loader: don't disable rp-filter for IPsec

This was added all the way back with 79b4eba ("cilium: encrypt-node
needs rp_filter zerod otherwise packets are lost"), which matches the
error message in that it's about encryption for node IPs.

But as IPsec now only supports pod-to-pod traffic, we can likely remove
this part.

Signed-off-by: Julian Wiedmann <jwi@isovalent.com>

pkg/datapath/loader/base.go

@@ -17,7 +17,6 @@ import (
 
 	"github.com/cilium/cilium/pkg/bpf"
 	"github.com/cilium/cilium/pkg/datapath/alignchecker"
-	"github.com/cilium/cilium/pkg/datapath/connector"
 	"github.com/cilium/cilium/pkg/datapath/linux/ethtool"
 	"github.com/cilium/cilium/pkg/datapath/linux/linux_defaults"
 	"github.com/cilium/cilium/pkg/datapath/linux/route"
@@ -203,10 +202,6 @@ func (l *loader) reinitializeIPSec(ctx context.Context) error {
 	progs := []progDefinition{{progName: symbolFromNetwork, direction: dirIngress}}
 	var errs error
 	for _, iface := range interfaces {
-		if err := connector.DisableRpFilter(l.sysctl, iface); err != nil {
-			log.WithError(err).WithField(logfields.Interface, iface).Warn("Rpfilter could not be disabled, node to node encryption may fail")
-		}
-
 		device, err := netlink.LinkByName(iface)
 		if err != nil {
 			return fmt.Errorf("retrieving device %s: %w", iface, err)