Hi Keith, Has the Calico patch that calls to the VPP binary API been upstreamed to Calico’s repository?
Thanks, Hongjun From: Keith Burns [mailto:alaga...@gmail.com] Sent: Tuesday, September 6, 2016 11:13 PM To: Zhou, Danny <danny.z...@intel.com>; Ni, Hongjun <hongjun...@intel.com>; vpp-dev <vpp-dev@lists.fd.io>; Matt Johnson (matjohn2) <matjo...@cisco.com> Subject: Re: [vpp-dev] Calico + VPP doing networking for Docker demo On Tue, Sep 6, 2016 at 2:04 AM Zhou, Danny <danny.z...@intel.com<mailto:danny.z...@intel.com>> wrote: Keith, Any chance to get the Calico patch that calls to the VPP binary API? Seems they are not on the Calico’ repository yet. Will be upstreamed to calico soon... will have a better date this Thu. Native Calico (Felix) Python scripts invoke ip route, iptables and arp commands to configure FIB, Netfilter tables and arp caches in the kernel respectively, so I guess the patch to enable VPP just calls VPP APIs so VPP user space dataplane replaces kernel dataplane for much higher performance. But seems your demo only runs on single node hosting multiple containers, which has an issue to scale up to support multiple Calico nodes in a realistic setup. As Calico uses BIRD as BGP client to talk with other BGP peers (via TCP connection) running Calico nodes for updating routes, so those BGP packets over TCP still need to traverse in_kernel stacks and NIC kernel driver rather than DPDK PMD inside VPP, but unfortunately it does not work if only one NIC port is used as you cannot bind this port to both DPDK PMD and kernel driver at the same time. To resolve this issue, I think the VPP Sandbox/Router component needs to be integrated as well to ensure VPP takes over entire dataplane and then steer classified local TCP packets to the BGP clients via the TAP port. The initial demo done a couple of months ago, we connect AF_PACKET to VPP and populate host routes for IPv4 and IPv6 in the FIB. This is being extended by a couple of team mates working with the Calico community. We now break into two tracks in parallel: - multihost We have multi host working using direct FIB integration leveraging the BIRD template agent style of approach. Work is starting on BGP integration. - policy Ultimately we want to replace the IPTABLES implementation with VPP features. There is a refactor of parts of the Calico project we are working with and again, this is a WIP. From there we are also looking at TCP and userspace container IO ingestion. ie we are having discussions with TLDK etc for TCP, investigated mTCP etc and for ingestion we have a few things we've looked at and are continuing to investigate, including some things Ray Kinsella has in mind that Intel is working on that he is going to plug us into. As more information comes to light, I'll definitely share here. I'll also be presenting this at the fd.io<http://fd.io> mini-summit. What do you think? -Danny From: vpp-dev-boun...@lists.fd.io<mailto:vpp-dev-boun...@lists.fd.io> [mailto:vpp-dev-boun...@lists.fd.io<mailto:vpp-dev-boun...@lists.fd.io>] On Behalf Of Keith Burns Sent: Friday, July 15, 2016 12:27 PM To: Ni, Hongjun <hongjun...@intel.com<mailto:hongjun...@intel.com>>; vpp-dev <vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>> Subject: Re: [vpp-dev] Calico + VPP doing networking for Docker demo Hongjun, Happy to share the script but it's just some for loops to launch Docker containers and do calicoctl commands. There is NO VPP configuration at all. That's the point. This is a patched Calico deployment using Python calls to the vpp binary api. The user does no VPP configuration. There's quite a bit more work to do on the Calico (Felix) patch before I can propose it as a pull request. Once it's in the Calico project will publish docs etc and how to's but this is just the beginning. On Thu, Jul 14, 2016, 8:22 PM Ni, Hongjun <hongjun...@intel.com<mailto:hongjun...@intel.com>> wrote: Hi Keith, Really cool ! Could you share the scripts, such as setup.sh, so we could use it? Thanks a lot, Hongjun From: vpp-dev-boun...@lists.fd.io<mailto:vpp-dev-boun...@lists.fd.io> [mailto:vpp-dev-boun...@lists.fd.io<mailto:vpp-dev-boun...@lists.fd.io>] On Behalf Of Keith Burns Sent: Friday, July 15, 2016 11:05 AM To: vpp-dev <vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>> Subject: [vpp-dev] Calico + VPP doing networking for Docker demo Demo'd this at Cisco Live. The Calico folks are fantastic to work with. https://www.youtube.com/watch?v=Wzmr3_kQLIE Watch this space. -------------------------------------------------------------- Intel Research and Development Ireland Limited Registered in Ireland Registered Office: Collinstown Industrial Park, Leixlip, County Kildare Registered Number: 308263 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.
_______________________________________________ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev
