docs: refactor and migrate wiki

This patch migrates the wiki to a docs/ folder inside this
repository. It also adapts to the migrated tigera docs website

Signed-off-by: Nathan Skrzypczak <[email protected]>

Author: sknat

README.md

@@ -1,30 +1,52 @@
 # Calico VPP dataplane
-<img src="http://docs.projectcalico.org/images/felix.png" width="100" height="100">
+
+<p float="left">
+<img src="https://docs.tigera.io/img/favicon.png" width="100" height="100">
+<img src="https://fd.io/img/fdio-color.svg" width="100" height="100">
+</p>
 
 This repository contains the source for Calico's VPP dataplane integration. The integration is in incubation status, with significant development in progress.
 
+### Integration goals
+
+The main goal of this integration is to accelerate the networking of k8s clusters that use Calico thanks to [FD.io VPP](https://fd.io/docs/vpp/master/). Nodes running the VPP dataplane provide faster networking to their pods, without requiring any changes to the applications running in the pods. 
+
+This integration aims to be as transparent as possible. In particular, the VPP dataplane does not have any additional requirements compared to regular Calico. All the networking configuration, including traffic encapsulation, IP Pools, BGP Configuration, etc. is done through regular Calico means. As a result, the docs present in this repository will only describe the VPP-specific elements.
+
+VPP-enabled nodes are entirely compatible with regular Calico nodes - meaning that it is possible to have a cluster with some VPP-enabled nodes and some regular nodes. This makes it easy to migrate a cluster from Linux or eBPF Calico networking to VPP-accelerated networking.
+
+In addition to that, the VPP Dataplane provides some additional features that are not available in Calico. For instance : 
+- We support very fast container traffic encryption with IPsec
+- SRv6 is also supported for node to node transport 
+- Network intensive applications can also require [memif packet interfaces](https://s3-docs.fd.io/vpp/23.02/interfacing/libmemif/index.html) for optimized user-space networking.
+- Network intensive endpoint applications (using TCP, TLS, UDP, QUIC, ...) can consume the [VPP Hoststack](https://wiki.fd.io/view/VPP/HostStack) with the VPP Client Library [VCL](https://wiki.fd.io/view/VPP/HostStack/VCL)
+- Containerized network functions requiring multiple high speef interfaces can leverage [multinet](docs/multinet.md)
+
+Finally, our goal is to make the deployment of Calico-VPP as simple as applying a YAML file through kubectl.
+
 ## Get Started Using Calico/VPP
 
-* Please [see the Wiki](https://github.com/projectcalico/vpp-dataplane/wiki) for more detailed information about this project
-* If you would like to try it, you can read the [Setup Instructions](https://github.com/projectcalico/vpp-dataplane/wiki/Getting-started)
-* If you want to learn more about Calico, see the documentation on [docs.projectcalico.org](https://docs.projectcalico.org).
+* Please see our [Getting started page](https://docs.tigera.io/calico/latest/getting-started/kubernetes/vpp/getting-started) for instructions on how to set it up on a cluster.
+* If you want to learn more about Calico, see the documentation on [docs.tigera.io/calico](https://docs.tigera.io/calico).
 * If you have questions, feel free to drop us a line in the [Calico Slack room #vpp](https://calicousers.slack.com/archives/C017220EXU1)
+* Check out [Release notes](RELEASE_NOTES.md)
 
-## Get Started Developing Calico/VPP
+### Software Architecture
 
-Contributions to this code are welcome! 
+For technical details about the Calico-VPP integration, see the [VPP dataplane implementation details](https://docs.tigera.io/calico/latest/reference/vpp/technical-details).
 
-Before starting, make sure you've read [the Calico contributor guide][contrib].
+### Contributing
 
-You can follow the [guide to setup a kind based development cluster](https://github.com/projectcalico/vpp-dataplane/blob/master/DEVELOPPER_GUIDE.md)
+Contributions to this code are welcome! 
 
