Contents

Configuring common container and open application parameters· 1

About configuring common container and open application parameters· 1

Configuring common container parameters· 1

Backing up container data· 1

Configuring common open application parameters· 1

Specifying a source IP address for open applications· 1

Preconditioning incoming IP packets· 2

 

Configuring common container and open application parameters

About configuring common container and open application parameters

Comware V9 supports deploying Docker containers as well as applications based the containers or RPM on the device. The container applications and RPM applications can run on the device if only they are compliant with the packaging, orchestration, and running requirements of the containers or RPM. These applications have high openness and are referred to as "open applications" in this document.

Container applications are isolated from Comware applications. You can use container applications as supplements to Comware, without affecting Comware.

This chapter describes how to configure common parameters for the previously mentioned containers and open applications.

Configuring common container parameters

Backing up container data

About this task

This task backs up Docker container data to the standby MPU so the containers can continue to use the data after an active/standby switchover.

Procedure

1.     Enter system view.

system-view

2.     Back up Docker container data.

tpa data sync

Configuring common open application parameters

Specifying a source IP address for open applications

About this task

For the following applications to communicate with indirectly connected networks, you must specify a source IPv4 or IPv6 address for their outgoing packets:

·     RPM applications.

·     Open applications in containers that share the network namespace of Comware.

The applications will use the specified address as the source address for packets that they send.

Open applications in containers that do not share the network namespace of Comware uses interface Virtual-Eth-Group 0 to communicate with indirectly connected networks. You do not need to configure a source IP address for such open applications.

Restrictions and guidelines

Make sure the specified interface has an IP address and is in up state, and a connection is available between the interface and the destination device.

As a best practice, specify a loopback interface as the source interface. The physical layer status of a loopback interface is always up unless the loopback interface is manually shut down.

The specified source IPv6 address must be an IPv6 global unicast address.

Specifying a source IP address for open applications in system view

1.     Enter system view.

system-view

2.     Specify a source IP address for open applications.

IPv4:

tpa ip source interface interface-type interface-number

By default, the primary IPv4 address of interface Loopback 0 is used as the source IPv4 address.

IPv6:

tpa ipv6 source { interface interface-type interface-number | ipv6 ipv6-address }

By default, an IPv6 address of interface Loopback 0 is used as the source IPv6 address.

Preconditioning incoming IP packets

About this task

By default, the device processes received open application packets as follows:

·     Unicast packets that are destined for the device itself—Sends the packets to CPUs.

·     Broadcast packets—Sends the packets to CPUs.

·     Multicast packets—Does not send the packets to CPUs.

You can configure the device to precondition open application packets that match certain rules and then send the packets to its CPUs. Preconditioning actions include rate limiting packets to prevent open application packets from using too many CPU resources.

Restrictions and guidelines

If you configure this feature in interface view, the configuration applies to the current interface. If you configure this feature in system view, the configuration applies to all interfaces. If you configure this feature in both interface view and system view, the device preconditions open application packets that match the rules configured in either view.

Preconditioning incoming IP packets in system view

1.     Enter system view.

system-view

2.     Configure the device to precondition certain incoming IPv4 packets of open applications and send the packets to its CPUs.

IPv4:

¡     Configure the device to precondition incoming IPv4 TCP open application packets and send the packets to its CPUs.

tpa ip send-to-cpu protocol 6 { destination-port destination-port-number | source-port source-port-number } *

¡     Configure the device to precondition incoming IPv4 UDP open application packets and send the packets to its CPUs.

tpa ip send-to-cpu protocol 17 { destination-port destination-port-number | source-port source-port-number } * [ destination-ip destination-ip-address ]

¡     Configure the device to precondition incoming IPv4 open application packets of other protocols and send the packets to its CPUs.

tpa ip send-to-cpu protocol protocol-number [ destination-ip destination-ip-address ]

By default, the device processes incoming open application IPv4 packets as follows:

-     Unicast packets that are destined for the device itself—Sends the packets to CPUs.

-     Broadcast packets—Sends the packets to CPUs.

-     Multicast packets—Does not send the packets to CPUs.

IPv6:

¡     Configure the device to precondition incoming IPv6 TCP open application packets and send the packets to its CPUs.

tpa ipv6 send-to-cpu protocol 6 { destination-port destination-port-number | source-port source-port-number } *

¡     Configure the device to precondition incoming IPv6 UDP open application packets and send the packets to its CPUs.

tpa ipv6 send-to-cpu protocol 17 { destination-port destination-port-number | source-port source-port-number } * [ destination-ipv6 destination-ipv6-address ]

¡     Configure the device to precondition incoming IPv6 open application packets of other protocols and send the packets to its CPUs.

tpa ipv6 send-to-cpu protocol protocol-number [ destination-ipv6 destination-ipv6-address ]

By default, the device processes incoming open application IPv6 packets as follows:

-     Unicast packets that are destined for the device itself—Sends the packets to CPUs.

-     Multicast packets—Does not send the packets to CPUs.

Preconditioning incoming IP packets in interface view

1.     Enter system view.

system-view

2.     Enter interface view.

interface interface-type interface-number

3.     Configure the device to precondition certain incoming IPv4 packets of open applications and send the packets to its CPUs.

IPv4:

¡     Configure the device to precondition incoming IPv4 TCP open application packets and send the packets to its CPUs.

tpa ip send-to-cpu protocol 6 { destination-port destination-port-number | source-port source-port-number } *

¡     Configure the device to precondition incoming IPv4 UDP open application packets and send the packets to its CPUs.

tpa ip send-to-cpu protocol 17 { destination-port destination-port-number | source-port source-port-number } * [ destination-ip destination-ip-address ]

¡     Configure the device to precondition incoming IPv4 open application packets of other protocols and send the packets to its CPUs.

tpa ip send-to-cpu protocol protocol-number [ destination-ip destination-ip-address ]

By default, the configuration in system view is used.

IPv6:

¡     Configure the device to precondition incoming IPv6 TCP open application packets and send the packets to its CPUs.

tpa ipv6 send-to-cpu protocol 6 { destination-port destination-port-number | source-port source-port-number } *

¡     Configure the device to precondition incoming IPv6 UDP open application packets and send the packets to its CPUs.

tpa ipv6 send-to-cpu protocol 17 { destination-port destination-port-number | source-port source-port-number } * [ destination-ipv6 destination-ipv6-address ]

¡     Configure the device to precondition incoming IPv6 open application packets of other protocols and send the packets to its CPUs.

tpa ipv6 send-to-cpu protocol protocol-number [ destination-ipv6 destination-ipv6-address ]

By default, the configuration in system view is used.