Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-2044

Use one IP address per container for network isolation

    XMLWordPrintableJSON

    Details

    • Type: Epic
    • Status: Resolved
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
    • Epic Name:
      per-container ip
    • Story Points:
      40

      Description

      If there are enough IP addresses, either IPv4 or IPv6, we should use one IP address per container, instead of the ugly port range based solution. One problem with this is the IP address management, usually it is managed by a DHCP server, maybe we need to manage them in mesos master/slave.

      Also, maybe use macvlan instead of veth for better isolation.

        Attachments

          Issue Links

          is duplicated by

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MESOS-1909 Network monitoring and isolation using macvlan.

          • Major - Major loss of function.
          • Resolved
          is related to

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. MESOS-2728 Introduce concept of cluster wide resources.

          • Major - Major loss of function.
          • Accepted

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. MESOS-2999 Implement a linux/iptables isolator

          • Major - Major loss of function.
          • Accepted
          relates to

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. MESOS-3333 Allow executors to create nested containers.

          • Major - Major loss of function.
          • Resolved

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. MESOS-1027 IPv6 support

          • Major - Major loss of function.
          • Accepted

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                wangcong Cong Wang
              • Votes:
                7 Vote for this issue
                Watchers:
                37 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: