openyurtio / openyurt

OpenYurt - Extending your native Kubernetes to edge(project under CNCF)
https://openyurt.io
Apache License 2.0
1.72k stars 405 forks source link

[Question] pod-to-pod networking failed #2194

Open nelzhang02184516 opened 3 days ago

nelzhang02184516 commented 3 days ago

What happened:

My cluster cannot pass the pod-to-pod(edge to edge) networking test image

Follow the steps in the document it seems that the raven0 network card is not started image

iz2vcbqht61jy7tsvof5u7z node raven-agent did not report any errors image

What you expected to happen:

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

others /kind question

River-sh commented 3 days ago

The raven0 network interface is the VXLAN interface of this network domain. If there is only one node in this network domain, raven0 is not needed (no intra-domain container traffic forwarding) @nelzhang02184516

nelzhang02184516 commented 3 days ago

The raven0 network interface is the VXLAN interface of this network domain. If there is only one node in this network domain, raven0 is not needed (no intra-domain container traffic forwarding) @nelzhang02184516

Thank you for your answer. How can I set up communication between pods.I tried to obtain the traffic of the target node cni0 through tcpdump, but it didn't work. @River-sh

River-sh commented 3 days ago

The raven gateway on the edge will build an IPSec VPN with the raven gateway in the center. You can exec into the raven container and use the ipsec command to check whether the VPN connection is success.

nelzhang02184516 commented 3 days ago

The raven gateway on the edge will build an IPSec VPN with the raven gateway in the center. You can exec into the raven container and use the ipsec command to check whether the VPN connection is success.

Thank you for your answer. After checking, I found that the security group did not open the UDP port. After adding security group rules, nodes can communicate normally.