Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should be able to export and import flowtable state during migration #446

Open
FelixMcFelix opened this issue Jan 12, 2024 · 0 comments
Open
Labels
feature Planned and requested features
Milestone

Comments

@FelixMcFelix
Copy link
Collaborator

During live instance migration, we currently setup an identical OPTE port on the new sled with regard to firewall rules, external IPs, etc. However this loses several pieces of stateful information currently encoded in the flowtable:

  • Stateful firewall entries needed for pairwise allow,
  • Temporary port allocations for SNAT'd flows,
  • External IP affinity for each flow.

Some of these can be regenerated depending on how hosts behave, but otherwise these will impact VPC-external traffic. To minimise this, we want to ideally carry this state over to the new sled once execution stops.

@FelixMcFelix FelixMcFelix added the feature Planned and requested features label Jan 12, 2024
@FelixMcFelix FelixMcFelix added this to the MVP milestone Jan 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature Planned and requested features
Projects
None yet
Development

No branches or pull requests

1 participant