You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
It seems to me that Multicast and WireGuard cannot be used together in Antrea.
The Multicast code assumes that in encap mode, an OVS tunnel port is created:
This is not the case when using WireGuard, as tunneling is then handled by Linux and not by OVS (inter-Node traffic is sent through the antrea-wg0 interface).
To Reproduce
Install the latest Antrea (from main branch) and enable both Multicast and Wireguard.
Expected
The Antrea Agent should reject this configuration.
Actual behavior
The Antrea Agent accepts the configuration and starts normally. The following flow (and potentially others) is installed, even though port 1 (reserved for the tunnel port) does not exist:
Versions:
Use latest Antrea, to ensure you have this change: #5885
Even though #5885 stopped creating the tunnel interface and brought this behavior to the surface, #5885 is not responsible for this "bug". Multicast was never compatible with WireGuard to begin with.
Mutlicast feature cannot work with WireGuard or IPSec configurations in encap
mode. The Agent will now return error when Multicast and encryption are enabled
simultaneously, during config validation.
Fixes#5916
Signed-off-by: wenyingd <wenyingd@vmware.com>
Describe the bug
It seems to me that Multicast and WireGuard cannot be used together in Antrea.
The Multicast code assumes that in encap mode, an OVS tunnel port is created:
antrea/pkg/agent/openflow/multicast.go
Line 245 in ca5dc45
This is not the case when using WireGuard, as tunneling is then handled by Linux and not by OVS (inter-Node traffic is sent through the antrea-wg0 interface).
To Reproduce
Install the latest Antrea (from main branch) and enable both Multicast and Wireguard.
Expected
The Antrea Agent should reject this configuration.
Actual behavior
The Antrea Agent accepts the configuration and starts normally. The following flow (and potentially others) is installed, even though port 1 (reserved for the tunnel port) does not exist:
Versions:
Use latest Antrea, to ensure you have this change: #5885
Even though #5885 stopped creating the tunnel interface and brought this behavior to the surface, #5885 is not responsible for this "bug". Multicast was never compatible with WireGuard to begin with.
cc @tnqn @wenyingd @ceclinux
The text was updated successfully, but these errors were encountered: