS, this requires all your nodes to be in the same subnet and for the source/dest check to be disabled. DSR mode is disabled by default; to enable it, set the `BPFExternalServiceMode` Felix configuration parameter to `"DSR"`. This can be done with `calicoctl`: