-
Notifications
You must be signed in to change notification settings - Fork 974
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support multiple UDP source ports (multiport) #768
Open
wadey
wants to merge
16
commits into
master
Choose a base branch
from
multiport
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Commits on Oct 17, 2022
-
Support multiple UDP source ports (multiport)
The goal of this work is to send packets between two hosts using more than one 5-tuple. When running on networks like AWS where the underlying network driver and overlay fabric makes routing, load balancing, and failover decisions based on the flow hash, this enables more than one flow between pairs of hosts. Multiport spreads outgoing UDP packets across multiple UDP send ports, which allows nebula to work around any issues on the underlay network. Some example issues this could work around: - UDP rate limits on a per flow basis. - Partial underlay network failure in which some flows work and some don't Agreement is done during the handshake to decide if multiport mode will be used for a given tunnel (one side must have tx_enabled set, the other side must have rx_enabled set) NOTE: you cannot use multiport on a host if you are relying on UDP hole punching to get through a NAT or firewall. NOTE: Linux only (uses raw sockets to send). Also currently only works with IPv4 underlay network remotes. This is implemented by opening a raw socket and sending packets with a source port that is based on a hash of the overlay source/destiation port. For ICMP and Nebula metadata packets, we use a random source port. Example configuration: multiport: # This host support sending via multiple UDP ports. tx_enabled: false # This host supports receiving packets sent from multiple UDP ports. rx_enabled: false # How many UDP ports to use when sending. The lowest source port will be # listen.port and go up to (but not including) listen.port + tx_ports. tx_ports: 100 # NOTE: All of your hosts must be running a version of Nebula that supports # multiport if you want to enable this feature. Older versions of Nebula # will be confused by these multiport handshakes. # # If handshakes are not getting a response, attempt to transmit handshakes # using random UDP source ports (to get around partial underlay network # failures). tx_handshake: false # How many unresponded handshakes we should send before we attempt to # send multiport handshakes. tx_handshake_delay: 2
Configuration menu - View commit details
-
Copy full SHA for 326fc87 - Browse repository at this point
Copy the full SHA 326fc87View commit details -
Configuration menu - View commit details
-
Copy full SHA for 6d8e939 - Browse repository at this point
Copy the full SHA 6d8e939View commit details
Commits on Mar 13, 2023
-
Configuration menu - View commit details
-
Copy full SHA for aec7f5f - Browse repository at this point
Copy the full SHA aec7f5fView commit details
Commits on Apr 3, 2023
-
Configuration menu - View commit details
-
Copy full SHA for e71059a - Browse repository at this point
Copy the full SHA e71059aView commit details
Commits on May 3, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 28ecfcb - Browse repository at this point
Copy the full SHA 28ecfcbView commit details
Commits on May 9, 2023
-
Configuration menu - View commit details
-
Copy full SHA for 0e593ad - Browse repository at this point
Copy the full SHA 0e593adView commit details
Commits on May 17, 2023
-
Configuration menu - View commit details
-
Copy full SHA for a2b9747 - Browse repository at this point
Copy the full SHA a2b9747View commit details
Commits on Oct 27, 2023
-
Configuration menu - View commit details
-
Copy full SHA for f2aef0d - Browse repository at this point
Copy the full SHA f2aef0dView commit details
Commits on Jan 26, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 659d7fe - Browse repository at this point
Copy the full SHA 659d7feView commit details -
Configuration menu - View commit details
-
Copy full SHA for b033267 - Browse repository at this point
Copy the full SHA b033267View commit details -
Configuration menu - View commit details
-
Copy full SHA for 05405bc - Browse repository at this point
Copy the full SHA 05405bcView commit details -
Configuration menu - View commit details
-
Copy full SHA for 6606124 - Browse repository at this point
Copy the full SHA 6606124View commit details
Commits on May 8, 2024
-
Configuration menu - View commit details
-
Copy full SHA for b445d14 - Browse repository at this point
Copy the full SHA b445d14View commit details
Commits on Jul 10, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 6b78e9c - Browse repository at this point
Copy the full SHA 6b78e9cView commit details
Commits on Sep 13, 2024
-
Configuration menu - View commit details
-
Copy full SHA for dabce8a - Browse repository at this point
Copy the full SHA dabce8aView commit details
Commits on Oct 2, 2024
-
We need to compare just the IPs here and not the IP+Port This is a regression with the merge of v1.9.4 and the change to netip.AddrPort - dabce8a
Configuration menu - View commit details
-
Copy full SHA for 7ac51c1 - Browse repository at this point
Copy the full SHA 7ac51c1View commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.