uluyol/heyp-agents

Mark traffic destined for relay with correct cluster

Closed this issue · 2 comments

Host-agent is currently not controller the interface that actually talks to AA and WA. We don't care about the other interface.

As of b489683 we handle this correctly, but the problem has evolved.

All the numbers look worse. It seems that we should be doing everything (especially rate limiting) at the envoy machines. After all, rate limiting is best done at the source host. Instead, we're doing it in the relays. We can augment the DCMapper config and flow matching so that the ports on the relay are mapped to AA and WA.

Fixed this with a different solution.

It turns out that the relay applying netem and rate limiting wasn't the problem. The problem was that netem would only buffer 1000 packets (by default) and drop others, so it was effectively rate limiting below what we wanted. I guess this had a different effect when we moved netem onto the relay, but it was a problem nevertheless.

728ede5 increases the limit which greatly improves things, and the follow-on commit re-tunes admission control.

Can call this fixed.