33 lines
982 B
Plaintext
33 lines
982 B
Plaintext
|
services:
|
||
|
|
l4lb:
|
||
|
|
image: "quay.io/cilium/cilium:<%= @cilium_version %>"
|
||
|
|
volumes:
|
||
|
|
- /sys/fs/bpf
|
||
|
|
- /lib/modules
|
||
|
|
- /var/run/netns
|
||
|
|
network_mode: "host"
|
||
|
|
privileged: true
|
||
|
|
command:
|
||
|
|
- "nsenter"
|
||
|
|
- "--net=/var/run/netns/l4lb"
|
||
|
|
- "cilium-agent"
|
||
|
|
- "--bpf-lb-algorithm=maglev"
|
||
|
|
- "--bpf-lb-mode=dsr"
|
||
|
|
- "--bpf-lb-acceleration=native"
|
||
|
|
- "--bpf-lb-dsr-dispatch=ipip"
|
||
|
|
- "--devices=<%= @cilium_devices %>"
|
||
|
|
- "--datapath-mode=lb-only"
|
||
|
|
- "--enable-l7-proxy=false"
|
||
|
|
- "--routing-mode=native"
|
||
|
|
- "--enable-bandwidth-manager=false"
|
||
|
|
- "--enable-local-redirect-policy=false"
|
||
|
|
- "--enable-hubble=true"
|
||
|
|
- "--enable-recorder=true"
|
||
|
|
- "--enable-l7-proxy=false"
|
||
|
|
- "--preallocate-bpf-maps=false"
|
||
|
|
- "--disable-envoy-version-check=true"
|
||
|
|
- "--auto-direct-node-routes=false"
|
||
|
|
- "--enable-xdp-prefilter=true"
|
||
|
|
- "--enable-ipv4=true"
|
||
|
|
- "--enable-ipv6=true"
|