Chapter 7. Configuring gateway mode

Procedure

1. Back up the existing network configuration by running the following command:

   $ oc get network.operator cluster -o yaml > network-config-backup.yaml

   Copy to Clipboard Toggle word wrap

2. Set the routingViaHost parameter to true for local gateway mode by running the following command:

   $ oc patch networks.operator.openshift.io cluster --type=merge -p '{"spec":{"defaultNetwork":{"ovnKubernetesConfig":{"gatewayConfig":{"routingViaHost": true}}}}}'

   Copy to Clipboard Toggle word wrap

3. Verify that local gateway mode has been set by running the following command:

   $ oc get networks.operator.openshift.io cluster -o yaml | grep -A 5 "gatewayConfig"

   Copy to Clipboard Toggle word wrap

   Example output

   apiVersion: operator.openshift.io/v1
   kind: Network
   metadata:
     name: cluster
   # ...
   gatewayConfig:
           ipv4: {}
           ipv6: {}
           routingViaHost: true 

   1

   
         genevePort: 6081
         ipsecConfig:
   # ...

   Copy to Clipboard Toggle word wrap

   1

   A value of true sets local gateway mode and a value of false sets shared gateway mode. In local gateway mode, traffic is routed through the host. In shared gateway mode, traffic is not routed through the host.

4. Optional: Enable IP forwarding globally by running the following command:

   $ oc patch network.operator cluster --type=merge -p '{"spec":{"defaultNetwork":{"ovnKubernetesConfig":{"gatewayConfig":{"ipForwarding": "Global"}}}}}'

   Copy to Clipboard Toggle word wrap

   1. Verify that the ipForwarding spec has been set to Global by running the following command:

      $ oc get networks.operator.openshift.io cluster -o yaml | grep -A 5 "gatewayConfig"

      Copy to Clipboard Toggle word wrap

      Example output

      apiVersion: operator.openshift.io/v1
      kind: Network
      metadata:
        name: cluster
      # ...
      gatewayConfig:
              ipForwarding: Global
              ipv4: {}
              ipv6: {}
              routingViaHost: true
            genevePort: 6081
      # ...

      Copy to Clipboard Toggle word wrap