Skip to content

Conversation

@trapier
Copy link

@trapier trapier commented Mar 4, 2020

Deleting a network sandbox on Linux implicitly clears OS (ipvs) load
balancer state. Deleting an HNS network on Windows by contrast does not
inherently remove its corresponding VFP load balancers. The method to
remove load balancers belongs to the network and so must be called prior
to or while deleting a network. This commit reverts one line from
c47239d, reintroducing a call to
explicitly remove backend load balancers during network removal.

Fixes #2527

Mirantis Ref: FIELD-2259

Deleting a network sandbox on Linux implicitly clears OS (ipvs) load
balancer state.  Deleting an HNS network on Windows by contrast does not
inherently remove its corresponding VFP load balancers. The method to
remove load balancers belongs to the network and so must be called prior
to or while deleting a network. This commit reverts one line from
c47239d, reintroducing a call to
explicitly remove backend load balancers during network removal.

Signed-off-by: Trapier Marshall <[email protected]>
@trapier
Copy link
Author

trapier commented Mar 4, 2020

/cc @selansen + @euanh PTAL

@thaJeztah
Copy link
Member

introduced in #2138 (adding a link for easier discovery)

@thaJeztah
Copy link
Member

@msabansal ptal

Copy link
Contributor

@selansen selansen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@trapier
Copy link
Author

trapier commented Mar 5, 2020

/cc @pradipd, who I believe initially diagnosed this in the affected customer environment on the basis of missing hcsshim::PolicyList::Delete events from dockerd debug.

EDIT: many thanks for the lead Pradip!

@selansen selansen merged commit d503f05 into moby:master Mar 5, 2020
@trapier trapier deleted the cleanup-vfp-during-network-removal branch December 16, 2020 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

VFP leak in windows overlay network deletion

4 participants