Skip to content

Unavoidable warning Session affinity for host reachable services needs kernel 5.7.0 #29736

@pchaigno

Description

@pchaigno

This warning pops up in our ginkgo CI:

Session affinity for host reachable services needs kernel 5.7.0 or newer to work properly when accessed from inside cluster: the same service endpoint will be selected from all network namespaces on the host.

There doesn't seem to be a way to avoid it when using session affinity with socket-level LB and Linux < v5.7.

Warning currently allowlisted at https://github.com/cilium/cilium/blob/5a82225cd713ed4480324a3ebfce449196cbbd3c/test/helpers/cons.go#L248C1-L248C41.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.area/loadbalancingImpacts load-balancing and Kubernetes service implementationskind/bugThis is a bug in the Cilium logic.pinnedThese issues are not marked stale by our issue bot.

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions