Skip to content

Commit

Permalink
test: Turn off bpf tproxy
Browse files Browse the repository at this point in the history
bpf tproxy works only if the L7 proxy listener socket does not have
SO_REUSEPORT on. Otherwise there will be drops due to socket assign
failing.

Turn off bpf tproxy in the tests to be able to run on a new Envoy.

Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
  • Loading branch information
jrajahalme authored and pchaigno committed Feb 10, 2023
1 parent 32533a3 commit 0a736cf
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion test/k8sT/Policies.go
Original file line number Diff line number Diff line change
Expand Up @@ -1803,7 +1803,10 @@ var _ = SkipDescribeIf(func() bool {
By("Reconfiguring Cilium to enable BPF TProxy")
RedeployCiliumWithMerge(kubectl, ciliumFilename, daemonCfg,
map[string]string{
"bpf.tproxy": "true",
// bpf tproxy socket lookup fails on sockets
// that have SO_REUSEPORT on, so disable for
// now.
// "bpf.tproxy": "true",
})
}
})
Expand Down

0 comments on commit 0a736cf

Please sign in to comment.