+Before starting, make sure you've read [the Calico contributor guide](CONTRIBUTING.md).
 
-### License
+You can follow the [guide to setup a kind based development cluster](docs/developper_guide.md)
 
-Calico binaries are licensed under the [Apache v2.0 license](LICENSE), with the exception of some [GPL licensed eBPF programs](https://github.com/projectcalico/calico/tree/master/felix/bpf-gpl).
+Or refer to the [developper documentation in this repository](docs)
 
-Calico imports packages with a number of apache-compatible licenses. For more information, see [filesystem/licenses](./filesystem/licenses). In addition, the base container image contains
-pre-packaged software with a variety of licenses.
+## License
 
+Calico binaries are licensed under the [Apache v2.0 license](LICENSE), with the exception of some [GPL licensed eBPF programs](https://github.com/projectcalico/calico/tree/master/felix/bpf-gpl/README).
 
-[contrib]: https://github.com/projectcalico/calico/blob/master/CONTRIBUTING_CODE.md
+Calico imports packages with a number of apache-compatible licenses. For more information, see [licenses](https://github.com/projectcalico/calico/blob/master/calico/LICENSE). In addition, the base container image contains pre-packaged software with a variety of licenses.

RELEASE_NOTES.md

@@ -0,0 +1,207 @@
+### Calico-VPP v3.24.0
+> 19 Sep 2022
+
+* New features:
+  - Multinet support (including attaching multiple networks to pods via tun/tap or memif, services support, preparation for policies integration).
+  - Add strict RPF check for traffic originated from pods, with possibility to add exceptions with `allowSpoofing` annotation.
+  - Uplink route and MTU monitoring move from vpp-manager to the agent. As a consequence, multi-uplink now supports differentiated MTUs.
+
+* Bug fixes
+  - Integrate VPP fix for interrupt mode support with ENA/dpdk.
+  - Align with Wireguard v6 support added in Calico v3.24, and fix dual stack support for Wireguard.
+
+* Focus on code quality, add integration tests, address linting issues.
+
+#### Calico-VPP v3.24.1
+> 7 Dec 2022
+
+* GSO bug fixes
+* BGP secret support
+
+### Calico-VPP v3.23.0
+> 11 May 2022
+
+Calico/VPP has reached beta status !
+
+* The versioning scheme changes to match Calico's release number to make it clearer. The assumption being that Calico/VPP version ``vA.B.X`` works with Calico version ``vA.B.Y`` in the event there are independent bugfix releases.
+* Many bugfixes went in for this release :
+  - Checking for IP address conflict before creating pods
+  - Refactoring the etcd watcher logic to better handle expirations, and network failures.
+  - For ipsec, cancel pending negotiation if we are switching the encapsulation type away from ipsec.
+  - Fix disabling Wireguard on a per-node basis
+  - Fix a NAT session creation race condition.
+  - Fix af-packet interface locking due to a missing kick
+  - Fix buffer accounting for pods
+  - Reduce ipset resolution complexity
+  - Expose interface tag for dpdk interfaces, to mark them as an uplink interface for the calico-vpp-agent (e.g. ``dpdk { dev 0000:d8:0a.0 { tag main-enp216s0f1 }``)
+* Only keep the last two core dump files, as they can be quite huge in size (~1 GB)
+* Try to print the last core dump stack trace when starting up, when gdb is installed. We will release images with gdb installed while in beta status, as it is relatively low footprint (~40MB additional space) and eases debugging.
+* Improved the log output.
+* Change the VRF tag to a hash (netns, ipversion) followed by the ip version, and the netns basename truncated to 63 chars
+* Restart the agent on VPP's fault to simplify the state reconciliation process and avoid handling reprogramming failures.
+* Move the main uplink interface
+   - to a mounted & persistent netns if it is virtual (veth, tap), as the netns deletion would also trigger the interface deletion.
+   - to the vpp process netns if it is physical, to rely on the kernel for auto restore on VPP fault
+* Added better support for multiple TX queues per worker
+
+### Calico-VPP v0.18.1
+> 7 Jan 2022
+
+* Fix issues when deploying on Kind
+* Handle updates in the BGPConfiguration
+* VPP bugfixes
+
+### Calico-VPP v0.18.0
+> 17 Dec 2021
+
+* Add tests: kind environment, simple VCL container, testpmd serviceIP
+* Use per tap VRF for host traffic
+* Support BGPPeering features
+* Add hostPort/hostIP support in pods
