macvtap-cni

README

macvtap-cni

THIS REPO HAS BEEN ARCHIVED.

It was donated to the upstream KubeVirt community, and is actively being developed under the KubeVirt organization.

Overview

This plugin allows users to define Kubernetes networks on top of existing interfaces. By using the macvtap plugin, the user is able to directly connect the pod interface to an host interface.

In order to use this plugin, Multus must be installed on all hosts and NetworkAttachmentDefinition CRD created.

This repo is a rebase of the initial CNI PR [0].

Example Configuration

{
    "name": "mynet",
    "type": "macvtap",
    "master": "eth0",
    "mode": "bridge",
    "mtu": 1500
}

Network Configuration Reference

• name (string, required): the name of the network.
• type (string, required): "macvtap".
• master (string, required): name of the parent interface.
• mode (string, optional): mode of the communication between endpoints. Can be either vepa, bridge, or private. Defauls to bridge.
• mtu (integer, optional): mtu to set in the macvtap interface.
• deviceID (string, optional): deviceID of an existing macvtap interface, which will be imported, configured, and moved to the correct net namespace.

Manual Testing

# Build the binary
go build

# Create a new namespace
ip netns add ns1

# Run ADD command connecting the namespace to the host iface 
cat <<EOF | CNI_COMMAND=ADD CNI_CONTAINERID=ns1 CNI_NETNS=/var/run/netns/ns1 CNI_IFNAME=eth2 CNI_PATH=`pwd` CNI_ARGS="MAC=02:03:04:05:06:07" ./macvtap-cni
{
    "name": "mynet",
    "type": "macvtap",
    "master": "eth0",
    "mode": "bridge",
    "mtu": 1500,
    "deviceID": "macvtap0"
}
EOF

# Check that a veth pair was connected inside the namespace
ip netns exec ns1 ip link

# Run DEL command removing the veth pair and OVS port
cat <<EOF | CNI_COMMAND=DEL CNI_CONTAINERID=ns1 CNI_NETNS=/var/run/netns/ns1 CNI_IFNAME=eth2 CNI_PATH=`pwd` CNI_ARGS="MAC=02:03:04:05:06:07" ./macvtap-cni
{
    "name": "mynet",
    "type": "macvtap",
    "master": "eth0",
    "mode": "bridge",
    "mtu": 1500,
    "deviceID": "macvtap0"
}
EOF

# Check that veth pair was removed from the namespace
ip netns exec ns1 ip link

# Delete the namespace
ip netns del ns1

References

[0] - https://github.com/containernetworking/cni/pull/316