From 742b7564e8fad2fc821891d48abdfab75c744be8 Mon Sep 17 00:00:00 2001 From: Wazir Ahmed Date: Tue, 30 Aug 2022 22:57:21 +0530 Subject: [PATCH] Modified hubble filter flags to get the least amount of traffic possible Signed-off-by: Wazir Ahmed --- src/plugin/cilium.go | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/src/plugin/cilium.go b/src/plugin/cilium.go index d8dbefeb..0aee3b59 100644 --- a/src/plugin/cilium.go +++ b/src/plugin/cilium.go @@ -831,14 +831,21 @@ func StartHubbleRelay(StopChan chan struct{}, cfg types.ConfigCiliumHubble) { { TcpFlags: []*flow.TCPFlags{ {SYN: true}, - {FIN: true}, - {RST: true}, - {NS: true}, - {ECE: true}, }, }, { - Protocol: []string{"udp", "icmp", "http", "dns"}, + Protocol: []string{"udp"}, + Reply: []bool{false}, + }, + { + Protocol: []string{"icmp", "http", "dns"}, + }, + }, + Blacklist: []*cilium.FlowFilter{ + { + TcpFlags: []*flow.TCPFlags{ + {ACK: true}, + }, }, }, }