search

projectcalico / calico

Cloud native networking and network security
https://docs.tigera.io/calico/latest/about/
Apache License 2.0
5.88k stars 1.31k forks source link

Calico for Windows / vLAN support #4678

Open jSchwarzweller-ct opened 3 years ago

jSchwarzweller-ct commented 3 years ago

Hi all,

we're trying to add Windows nodes into a K8s Cluster using calico. We`re forced to use vLAN tagging on network interfaces cause of some "smart router" feature which automatically enables the vLAN ID we configured on the device.

Creating the virtual adapter using the documented command "New-HnsNetwork" works fine - but then the network communication is done without vLAN tag - so not functional in our case.

Using the updated PowerShell cmdlet "HNS (version 0.2.4)" there is the possibility to configure a vLAN parameter... But this runs into unspecified exception:

image

--> Is vLAN Tagging supported in general for Calico on Windows??? We also tried to modify the created network afterwards to add the vLAN id directly in the Windows UI - but this is greyed out.

Thanks guys in advance

song-jiang commented 3 years ago

Not sure I understand the issue. Are you using VXLAN or L2Bridge? If it is VXLAN, does Vsid == VLan id?

jSchwarzweller-ct commented 3 years ago

We`re using VXLAN. VSID != VLan ID... Would be new to me if those both values need to be the same!? Can you comment on the current status of this implementation? If vLAN Tagging in general supported?

Thanks a lot for your help

song-jiang commented 3 years ago

Calico does not support vLAN tagging for the moment. It sets Vsid only. I noticed there is an API to program VLan policy but not sure if it will do the job. https://github.com/microsoft/hcsshim/blob/master/hcn/hcnpolicy.go#L265

@jocelynberrendonner could you help on this? Is programming a VLan policy on Calico network the right solution to resolve this issue?