google / gvisor

Application Kernel for Containers
https://gvisor.dev
Apache License 2.0
15.53k stars 1.28k forks source link

Support Kubernetes port forwarding #3811

Open ianlewis opened 4 years ago

ianlewis commented 4 years ago

Currently port forwarding doesn't work for gVisor because the port needs to be forwarded from inside the sandbox.

ianlewis commented 4 years ago

Related: https://github.com/kubernetes/enhancements/issues/1846 containerd/containerd#6638

tomenden commented 8 months ago

@ianlewis is there any alternative to port-forwarding with gVisor at the moment?

milantracy commented 8 months ago

@ianlewis is there any alternative to port-forwarding with gVisor at the moment?

@tomenden would you mind sharing the use case where you use port forward?

tomenden commented 8 months ago

@tomenden would you mind sharing the use case where you use port forward?

@milantracy Sure. I have a process running node.js in a container and I would like to be able to debug it remotely. This is very powerful, and works perfectly without gVisor.

See this blog post for reference.

ianlewis commented 8 months ago

There has been some progress to implement port forwarding on the gVisor side in #8391 and #8785 but IIRC containerd still requires some changes to the shim protocol to make this work.

https://github.com/containerd/containerd/issues/6638 is where that work is tracked.