Skip to content

silk-daemon job from cf-networking/1.13.0

Github source: e773941b or master branch

Properties

cf_networking

disable

Disable container to container networking.

Default
false

lease_poll_interval_seconds

The silk daemon queries the silk controller on this interval in seconds to renew its lease and get all routable leases.

Default
5

partition_tolerance_hours

When silk controller is unavailable, silk daemon will remain healthy and allow creation of new containers for this number of hours. Should be no larger than cf_networking.subnet_lease_expiration_hours.

Default
168

rep_listen_addr_admin

Admin endpoint on diego rep. Silk daemon job drain waits for the rep to exit before tearing down the network. See diego.rep.listen_addr_admin

Default
127.0.0.1:1800

silk_controller

hostname

Host name for the silk controller. E.g. the service advertised via Consul DNS. Must match common name in the silk_controller.server_cert

Default
silk-controller.service.cf.internal
listen_port

Silk controller handles requests from the silk daemon on this port.

Default
4103

silk_daemon

ca_cert

Trusted CA certificate that was used to sign the silk controller server cert and key.

client_cert

Client certificate for TLS to access silk controller.

client_key

Client private key for TLS to access silk controller.

debug_port

Debug port for silk daemon. Use this to adjust log level at runtime or dump process stats.

Default
22233
listen_port

Silk daemon handles requests from the CNI plugin on this localhost port.

Default
23954
metron_port

Forward metrics to this metron agent, listening on this port on localhost

Default
3457
temporary_vxlan_interface

Not recommended. Use vxlan_network instead. Name of network interface which container traffic is sent to. If empty, the default network interface is used. This cannot be set when vxlan_network is set.

vxlan_network

The name of the bosh network which container traffic is sent over. If empty, the default gateway network is used.

vtep_port

Host port used for receiving VXLAN packets

Default
4789

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/silk-daemon/ directory (learn more).

  • bin/drain (from drain.erb)
  • bin/pre-start (from pre-start.erb)
  • bin/silk-daemon_ctl (from silk-daemon_ctl.erb)
  • config/certs/ca.crt (from ca.crt.erb)
  • config/certs/client.crt (from client.crt.erb)
  • config/certs/client.key (from client.key.erb)
  • config/client-config.json (from client-config.json.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.