Skip to content

silk-cni job from silk/2.10.0

Github source: a8ea497 or master branch

Properties

burst

Bandwidth burst in Kb for traffic through container. 0 for no limit. If burst is set, rate must also be set.

Default
0

disable

Disable this monit job. It will not run. Required for backwards compatability

Default
false

dns_servers

DNS servers that containers will use. If set, this list takes precedence over DNS servers configured through garden.

Default
[]

host_tcp_services

List of TCP addresses running on the BOSH VM that should be accessible from containers. The address must not be in the 127.0.0.0/8 range. The network plugin will install an iptables INPUT rule for each service.

Default
[]
Example
|+
  - 169.254.0.2:9001
  - 169.254.0.2:9002

iptables_accepted_udp_logs_per_sec

Maximum number of iptables logs per second for accepted UDP packets.

Default
100

iptables_denied_logs_per_sec

Maximum number of iptables logs per second for denied packets.

Default
1

iptables_logging

Enables iptables logging for overlay network policies and Application Security Groups. Logs to the kernel log.

Default
false

mtu

Pre-encapsulation MTU for containers. If set, the network interface inside the container will have an MTU that is 50 bytes less than this value, in order to account for VXLAN encap overhead. If zero, MTU will be automatically configured to account for the VXLAN encapsulation, but it may not account for additional network encapsulations, e.g. IPSec.

Default
0

no_masquerade_cidr_range

CIDR address block that should not be masqueraded. Fallsback to cf_network.network link property if property is not provided.

Default
""

rate

Bandwidth rate in Kbps for traffic through container. 0 for no limit. If rate is set, burst must also be set.

Default
0

silk_daemon

listen_port

Silk CNI plugin connects to the silk daemon on this port.

Default
23954

temporary

underlay_interface_names

Use with extreme caution. To be used only if there are network interfaces not created by BOSH. Provide names for all interfaces. If provided, only interfaces referenced here will be used. Will not use any bosh interface by default.

Default
[]

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/silk-cni/ directory (learn more).

  • bin/pre-start (from pre-start.erb)
  • config/cni/cni-wrapper-plugin.conflist (from cni-wrapper-plugin.conflist.erb)
  • config/teardown-config.json (from teardown-config.json.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.