Skip to content

CFP: parse VXLAN headers into Hubble flows #28001

@rolinh

Description

@rolinh

Cilium Feature Proposal

Describe the feature you'd like

VXLAN is used in the context of egress gateway (possibly in other contexts as well but I'm not aware of that). If Hubble included some info from VXLAN headers into a flow, we would be able to distinguish between egress gateway traffic and other VXLAN traffic.

(Optional) Describe your proposed solution

I don't think Cilium currently emits VXLAN packets today. If it doesn't, then the initial step to take is to add VXLAN headers to monitor events. The next step is to implement a VXLAN header parser in Hubble. At a minimum, we probably want to extract the VNI and the outer IP header.

Metadata

Metadata

Assignees

Labels

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.area/hubbleImpacts hubble server or relayarea/monitorImpacts monitoring, access logging, flow logging, visibility of datapath traffic.kind/cfpCilium Feature Proposalkind/featureThis introduces new functionality.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions