README
¶
Microsoft Azure Container Networking
| Azure Network Policy Manager Conformance | |
|---|---|
| Cyclonus Network Policy Suite |  |
| Kubernetes Network Policy E2E |
Overview
This repository contains container networking services and plugins for Linux and Windows containers running on Azure:
- Azure CNI network and IPAM plugins for Kubernetes.
- Azure CNM (libnetwork) network and IPAM plugins for Docker Engine. (MAINTENANCE MODE)
- Azure NPM - Kubernetes Network Policy Manager (Linux and (preview) Windows Server 2022)
The azure-vnet network plugins connect containers to your Azure VNET, to take advantage of Azure SDN capabilities. The azure-vnet-ipam IPAM plugins provide address management functionality for container IP addresses allocated from Azure VNET address space.
The following environments are supported:
- Microsoft Azure: Available in all Azure regions.
Plugins are offered as part of Azure Kubernetes Service (AKS), as well as for individual Azure IaaS VMs. For Kubernetes clusters created by aks-engine, the deployment and configuration of both plugins on both Linux and Windows nodes is automatic and default.
The next generation of Azure CNI Plugin is powered by Cilium. Learn more at Azure CNI Powered By Cilium
Documentation
See Documentation for more information and examples.
Build
This repository builds on Windows and Linux. Build plugins directly from the source code for the latest version.
$ git clone https://github.com/Azure/azure-container-networking
$ cd azure-container-networking
$ make all-binaries
Then follow the instructions for the plugin in Documentation.
Contributions
Contributions in the form of bug reports, feature requests and PRs are always welcome.
Please follow these steps before submitting a PR:
- Create an issue describing the bug or feature request.
- Clone the repository and create a topic branch.
- Make changes, adding new tests for new functionality.
- Submit a PR.
License
See LICENSE.
Code of Conduct
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
Directories
¶
| Path | Synopsis |
|---|---|
|
azure-ipam
module
|
|
|
bpf-prog
|
|
|
ipv6-hp-bpf
module
|
|
|
build
|
|
|
tools
module
|
|
|
ipam/plugin
command
|
|
|
ipam/pluginv6
command
|
|
|
network/plugin
command
|
|
|
network/stateless
command
|
|
|
telemetry/service
command
|
|
|
plugin
command
|
|
|
multitenantcontroller/mockclients
Package mockclients is a generated GoMock package.
|
Package mockclients is a generated GoMock package. |
|
service
command
|
|
|
clustersubnetstate/api/v1alpha1
Package v1alpha contains API Schema definitions for the acn v1alpha API group +kubebuilder:object:generate=true +groupName=acn.azure.com
|
Package v1alpha contains API Schema definitions for the acn v1alpha API group +kubebuilder:object:generate=true +groupName=acn.azure.com |
|
clustersubnetstate/manifests
Package manifests exists to allow the rendered CRD manifests to be packaged in to dependent components.
|
Package manifests exists to allow the rendered CRD manifests to be packaged in to dependent components. |
|
multitenancy/api/v1alpha1
Package v1alpha1 contains API Schema definitions for the acn v1alpha1 API group +kubebuilder:object:generate=true +groupName=multitenancy.acn.azure.com
|
Package v1alpha1 contains API Schema definitions for the acn v1alpha1 API group +kubebuilder:object:generate=true +groupName=multitenancy.acn.azure.com |
|
multitenancy/manifests
Package manifests exists to allow the rendered CRD manifests to be packaged in to dependent components.
|
Package manifests exists to allow the rendered CRD manifests to be packaged in to dependent components. |
|
multitenantnetworkcontainer/api/v1alpha1
Package v1alpha1 contains API Schema definitions for the networking v1alpha1 API group +kubebuilder:object:generate=true +groupName=networking.azure.com
|
Package v1alpha1 contains API Schema definitions for the networking v1alpha1 API group +kubebuilder:object:generate=true +groupName=networking.azure.com |
|
nodenetworkconfig/api/v1alpha
Package v1alpha contains API Schema definitions for the acn v1alpha API group +kubebuilder:object:generate=true +groupName=acn.azure.com
|
Package v1alpha contains API Schema definitions for the acn v1alpha API group +kubebuilder:object:generate=true +groupName=acn.azure.com |
|
nodenetworkconfig/manifests
Package manifests exists to allow the rendered CRD manifests to be packaged in to dependent components.
|
Package manifests exists to allow the rendered CRD manifests to be packaged in to dependent components. |
|
dropgz
module
|
|
|
hack
|
|
|
toolbox/server
module
|
|
|
internal
|
|
|
lockedfile
Package lockedfile creates and manipulates files whose contents should only change atomically.
|
Package lockedfile creates and manipulates files whose contents should only change atomically. |
|
lockedfile/internal/filelock
nolint
|
nolint |
|
_example
command
|
|
|
package nmagent contains types and functions necessary for interacting with the Network Manager Agent (NMAgent).
|
package nmagent contains types and functions necessary for interacting with the Network Manager Agent (NMAgent). |
|
cmd
command
|
|
|
ipsm
Package ipsm focus on ip set operation Copyright 2018 Microsoft.
|
Package ipsm focus on ip set operation Copyright 2018 Microsoft. |
|
pkg/controlplane/translation
Package translation converts NetworkPolicy object to policies.NPMNetworkPolicy object which contains necessary information to program dataplanes.
|
Package translation converts NetworkPolicy object to policies.NPMNetworkPolicy object which contains necessary information to program dataplanes. |
|
pkg/dataplane/mocks
Package mocks is a generated GoMock package.
|
Package mocks is a generated GoMock package. |
|
pkgerrlint
module
|
|
|
windows/adapter/mocks
Package mocks is a generated GoMock package.
|
Package mocks is a generated GoMock package. |
|
proto
|
|
|
server
|
|
|
test
|
|
|
e2e/cmd
command
|
|
|
integration/npm
command
|
|
|
internal/retry
todo: there are more robust retry packages out there, discuss with team
|
todo: there are more robust retry packages out there, discuss with team |
|
nnsmockserver/nnsmock
command
|
|
|
tools
|
|
|
acncli
command
|
|
|
zapai
module
|
|