avhost/weave repository overview

⁠Weave Net

This repository contains a fork of Weave Net, the first product developed by Weaveworks. Since Weaveworks has shut down, this repo aims to continue maintaining Weave Net, and to publish releases regularly.

⁠Requirements

⁠Weave Net 4.x

Weave Net 4.x uses native nftables for its firewall, NAT, IPsec, and Network Policy rules. It no longer calls iptables, iptables-nft, iptables-legacy, or ipset, and the 4.x container images do not install those tools. Weave owns an isolated inet weave table and does not modify unrelated nftables tables.

The host must provide Linux nf_tables kernel support. The nft userspace tool is included in the Weave images, so it does not have to be installed separately on the host.

Docker may use its own native nftables firewall backend alongside Weave. To run the entire host without active iptables rules, use a Docker release that supports the nftables backend and configure /etc/docker/daemon.json with:

{
  "firewall-backend": "nftables"
}

Validate the Docker configuration before restarting the daemon. Existing Docker daemon settings, such as custom runtimes, must remain in the same JSON object.

The release images are tagged 4.0.0, for example:

avhost/weave:4.0.0
avhost/weaveexec:4.0.0
avhost/weave-kube:4.0.0
avhost/weave-npc:4.0.0

⁠Weave Net 3.x and earlier

Weave Net 3.x and earlier use the iptables/ipset implementation. They require iptables, iptables-nft, or iptables-legacy and do not provide the native nftables backend introduced in 4.x.

When upgrading an existing installation, stop the old Weave container before launching 4.x. Keep the previous image available until peer connectivity, Weave DNS, container egress, and the inet weave ruleset have been verified.

⁠Funding

⁠Using Weave Net in other ways

Please refer to the documentation⁠.

⁠Building Weave Net

Details can be found here⁠.

⁠Documentation status

The public documentation that used to exist in the site directory has been moved to the original/site directory. A new website directory has been created, and populated with the content of the original/site directory, rearranged and reformatted for being built with Jekyll and published to the GitHub pages site https://aventer-ug.github.io/weave⁠.

The documentation will now be maintained and published from the website directory exclusively.