+* Add support for host policies
+* Watch available buffers for interfaces
+* Partial support for multi tx infra
+
+### Calico-VPP v0.17.0
+> 15 Oct 2021
+
+* Upgrade Calico to v3.20.2
+* Add memif interface support for the pods
+* Add support for exposing the VPP transport stack (host stack) in the pods
+* Add prometheus exporter for pod network stats
+* Add support for multiple interfaces in VPP
+* Fix wireguard connectivity with node churn
+* Enable compatibility with NSM
+* Bind BGP listener to node address only (fixes a crash on nodes with IPv6 disabled)
+* Fix packet drops with the af_packet driver and GRO
+
+### Calico-VPP v0.16.0
+> 23 Aug 2021
+
+* Upgrade Calico to v3.20.0
+* Add kind support
+* Support service-based policy rules
+* Fix MTU configuration in VPP
+* Fix chained buffers handling with RDMA interfaces
+* Fix IPsec support in interrupt mode in AWS
+
+### Calico-VPP v0.15.0
+> 25 Jun 2021
+
+* Upgrade Calico to 3.19.1
+* Support named ports in services
+* Add RDMA and vmxnet3 drivers
+* Use a launch template instead of a configuration container on EKS
+* Add DPDK interrupt mode support for ENA on EKS
+* Fix state reconciliation with VXLAN encapsulation
+* Fixes for chained buffers with IPsec (IPsec now supports MTU > buffer size)
+
+Known issues
+* Chained buffers are not supported with RDMA interfaces. Ensure the MTU is smaller that the VPP buffer size (2048 bytes by default) when using RDMA interfaces (Mellanox CX series).
+* IPsec is not supported with DPDK in interrupt mode on EKS
+
+### Calico-VPP v0.14.0
+> 29 Apr 2021
+
+* Tech-preview release for Calico 3.19.0
+* Changed deployment model to a daemonset separate from calico-node
+* Changed uplink connectivity to L2 and to reuse the original interface name for better compatibility with pre-existing network configuration systems.
+* Add async crypto support for IPsec
+* Upgrade gobgp to v2.25.0
+* Improved MTU handling
+
+### Calico-VPP v0.13.0
+> 9 Mar 2021
+
+* Support for maglev load-balancing for services
+* Checksum offloads fix
+* Various bugfixes (ipsec, ping, interface deletion)
+
+### Calico-VPP v0.12.1
+> 19 Feb 2021
+
+* Add interrupt mode support for the DPDK driver
+* Fixes for IPsec encryption
+* Checksum offload fix for virtio interfaces
+* Graceful recovery if the number of queues cannot be configured with af_xdp
+
+### Calico-VPP v0.12.0
+> 4 Feb 2021
+
+* Full calico policies support
+* Support LoadBalancer / ExternalIP services
+* Support externalTrafficPolicy=local for services
+* Support MTU autodetection
+* VPP: reduce CPU consumption
+* Add IPv6 tests
+* Fixes for AVF, af_packet and af_xdp drivers
+* Support custom VXLan port
+
+### Calico-VPP v0.11.1
+> 8 Jan 2021
+
+* Update to calico v3.17.1
+* Fix bug on link-local address configuration on vpptap0
+* Fix vpp-manager crash on config generation failure
+* Improve / cleanup YAML deployment manifest
+
+### Calico-VPP v0.11.0
+> 16 Dec 2020
+
+* Policies support
+* Containerd compatibility
+
+### Calico-VPP v0.10.0
+> 7 Dec 2020
+
+* MTU configuration
+* Wireguard support (inter-operable with calico linux/eBPF nodes)
+* Updated yaml templates
+
+### Calico-VPP v0.9.0
+> 19 Nov 2020
+
+* Driver autodetection & unified integration
+* Integrated support for VPP native AVF driver
+* Calico Policies support alpha
+* Usability improvements
+
+### Calico-VPP v0.8.2
+> 17 Nov 2020
+
+* State reconciliation : allow calico-vpp agent restart
+* Added several performance tuning parameters
+
+### Calico-VPP v0.8.1
+> 21 Sep 2020
+
+* AF_XDP support
+* ICMP translation support (natOutgoing, serviceIP errors)
+
+### Calico-VPP v0.8.0
+> 4 Sep 2020
+
+* VXLAN support
+* tun (L3) interfaces for containers instead of tap (L2)
+* Support for natOutgoing for services with backends outside of the cluster (required for EKS)
+* Fix default route installation and restoration on the nodes
+* Fix UDP packet punting to the nodes
+
+### Calico-VPP v0.7.1
+> 20 Aug 2020
+* Fix ipsec support in v6 and dualstack
+
+### Calico-VPP v0.7.0
+> 19 Aug 2020
+* Support for natOugoing v4 & v6
+* Support of Dualstack clusters (also with ipip or ipsec between nodes)
+* More configuration params: default routes, buffer tuning, etc..
+
+### Calico-VPP v0.6.1
+> 28 Jul 2020
+
+* Upgrade to Calico v3.15.1
+* Support for virtio interfaces
+* Smaller and simpler test setup (it can run on a laptop!)
+* Kustomize-based configurations
+* Automated end-to-end testing

