infrabuilder / benchmark-k8s-cni-2020-08 Goto Github PK

Hi @AlexisDucastel
I saw the poor udp performance of Kube-OVN (here)[https://docs.google.com/spreadsheets/d/12dQqSGI0ZcmuEy48nA0P_bPl7Yp17fNg7De47CYWzaM/edit#gid=1170887058]

We investigated it and found that might be some OVS issues that when enable conntrack, every udp packet will trigger a ct-lock and that hurt performance dramatically, more discussions (here)[https://www.mail-archive.com/[email protected]/msg07479.html]

Kube-OVN will add some default security ACLs, that will enable conntrack functions. Can you try to run ovn-nbctl clear logical_switch ovn-default acl in ovn-central pod to check if the performance can increase in your environment? That can help us to verify the performance drop and further improve Kube-OVN. Thanks!