Calico Calico node experiencing high CPU usage.

High CPU usage can be caused by various factors such as misconfiguration, resource constraints, or excessive network traffic.

Understanding Calico and Its Purpose

Calico is a popular open-source networking and network security solution for containers, virtual machines, and native host-based workloads. It is designed to provide scalable, high-performance, and secure networking for cloud-native applications. Calico integrates seamlessly with Kubernetes, OpenShift, and other orchestration platforms, offering features like network policy enforcement, IP address management, and more. For more information, visit the official Calico documentation.

Identifying the Symptom: High CPU Usage

One common issue that users may encounter with Calico is high CPU usage on a node. This can manifest as slower performance, increased latency, or even node instability. Monitoring tools may report unusually high CPU consumption by Calico processes, which can impact the overall performance of your cluster.

Common Indicators

  • Increased latency in network operations.
  • Node instability or crashes.
  • High CPU usage reported by monitoring tools.

Exploring the Issue: CALICO-1026

The error code CALICO-1026 refers to a situation where a Calico node is experiencing high CPU usage. This can be due to several factors, including misconfiguration, insufficient resources, or excessive network traffic. Understanding the root cause is crucial for resolving the issue effectively.

Potential Causes

  • Misconfigured network policies leading to excessive processing.
  • Resource constraints on the node.
  • High volume of network traffic requiring extensive processing.

Steps to Resolve High CPU Usage

To address the high CPU usage issue, follow these steps:

Step 1: Monitor Resource Usage

Use monitoring tools like Prometheus and Grafana to track CPU usage and identify patterns. Check if the CPU usage is consistently high or spikes at certain times.

Step 2: Analyze Network Policies

Review your network policies to ensure they are not overly complex or misconfigured. Simplify policies where possible to reduce processing overhead. Refer to the Calico network policy documentation for guidance.

Step 3: Optimize Resource Allocation

Ensure that your nodes have sufficient CPU and memory resources allocated. Consider scaling your cluster by adding more nodes or increasing the resources of existing nodes.

Step 4: Update Calico

Ensure you are running the latest version of Calico, as updates often include performance improvements and bug fixes. Follow the upgrade guide to update your Calico installation.

Conclusion

High CPU usage on a Calico node can impact the performance and stability of your cluster. By monitoring resource usage, optimizing network policies, and ensuring sufficient resources, you can mitigate this issue effectively. Stay updated with the latest Calico releases to benefit from performance enhancements and fixes.

Master

Calico

in Minutes — Grab the Ultimate Cheatsheet

(Perfect for DevOps & SREs)

Most-used commands
Real-world configs/examples
Handy troubleshooting shortcuts
Your email is safe with us. No spam, ever.

Thankyou for your submission

We have sent the whitepaper on your email!
Oops! Something went wrong while submitting the form.

Calico

Cheatsheet

(Perfect for DevOps & SREs)

Most-used commands
Your email is safe with us. No spam, ever.

Thankyou for your submission

We have sent the whitepaper on your email!
Oops! Something went wrong while submitting the form.

