access service nodeport too slow(about 63s)

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 01:58

kubernetes 1.18 with flannel (0.11.0) cni plugin

relate kubernetes issues:
kubernetes/kubernetes#76699
kubernetes/kubernetes#88986
flannel-io/flannel#1282
kubernetes/kubernetes#92035

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 01:58

Note that the problem can also be (mostly) worked around by upgrading to a kernel with the checksum fix (#88986 (comment)) or by disabling checksum offload on the relevant network interfaces (eg, #88986 (comment) gives the command for flannel; some of the other xref'ed bugs may give the exact commands for other plugins if you can't figure it out).

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 01:58

changed the description

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 02:00

according to kubernetes/kubernetes#92035
we can upgrade the kube-proxy to 1.19

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 02:00

changed the description

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 02:02

or we can offload the checksum every node when flannel.1 is created:

sudo ethtool --offload flannel.1 rx off tx off

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 02:08

kubernetes/kubernetes#92256

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 02:16

[inspuradmin]

In GitLab by @tmon546596046 on Oct 9, 2020, 02:16

we should upgrade the kubernetes minor version to 1.18.6