calico-vpp-agent/README.md

@@ -1,7 +1,9 @@
-# calico-vpp-agent
+# Calico/vpp Agent
 
 This directory contains the agent that configures VPP for:
 - CNI implementation
 - Services load balancing
 - Traffic encapsulation / encryption
 - NodePorts implementation
+- Policies implementation
+- Multiple network support

docs/README.md

@@ -0,0 +1,21 @@
+# Calico/VPP technical documentation
+
+This folder contains Calico/VPP technical documentation. This is this repository's counterpart of the documentation available at [https://docs.tigera.io](https://docs.tigera.io/calico/latest/reference/vpp/technical-details)
+
+It contains developer oriented documentation, details of VPP specific features :
+
+- [Interface configuration](config.md)
+- [Developper's getting started](developper_guide.md) 
+- [Multinet feature documetation](migrate_to_calicovpp.md) 
+- [Existing Calico cluster migration](multinet.md) 
+- [External resources](events.md) like events and presentations
+- [Guide to upgrade calico](upgrading.md)
+- [A networking model deep dive](networkmodel.md)
+
+Additionnaly this repository contains :
+
+- [A series of examples yamls](../test/yaml)
+- [A Simple VCL client and server example](../test/yaml/simple-vcl)
+- [A trex pod example](../test/yaml/trex)
+- [A vpp client pod example](../test/yaml/mvpp)
+- [An envoy pod example with optional VCL support](../test/yaml/envoy)

docs/_static/calico_vpp_vrf_layout.drawio

@@ -0,0 +1 @@
+<mxfile host="Electron" modified="2023-02-13T13:36:45.903Z" agent="5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) draw.io/20.8.10 Chrome/106.0.5249.199 Electron/21.3.5 Safari/537.36" etag="pNslYD8iPYl4Z_Tm3n7S" version="20.8.10" type="device"><diagram id="RxcxJ1UT-itXMrFT2446" name="archi">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</diagram></mxfile>