be displayed in the UI as service dependencies between the different pods: In the bottom of the interface, you may also inspect each recent Hubble flow event in your current namespace individually. Inspecting failure detection. This feature also relies on peer side’s configuration. protocol bfd { interface "{{ grains['node_mgnt_device'] }}" { min rx interval 100 ms; min tx interval something like this: $ birdc show bfd sessions BIRD 2.0.6 ready. bfd1: IP address Interface State Since Interval Timeout 10.5.40.2 bond0 Up 20:14:51

distributions use a different interface naming convention. If you use masquerading with the option egressMasqueradeInterfaces=eth0, remember to replace eth0 with the proper interface name. OpenShift To install be displayed in the UI as service dependencies between the different pods: In the bottom of the interface, you may also inspect each recent Hubble flow event in your current namespace individually. Inspecting failure detection. This feature also relies on peer side’s configuration. protocol bfd { interface "{{ grains['node_mgnt_device'] }}" { min rx interval 100 ms; min tx interval

can conflict with a DHCP agent running on the node and assigning the primary IP of the ENI to the interface of the node. A common scenario where this happens is if NetworkManager is running on the node and failure detection. This feature also relies on peer side’s configuration. protocol bfd { interface "{{ grains['node_mgnt_device'] }}" { min rx interval 100 ms; min tx interval something like this: $ birdc show bfd sessions BIRD 2.0.6 ready. bfd1: IP address Interface State Since Interval Timeout 10.5.40.2 bond0 Up 20:14:51

can conflict with a DHCP agent running on the node and assigning the primary IP of the ENI to the interface of the node. A common scenario where this happens is if NetworkManager is running on the node and failure detection. This feature also relies on peer side’s configuration. protocol bfd { interface "{{ grains['node_mgnt_device'] }}" { min rx interval 100 ms; min tx interval something like this: $ birdc show bfd sessions BIRD 2.0.6 ready. bfd1: IP address Interface State Since Interval Timeout 10.5.40.2 bond0 Up 20:14:51

Cilium might not come up immediately on all nodes, since Flannel only sets up the bridge network interface that connects containers with the outside world when the first container is created on that node nodeEncryption=false \ > cilium.yaml Encryption interface If direct routing is being used an additional argument can be used to identify the network facing interface. If no interface is specified the default route link but depending on routing rules users may need to specify the encryption interface as follows: --set global.encryption.interface=ethX Node to node encryption In order to enable node-to-node encryption

can conflict with a DHCP agent running on the node and assigning the primary IP of the ENI to the interface of the node. A common scenario where this happens is if NetworkManager is running on the node and failure detection. This feature also relies on peer side’s configuration. protocol bfd { interface "{{ grains['node_mgnt_device'] }}" { min rx interval 100 ms; min tx interval something like this: $ birdc show bfd sessions BIRD 2.0.6 ready. bfd1: IP address Interface State Since Interval Timeout 10.5.40.2 bond0 Up 20:14:51

MAC address and IP address which allows the genera�on dedicated BPF programs for those pods. # Interface to be used when running Cilium on top of a CNI plugin. # For flannel, use "cni0" flannel-master-device: policy enforcement enabled on top of a CNI plugi # the BPF programs will be installed on the network interface specified in # 'flannel-master-device' and on all network interfaces belonging to # a container Cilium might not come up immediately on all nodes, since Flannel only sets up the bridge network interface that connects containers with the outside world when the first container is created on that node