Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optimize NodePort performance by reducing request packets CT actions #3862

Merged
merged 1 commit into from
Jun 10, 2022

Commits on Jun 10, 2022

  1. Optimize NodePort performance by reducing request packets CT actions

    For a NodePort connection sourced from external network or local Node,
    destination IP will be DNATed with a virtual IP, then the connection
    will be forwarded to OVS via Antrea gateway. However, in UnSNATTable,
    a flow is installed to unSNAT replied packets of SNATed connections by
    matching the virtual IP as destination IP. The flow is like the following:
    
    ```
    table=UnSNAT, priority=200,ip,nw_dst=169.254.0.253 actions=ct(table=ConntrackZone,zone=65521,nat)
    ```
    
    Note that, the request packets of a DNATed NodePort connection are also
    matched by the flow above, but it is unnecessary. To optimize the
    performance of NodePort, another virtual IP is used to DNAT NodePort
    connections.
    
    TCP_RR and TCP_CRR improvement is as fowllows:
    
    ```
    Test      old TPS     new TPS    delta
    TCP_CRR   3510.28     3847.76    +%9.61
    TCP_RR    9574.29     10457.6    +%9.23
    ```
    
    Signed-off-by: Hongliang Liu <lhongliang@vmware.com>
    hongliangl committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    f143fe7 View commit details
    Browse the repository at this point in the history