New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BPF] Fix tracking packets that host forwards to devices not managed by calico #7595
[BPF] Fix tracking packets that host forwards to devices not managed by calico #7595
Conversation
libcalico-go/config/crd/crd.projectcalico.org_felixconfigurations.yaml
Outdated
Show resolved
Hide resolved
/merge-when-ready |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One tiny request on the test side, otherwise good to go
7fc0583
to
5c6da1a
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, probably worth squashing on merge?
49120fc
to
c3b88b3
Compare
…ico when BPF enabled
c3b88b3
to
7ea16a7
Compare
Done |
Description
Adds an option to list devices from which we always let conntrack to track traffic so that if there are interfaces like docker0 and docker injects rules to forward traffic that goes to the host to docker, we do not discrupt NAT on returning traffic.
fixes #7420
Related issues/PRs
Todos
Release Note
Reminder for the reviewer
Make sure that this PR has the correct labels and milestone set.
Every PR needs one
docs-*
label.docs-pr-required
: This change requires a change to the documentation that has not been completed yet.docs-completed
: This change has all necessary documentation completed.docs-not-required
: This change has no user-facing impact and requires no docs.Every PR needs one
release-note-*
label.release-note-required
: This PR has user-facing changes. Most PRs should have this label.release-note-not-required
: This PR has no user-facing changes.Other optional labels:
cherry-pick-candidate
: This PR should be cherry-picked to an earlier release. For bug fixes only.needs-operator-pr
: This PR is related to install and requires a corresponding change to the operator.