Using Calico networking with VXLAN encapsulation results in packet loss
Issue
- Using Calico networking with VXLAN encapsulation results in packet loss
- As per RKE2 documentation https://docs.rke2.io/known_issues/#calico-with-vxlan-encapsulation
Calico hits a kernel bug when using vxlan encapsulation and the checksum offloading of the vxlan interface is on. The issue is described in the calico project and in rke2 project. The workaround we are applying is disabling the checksum offloading by default by applying the valueChecksumOffloadBroken=truein the calico helm chart. - The Rancher project describes this issue at: https://github.com/rancher/rke2/issues/1541
- The Calico project describes this issue at: https://github.com/projectcalico/calico/issues/4865
Environment
- Red Hat Enterprise Linux 8.6 (
kernel-4.18.0-372.9.1.el8) - RKE2 (RKE Government) Rancher Kubernetes distribution
- Calico networking with VXLAN encapsulation
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.