Skip to content

Managed Daemons networking changes.#4821

Merged
aviral92 merged 1 commit intoaws:devfrom
aviral92:managed-daemons-networking
Dec 18, 2025
Merged

Managed Daemons networking changes.#4821
aviral92 merged 1 commit intoaws:devfrom
aviral92:managed-daemons-networking

Conversation

@aviral92
Copy link
Contributor

@aviral92 aviral92 commented Dec 6, 2025

Please make sure you've read and understood our contributing guidelines;
https://github.com/aws/amazon-ecs-agent/blob/master/CONTRIBUTING.md

Please provide the following information:

Summary

What does this pull request do?
This PR is for Managed Daemons Networking changes. Currently its only supported for Managed Instances.

Implementation details

How are the changes implemented?
This PR handles a new network mode(daemon-bridge) for daemon tasks, sets up a new network namespace(hots-daemon) for daemon tasks, handles it lifecycle, updates IPtables to support egress, connects to the fargate-bridge for TMDS support.

Testing

Tested with creating a debug AMI with these changes, and see the required namespace get setup when a daemon task is launched and connectivity with fargate-bridge on the host. Also ECS exec works fine with daemon tasks.

New tests cover the changes: Yes.

Description for the changelog

Managed Daemons Networking changes for Managed Instance support.

Additional Information

Does this PR include breaking model changes? If so, Have you added transformation functions?
No.

Does this PR include the addition of new environment variables in the README?
No.

Licensing

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@aviral92 aviral92 requested a review from a team as a code owner December 6, 2025 00:22
@aviral92 aviral92 force-pushed the managed-daemons-networking branch from 557e36d to 9360241 Compare December 9, 2025 18:30
@aviral92 aviral92 self-assigned this Dec 9, 2025
@aviral92 aviral92 requested a review from JoseVillalta December 9, 2025 20:12
Copy link
Contributor

@JoseVillalta JoseVillalta left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM with minor revisions. Biggest thing is to make sure this gets tested end to end in trunk and non-trunk ENIs.

@aviral92 aviral92 force-pushed the managed-daemons-networking branch from 9360241 to 10d7a59 Compare December 16, 2025 21:53
@aviral92 aviral92 force-pushed the managed-daemons-networking branch from 10d7a59 to f8a2cde Compare December 16, 2025 22:23
JoseVillalta
JoseVillalta previously approved these changes Dec 17, 2025
@aviral92 aviral92 force-pushed the managed-daemons-networking branch from 56940f5 to f966279 Compare December 17, 2025 22:15
Copy link
Contributor

@JoseVillalta JoseVillalta left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@aviral92 aviral92 enabled auto-merge December 17, 2025 23:45
@aviral92 aviral92 merged commit 2a3bcad into aws:dev Dec 18, 2025
43 of 45 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants