[WIP] Accelerate networking with bypass4netns

Depends on: - rootless-containers/bypass4netns PR 68 - containerd/nerdctl PR 2916 Signed-off-by: Akihiro Suda <[email protected]>
rootless-containers · Apr 5, 2024 · 2f11300 · 2f11300
1 parent b5e19ab
commit 2f11300
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/docker-compose.yaml b/docker-compose.yaml
@@ -39,6 +39,12 @@ services:
       # In addition, `net.ipv4.conf.default.rp_filter`
       # has to be set to 0 (disabled) or 2 (loose)
       # in the daemon's network namespace.
+    annotations:
+      # bypass4netns annotations are recognized since nerdctl v2.0
+      # TODO: enable bypass4netns only when bypass4netnsd is running.
+      "nerdctl/bypass4netns": "true"
+      "nerdctl/bypass4netns-disable-bind": "true"
+      "nerdctl/bypass4netns-ignore-subnets": "[\"10.96.0.0/16\", \"10.244.0.0/16\", \"${U7S_NODE_SUBNET}\"]"
 networks:
   default:
     ipam: