Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-1831

Enrich based on IP and MAC for secondary interfaces

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • netobserv-1.7
    • netobserv-1.7-candidate
    • None
    • None
    • False
    • None
    • False
    • NetObserv - Sprint 259, NetObserv - Sprint 260
    • Important

      Description of problem:

      With SRIOV interfaces, same IP subnet could be reused for secondary interfaces by multiple pods and IP annotations could be present for Pods having secondary interfaces in which case enrichment could be incorrect.

      See slack discussion here: https://redhat-internal.slack.com/archives/C02939DP5L5/p1725415328316999 

      Enriching solely from MAC is not desirable because the observed MAC is not always the pod MAC (especially on traffic observed from geneve interface).

      Here's what we can do:

      • Continue to index by IP. In case of overlapping IPs, a lookup will return a shortlist of pods
      • Look into that shortlist if there's a pod advertizing the observed MAC
        • if true, use that pod
        • if false, I guess it's better to not try to enrich at all, rather than risking a wrong enrichment

        1. image-2024-09-13-11-27-07-853.png
          186 kB
          Julien Pinsonneau
        2. image-2024-09-13-11-27-20-726.png
          169 kB
          Julien Pinsonneau
        3. image-2024-09-13-11-27-42-807.png
          276 kB
          Julien Pinsonneau
        4. image-2024-09-13-11-42-08-102.png
          203 kB
          Julien Pinsonneau

            jtakvori Joel Takvorian
            rhn-support-memodi Mehul Modi
            Mehul Modi Mehul Modi
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: