[MESOS-4262] Enable net_cls subsytem in cgroup infrastructure

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.27.0
• Component/s: containerization
• Labels: container mesosphere
• Epic Link: net_cls
• Sprint: Mesosphere Sprint 26
• Story Points: 5
• Assignee: Avinash Sridharan
• Reporter: Avinash Sridharan
• Shepherd: Jie Yu
• Created: 30/Dec/15 16:07
• Updated: 26/Nov/18 12:21
• Resolved: 26/Nov/18 12:21

Description

Currently the control group infrastructure within mesos supports only the memory and CPU subsystems. We need to enhance this infrastructure to support the net_cls subsystem as well. Details of the net_cls subsystem and its use-cases can be found here:
https://www.kernel.org/doc/Documentation/cgroups/net_cls.txt

Enabling the net_cls will allow us to provide operators to, potentially, regulate framework traffic on a per-container basis.