This section lists some addition environment variables that can be used to tweak the system in addition to the variables listed in other sections, such as the CPU section.
apiVersion: v1 kind: Pod spec: containers: - name: netshield env: # Optional switch to prevent the system from creating new cgroups and # instead just set affinity on control plane processes. The system will # still try to detect what CPU resources to use from the cgroup unless # the *_CPU_LISTs are set. #- name: NO_CREATE_CGROUP # value: '1' # Not set is default. # Number of cores (not CPUs) to assign to control plane. # Only used when CPU resources are auto-detected (that is, not used when # the *_CPU_LISTs are specified). #- name: NUM_CP_CORES # value: '1' # Optional packet buffer size #- name: PACKET_BUFFER_SIZE # value: '2500' # Optional number of I/O threads #- name: IO_THREADS # value: '2' # Optional list of interface types that should use af_xdp instead of the # default af_packet (when a native driver can't be used). #- name: AF_XDP_TYPES # value: '' # Could be set to something like 'veth i40e'. Using an empty # list for AF_XDP_TYPES corresponds to the default behavior of always # using af_packet. # Optional list of interface types that should use af_packet instead of the # default af_xdp (when a native driver can't be used). #- name: AF_PACKET_TYPES # value: ixgbevf ixgbe # Don't set both of AF_XDP_TYPES and AF_PACKET_TYPES, use just the one that # implies the desired default or none of them (resulting in af_packet) # (AF_XDP_TYPES takes precedence and hence af_packet is the # default default). # Optional list of PCI device drivers that should use DPDK's built-in type # specific driver instead of af_packet of af_xdp. # It is not recommended to remove any drivers from the default value # (especially the first three that don't have a corresponding # netdev/link in Linux). The main purpose would be to be able to add # rebranded Mellanox drivers (if they are rebranded on that level), # but can also be used to force using af_packet or af_xdp on mellanox # devices. #- name: NATIVE_DRIVERS # value: vfio-pci igb_uio uio_pci_generic mlx4_core mlx5_core # Optional AF-XDP busy budget (uses 0/disabled per default). #- name: AF_XDP_BUSY_BUDGET # value: '0'