You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During live instance migration, we currently setup an identical OPTE port on the new sled with regard to firewall rules, external IPs, etc. However this loses several pieces of stateful information currently encoded in the flowtable:
Stateful firewall entries needed for pairwise allow,
Temporary port allocations for SNAT'd flows,
External IP affinity for each flow.
Some of these can be regenerated depending on how hosts behave, but otherwise these will impact VPC-external traffic. To minimise this, we want to ideally carry this state over to the new sled once execution stops.
The text was updated successfully, but these errors were encountered:
During live instance migration, we currently setup an identical OPTE port on the new sled with regard to firewall rules, external IPs, etc. However this loses several pieces of stateful information currently encoded in the flowtable:
Some of these can be regenerated depending on how hosts behave, but otherwise these will impact VPC-external traffic. To minimise this, we want to ideally carry this state over to the new sled once execution stops.
The text was updated successfully, but these errors were encountered: