docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update kubernetes-network-encryption.md

This commit is contained in:
Anne Henmi 2018-09-19 08:38:18 -06:00 committed by GitHub
parent f717078562
commit 6e1214e9e4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ee/ucp/kubernetes/kubernetes-network-encryption.md
View File

@ -43,7 +43,7 @@ packet size must be a multiple of 4 bytes. IPIP tunnels require 20 bytes of enc
tunnel interface MTU must be no more than "EXTMTU - 46 - ((EXTMTU - 46) modulo 4)" where EXTMTU is the minimum MTU tunnel interface MTU must be no more than "EXTMTU - 46 - ((EXTMTU - 46) modulo 4)" where EXTMTU is the minimum MTU
of the external interfaces. An IPIP MTU of 1452 should generally be safe for most deployments. of the external interfaces. An IPIP MTU of 1452 should generally be safe for most deployments.
Changing UCP's MTU requires updating the UCP configuration. This process is described (here)[/ee/ucp/admin/configure/ucp-configuration-file]. Changing UCP's MTU requires updating the UCP configuration. This process is described [here](/ee/ucp/admin/configure/ucp-configuration-file).
The user must update the following values to the new MTU: The user must update the following values to the new MTU:
@ -52,6 +52,7 @@ The user must update the following values to the new MTU:
calico_mtu = "1452" calico_mtu = "1452"
ipip_mtu = "1452" ipip_mtu = "1452"
... ...
## Configuring SecureOverlay ## Configuring SecureOverlay
Once the cluster nodes’ MTUs are properly configured, deploy the SecureOverlay components using the Secure Overlay YAML file to UCP. Once the cluster nodes’ MTUs are properly configured, deploy the SecureOverlay components using the Secure Overlay YAML file to UCP.