FAQ
I have a Docker based install and I want to migrate to Kubernetes⚓︎
We recommend setting up a Kubernetes cluster with separate hardware/nodes and install using the helm chart, in-place upgrades are not supported.
Can Expeto set up Kubernetes for us?⚓︎
Expeto does not offer Kubernetes support or services but there are many other providers out there that offer day 0,1,2 for various Kubernetes platforms. A short list of supported platforms includes:
- RedHat OpenShift / MicroShift
- VMWare Tanzu
- Cannonical MicroK8s
- AWS EKS
- Microsoft AKS
- Digital Ocean Kubernetes Platform
- Google GKE
Note that not all cloud platforms support advanced routing and scalability features required for large deployments.
How many subscribers can each UPF support?⚓︎
The number of supported subscribers is configurable and can be changed by using
the --set nfcm.dataNetwork.numSessions=
How do I attach additional networks to the UPF or AMF?⚓︎
Each network has to be configured in the networks section under the global values. There are several different kinds of network types available
How do I add static routes?⚓︎
Static routes are handled using the route-override-cni which is bundled with both xCore and xRouter, the routes can be configured in the network section under the global values:
n6:
create: false
cniVersion: 0.3.1
plugins:
- type: macvlan # (macvlan/ipvlan/macvlan/host-device/sr-iov/bridge)
master: eth0 # (eth0/enp3s0/nic-1/wlp2s0)
- type: route-override
flushroutes: false
#delroutes:
# - dst: 192.168.255.0/24
#addroutes:
# - dst: 192.168.255.0/24
# gw: 198.18.0.1
I updated the DNS server on a single-host MicroK8s install but still seeing⚓︎
errors with name resolution
You need to restart the MicroK8s cluster for it to use the new DNS servers
sudo microk8s.stop && sudo microk8s.start
I get certificate errors when using kubectl logs or when starting⚓︎
containers on MicroK8s
If the IP address of your host has changed you might need to recreate the CA
cert to include the new IP address, try running:
sudo microk8s refresh-certs --cert ca.crt
I can see GTP packets arrive on a node, but why don't they arrive at the SMF or UPF pod?⚓︎
Check for services configured as NodePort. If you've installed the helm chart with the intention of using a NodePort service but decided not to, that lingering service can cause issues. Services configured as NodePorts create firewall rules on the kubernetes worker nodes which can prevent packets arriving to pods unless they come through the NodePort service itself.
You can double check this by verifying iptables on the worker node:
iptables -L -t nat