WIP

Signed-off-by: Martynas Pumputis <m@lambda.lt>
cilium · Mar 10, 2024 · 9610c09 · 9610c09
1 parent 0376feb
commit 9610c09
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/bpf/lib/wireguard.h b/bpf/lib/wireguard.h
@@ -13,6 +13,8 @@
 #include "common.h"
 #include "overloadable.h"
 
+#include "lib/proxy.h"
+
 static __always_inline int
 wg_maybe_redirect_to_encrypt(struct __ctx_buff *ctx)
 {
@@ -135,7 +137,9 @@ wg_maybe_redirect_to_encrypt(struct __ctx_buff *ctx)
 	 * the dst check far bellow).
 	 */
 	if (!src || (src->sec_identity == HOST_ID &&
-		     ((ctx->mark & MARK_MAGIC_HOST_MASK) == MARK_MAGIC_HOST)))
+		     !(tc_index_from_ingress_proxy(ctx) ||
+		      tc_index_from_egress_proxy(ctx))))
+		     //((ctx->mark & MARK_MAGIC_HOST_MASK) == MARK_MAGIC_HOST)))
 # endif /* TUNNEL_MODE */
 		goto out;
 #endif /* !ENABLE_NODE_ENCRYPTION */