From 05f2287c4f00d250286e3f95d73169e9d650fb3c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Cezar=20S=C3=A1=20Espinola?= Date: Wed, 22 Jul 2020 14:29:07 -0300 Subject: [PATCH] Add calico reserved bits Calico by default reserves a set of 16 bits for packet marks that must not conflict with kubernetes' kube-proxy marks. The reserved mask can be changed with a configuration option but it's usually left unchanged. The mask should have from 8 to 16 bits depending on kube-proxy's configuration. Reference: `IptablesMarkMask` config in https://docs.projectcalico.org/reference/felix/configuration --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 05fa13c..e7ebede 100644 --- a/README.md +++ b/README.md @@ -31,6 +31,7 @@ that people are likely to search for. | 11 | 0x800 | [Cilium][cilium] | | 14 | 0x4000 | [Kubernetes][k8s] | | 15 | 0x8000 | [Kubernetes][k8s] | +| 16-31 | 0xFFFF0000 | [Calico][cal] | | 17 | 0x20000 | [Weave Net][weave] | | 18 | 0x40000 | [Tailscale][ts] | | 19 | 0x80000 | [Tailscale][ts] | @@ -39,6 +40,7 @@ that people are likely to search for. [k8s]: https://kubernetes.io/ [ts]: https://www.tailscale.com/ [weave]: https://www.weave.works/oss/net/ +[cal]: https://docs.projectcalico.org/reference/felix/configuration ## Non-Bitwise Mark Registry