41–45 of 45 posts
Many have tried, no one has succeeded.
Canonical had an opportunity to do this... Instead, they had to do "Enterprise" stuff. Bah.
Earlier quoted context omitted.
It has, now Weave is kinda fast :) See http://weave.works/weave-docker-networking-performance-fast-... http://rp.delaat.net/2015-2016/p50/report.pdf Full disclosure: I work at Weaveworks
It's terribly slow unless you don't care about encryption: https://github.com/weaveworks/weave/issues/1925 The per-packet processing overhead is a real and unresolved problem. I'm using Rancher's networking now instead. It uses ipsec between hosts, so everything gets handled by code paths which have been optimized in the kernel, and performance is good (especially if you have a not-ancient CPU and have the AES-NI ins…
If you check out the PDF that fons posted above, http://rp.delaat.net/2015-2016/p50/report.pdf, then you will see pretty extensive testing showing that Weave Net, flannel, and Docker Networking have similar VXLAN performance for unencrypted traffic. In all cases, it is good enough. Alas the testers were unable to get Calico working.
The question is: when do you want top performance for encrypted traffic? Most of users want encryption for the wide area or public cloud, and when they can't use a VPC. Our solution is pretty good for these cases. Obviously at some point we'll enable IPSEC too.
Earlier quoted context omitted.
It's terribly slow unless you don't care about encryption: https://github.com/weaveworks/weave/issues/1925 The per-packet processing overhead is a real and unresolved problem. I'm using Rancher's networking now instead. It uses ipsec between hosts, so everything gets handled by code paths which have been optimized in the kernel, and performance is good (especially if you have a not-ancient CPU and have the AES-NI ins…
(weaveworks person here) If you check out the PDF that fons posted above, http://rp.delaat.net/2015-2016/p50/report.pdf , then you will see pretty extensive testing showing that Weave Net, flannel, and Docker Networking have similar VXLAN performance for unencrypted traffic. In all cases, it is good enough. Alas the testers were unable to get Calico working. The question is: when do you want top performance for encry…
I really wish this weren't true, but your solution is not pretty good yet. For now, if you need encryption, it's useless.
Machines spend their life handling packet overhead. Application performance suffers horrendously, and the scalability of the application goes from excellent to terrible.
Weave looks really good if you give it easy tests involving big packets. But if you give it a workload involving many small packets (which in today's microservices architectures is not exactly uncommon), it stops working.
I dream of a company that installs Linux on some of the most popular desktops PROPERLY, and charges users 100$ to install it, and helps you maintain your Linux desktop over the years. Many have tried, no one has succeeded. Canonical had an opportunity to do this... Instead, they had to do "Enterprise" stuff. Bah.
Earlier quoted context omitted.
(weaveworks person here) If you check out the PDF that fons posted above, http://rp.delaat.net/2015-2016/p50/report.pdf , then you will see pretty extensive testing showing that Weave Net, flannel, and Docker Networking have similar VXLAN performance for unencrypted traffic. In all cases, it is good enough. Alas the testers were unable to get Calico working. The question is: when do you want top performance for encry…
Widearea/public cloud & non-VPC use cases are my use cases. I really wish this weren't true, but your solution is not pretty good yet. For now, if you need encryption, it's useless. Machines spend their life handling packet overhead. Application performance suffers horrendously, and the scalability of the application goes from excellent to terrible. Weave looks really good if you give it easy tests involving big pack…