Felix version 2.3.0 This is a feature release of Felix, Calico's per-host agent. The headline feature in this release is a significant increase in scale when using the Kubernetes datastore driver by introducing support for a new daemon, Typha. Typha connects to the Kubernetes API server and fans out updates to a number of Felixes. By having only a handful of Typha instances connected to the API server instead of many Felixes, we place a lot less load on the API server. In addition, Typha is able to squash unimportant updates form the API server, significantly reducing the number of mesages each Felix has to handle. Typha is disabled by default. The documentation for how to configure Typha and Felix together will follow as part of the wider Calico 2.3.0 meta-release. This release also contains a number of minor enhancements: - Performance: Scan iptables-save output incrementally when calculating hashes. - Performance: Disable WithFields logging in the ipsets resync parse loop. - Performance: Disable some WithField calls in the inner iptables resync loop. - Allow the iptables post-write check interval to be set. - Improve diagnostics around ipset restore failures - Log ip6tables-save stderr if it fails - Convert interval config parameters to time.Duration for increased precision. - Rev libcalico-go to v1.4.4 and Typha to v0.2.2. - Make JUST_A_MINUTE the default, as it's more useful for devs The k8sfv functional tests also got a number of enhancements: - Update imports for recent client-go/apimachinery moves - Check Felix does not die before end of test - mechanism for only running quick tests - fix client authorization to API server 1.6 - Ensure that ip6_tables module is loaded - put Typha in the loop. The DockerHub and Quay.io `calico/felix` images have been updated. The `calico/node` image based on this release will follow shortly. Since we're targetting Kubernetes for this release, we haven't yet updated the OpenStack debs and RPMs, those should follow in a few days.