MORE ISSUES

Calico Calico node unable to access specific BGP attribute.
Misconfiguration or inaccessibility of the BGP attribute.
Calico Calico node unable to access specific BGP policy.
BGP policy configuration is incorrect or unreachable.
Calico Calico node unable to access specific VLAN.
VLAN configuration issues or network reachability problems.
Calico Calico node unable to access specific BGP community.
Misconfiguration or network reachability issues with the BGP community.
Calico Calico node unable to access specific BGP route.
Misconfiguration in BGP route settings or network reachability issues.
Calico Calico node unable to access specific BGP peer.
BGP peer configuration is incorrect or the peer is unreachable.
Calico Calico node unable to access specific VRF.
VRF configuration is incorrect or the VRF is not reachable.
Calico Calico node unable to access specific AS number.
AS number configuration is incorrect or unreachable.
Calico Calico node unable to access specific CIDR range.
Incorrect CIDR range configuration or network reachability issues.
Calico Calico node unable to access specific interface.
Interface configuration issues.
Calico Calico node unable to access specific gateway.
Gateway configuration issues or network reachability problems.
Calico Calico node unable to access specific route.
Route configuration may be incorrect or the route may not be reachable.
Calico Calico node unable to access specific subnet.
Subnet configuration issues or network reachability problems.
Calico Calico node unable to access specific IP address.
IP address configuration issue or network reachability problem.
Calico Calico node unable to access specific endpoint.
The endpoint configuration may be incorrect or the endpoint may not be reachable.
Calico Calico node unable to access specific pod.
Pod configuration issues or network policy misconfigurations.
Calico Calico node unable to access specific namespace.
Namespace configuration issues or access restrictions.
Calico Calico node unable to access specific service.
Service configuration issues or network policies blocking access.
Calico Calico node unable to access internal network.
Network policies and routing configurations may be misconfigured, preventing internal access.
Calico Calico node unable to access cloud metadata service.
Network misconfiguration preventing access to the cloud metadata service.
Calico Calico node unable to access etcd.
Network connectivity issues or etcd service not running.
Calico Calico node unable to access external network.
Network policies and routing configurations may be blocking external access.
Calico Calico node experiencing high CPU usage.
High CPU usage can be caused by various factors such as misconfiguration, resource constraints, or excessive network traffic.
Calico Calico node experiencing high memory usage.
High memory usage can be caused by various factors such as misconfiguration, resource-intensive workloads, or memory leaks.
Calico Calico node unable to access Kubernetes API.
Network connectivity issues or misconfiguration preventing access to the Kubernetes API server.
Calico Calico node is experiencing connectivity issues due to time synchronization problems.
The Calico node has incorrect time settings, leading to potential connectivity and synchronization issues.
Calico Calico node unable to join cluster.
Network configuration issues preventing node communication.
Calico Calico BGP peer not reachable.
Network connectivity issues or incorrect BGP configuration.
Calico Calico IP pool incorrectly configured.
The IP pool configuration does not match the desired CIDR range.
Calico Calico node unable to reach API server.
Network connectivity issues or API server is not accessible from the node.
Calico Calico node unable to resolve DNS.
Calico node lacks proper DNS configuration or access to a DNS server.
Calico IP address conflict detected.
Conflicting IP allocations in the network.
Calico Calico metrics not available.
Metrics server not running or misconfigured.
Calico CALICO-1017
Calico version mismatch across nodes.
Calico Network policy not enforced.
Network policy is incorrectly defined or the policy controller is not running.
Calico VXLAN mode not working.
Incorrect VXLAN configuration or unsupported network infrastructure.
Calico Calico node pods stuck in CrashLoopBackOff.
Calico node pods are unable to start due to insufficient resources or configuration errors.
Calico IPAM block not released.
CALICO-1013: IPAM block not released.
Calico Node-to-node mesh not functioning.
BGP configurations are incorrect or node-to-node mesh is not enabled.
Calico Calicoctl command fails with authentication error.
Incorrect credentials or insufficient permissions for accessing the datastore.
Calico Service IPs not reachable.
Check kube-proxy configuration and ensure Calico is correctly handling service IPs.
Calico Calico CNI plugin not found.
The Calico CNI plugin is not installed or configured correctly on the node.
Calico Packet drops observed in the network.
MTU mismatch causing packet drops.
Calico IP-in-IP encapsulation not working.
IP-in-IP configuration is not enabled on all nodes.
Calico IP pool is exhausted.
The IP pool configured in Calico has run out of available IP addresses.
Calico Datastore connection failure.
Incorrect datastore configuration or network issues preventing access.
Calico Felix is not running.
Felix is not running due to misconfiguration or errors in the logs.
Calico Policy not applied to workload.
Policy not applied to workload.
Calico BGP session is not established.
Incorrect BGP configuration or unreachable peer IPs.
Calico Calico node is not ready.
The calico-node pod is not functioning correctly, possibly due to network connectivity issues.

Backed by

Platform

AI OpsAlert Grouping & De-DuplicationPlayBooksKubernetes Bot

Resources

DocumentationFun For DevsBlog

Contact

Contact UsAbout UsCareersTerms and ConditionsPrivacy PolicyShipping & and Delivery PolicyCancellation & Refund Policy

Connect

Slack CommunityGithubLinkedInX (Twitter)
Made with ❤️ in Bangalore & San Francisco 🏢

Doctor Droid