back to home

AliyunContainerService / terway

CNI plugin for Alibaba Cloud VPC/ENI

View on GitHub
601 stars
162 forks
5 issues

AI Architecture Analysis

This repository is indexed by RepoMind. By analyzing AliyunContainerService/terway in our AI interface, you can instantly generate complete architecture diagrams, visualize control flows, and perform automated security audits across the entire codebase.

Our Agentic Context Augmented Generation (Agentic CAG) engine loads full source files into context on-demand, avoiding the fragmentation of traditional RAG systems. Ask questions about the architecture, dependencies, or specific features to see it in action.

Source files are only loaded when you start an analysis to optimize performance.

Embed this Badge

Showcase RepoMind's analysis directly in your repository's README.

[![Analyzed by RepoMind](https://img.shields.io/badge/Analyzed%20by-RepoMind-4F46E5?style=for-the-badge)](https://repomind.in/repo/AliyunContainerService/terway)
Preview:Analyzed by RepoMind

Repository Overview (README excerpt)

Crawler view

Terway CNI Plugin CNI plugin for Alibaba Cloud VPC/ENI English | 简体中文 Introduction Terway is a self-developed CNI (Container Network Interface) plugin for ACK (Alibaba Cloud Kubernetes), built on Alibaba Cloud's Elastic Network Interface (ENI) technology. It optimizes cloud resource usage and enhances network performance. Terway supports eBPF for traffic acceleration, reducing latency, and adheres to Kubernetes Network Policy standards for container-to-container access control. In Terway, each Pod has its own network stack and IP address. Pods on the same ECS (Elastic Compute Service) instance communicate directly, while cross-ECS Pod communication transits directly through VPC ENIs, avoiding encapsulation with technologies like VxLAN for higher communication performance. Features • **ENI Network Mode**: Allocates ENIs to Pods for optimized resource utilization and network performance. • **Trunking Feature**: Allows Pods to have independent ENIs for flexible security group and switch configurations. • **Node Pool Network Mode Configuration**: Supports configuring node pools for exclusive ENI usage. • **Security Policies**: Supports NetworkPolicy and traditional security groups for multi-dimensional network security control. • **High Performance**: Utilizes eBPF for protocol stack acceleration, ensuring low latency and high throughput. • **IPv6 Support**: Dual-stack support for both IPv4 and IPv6. • **Intelligent Computing Lingjun**:Linjun support. Deprecated Features • **VPC Network Mode**: Direct communication to VPC resources using VPC routing. • **Exclusive ENI Mode**: Direct ENI attachment to Pods for maximum performance.(Replace with configuring the network mode through node pool dimension as a dedicated ENI.) Version Differences ACK-provided versions are identical to the open-source version, except the Trunking feature is not available in self-hosted clusters. Contributions We warmly welcome community contributions! Whether it's bug fixes, new features, documentation improvements, or code enhancements, your help is appreciated. Report Issues Submit Pull Request Security If you discover a security vulnerability in the code, please contact kubernetes-security@service.aliyun.com. Refer to SECURITY.md for details. Community DingTalk Join group by id "35924643".