[WIP] Accelerate networking with bypass4netns

Depends on: - rootless-containers/bypass4netns PR 68 - containerd/nerdctl PR 2916 Signed-off-by: Akihiro Suda <[email protected]>
rootless-containers · Apr 6, 2024 · 4e0f2b4 · 4e0f2b4
1 parent b5e19ab
commit 4e0f2b4
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/docker-compose.yaml b/docker-compose.yaml
@@ -39,6 +39,12 @@ services:
       # In addition, `net.ipv4.conf.default.rp_filter`
       # has to be set to 0 (disabled) or 2 (loose)
       # in the daemon's network namespace.
+    annotations:
+      # bypass4netns annotations are recognized since nerdctl v2.0
+      # TODO: enable bypass4netns only when bypass4netnsd is running.
+      "nerdctl/bypass4netns": "true"
+      "nerdctl/bypass4netns-ignore-bind": "true"
+      "nerdctl/bypass4netns-ignore-subnets": "[\"10.96.0.0/16\", \"10.244.0.0/16\", \"${U7S_NODE_SUBNET}\"]"
 networks:
   default:
     ipam: