bpf, dbg: add vtep policy for flexible routing from/to outside world#1

Open

zstas wants to merge 176 commits intomainfrom

vtep_policy_cleanup

Commits on Sep 11, 2025

helm: Cleanup KPR values for old cilium versions
sayboras
committed
docs: document request-timeout ingress annotation

iofq
authored and
qmonnet
committed
analyze: add test for concurrent calls to Reachability() on the same Blocks
ti-mo
committed
analyze: store branch prediction result in bitmap
ti-mo
committed
feat: add IPv4 packet tracing via IP options

Bigdelle
authored and
pchaigno
committed
feat: add IP option tracing parsing in ingress programs

Bigdelle
authored and
pchaigno
committed
test: update drop notify test to accommodate versioning

Bigdelle
authored and
pchaigno
committed
feat: expose IP trace in drop notify struct

Bigdelle
authored and
pchaigno
committed
feat: expose IP trace in trace notify messages

Bigdelle
authored and
pchaigno
committed
feat: add IPTraceID into flow struct

Bigdelle
authored and
pchaigno
committed
feat: add IP trace ID filter to Hubble CLI

Bigdelle
authored and
pchaigno
committed

Commits on Sep 12, 2025

pkg: add port name to address-based lrp

liyihuang
authored and
aditighag
committed
redirectpolicy: Add unit test cases
aditighag
committed

Commits on Sep 14, 2025

fix(deps): update aws-sdk-go-v2 monorepo
cilium-renovate[bot]
committed
pkg/bpf: Improve tail call pruning with knowledge of load config

dylandreimerink
authored and
ti-mo
committed
pkg/bpf: Move unused tail call pruning logic to separate file

dylandreimerink
authored and
ti-mo
committed
pkg/bpf: Remove `LoadCollectionSpec`

dylandreimerink
authored and
ti-mo
committed
chore(deps): update dependency protocolbuffers/protobuf to v32.1
cilium-renovate[bot]
committed
images: update cilium-{runtime,builder}

Cilium Imagebot
authored and
cilium-renovate[bot]
committed

Commits on Sep 15, 2025

node/manager: TestNodesStartupPruning poll state

0xch4z
authored and
joamaki
committed
Docs: update for Rancher managed RKE2 installation

fwardzic
authored and
giorio94
committed
loadbalancer: allow HostPort for multiple protos on same port

bersoare
authored and
borkmann
committed
cilium-cli/features: use common cmd metric list command
aanm
committed
clustermesh: remove GlobalServiceCache in cilium-agent

MrFreezeex
authored and
jrajahalme
committed
clustermesh: homogenize ClusterMesh metrics based on watch store

MrFreezeex
authored and
jrajahalme
committed
datapath: remove outbound ESP-in-overlay support
julianwiedmann
committed
datapath: remove inbound ESP-in-overlay support
julianwiedmann
committed
bpf: overlay: fine-tune ipcache lookup in ingress path
julianwiedmann
committed
fix(deps): update module github.com/azure/azure-sdk-for-go/sdk/azcore to v1.19.1
cilium-renovate[bot]
committed
loadbalancer: add helper to unformat a l4 addr

bersoare
authored and
borkmann
committed
iptables: handle notrack rules for pods in hostNetwork

bersoare
authored and
borkmann
committed
iptables: extend reconciler to handle noTrackHostPorts functionality

bersoare
authored and
borkmann
committed
pod watcher: handle no-track-host-ports annotation on pod events

bersoare
authored and
borkmann
committed
docs/examples: add doc and example on the no-track-host-ports configuration

bersoare
authored and
borkmann
committed
iptables: make iptables executables a member of iptables Manager struct

bersoare
authored and
borkmann
committed
iptables: add test cases for no-track-host-ports

bersoare
authored and
borkmann
committed
aws: fix bug for iterate the wrong subnets

liyihuang
authored and
joestringer
committed
build: Include hubble CLI dir in cilium container directories

HadrienPatte
authored and
pchaigno
committed
Move all `go build` environment variables to `GO_BUILD_ENV`

HadrienPatte
authored and
pchaigno
committed
sysdump: add resource usage of nodes and pods

darox
authored and
joestringer
committed

Commits on Sep 16, 2025

Commits on Sep 17, 2025

Commits on Sep 18, 2025

Commits on Sep 19, 2025

ci: bump libtinfo to v6 for ci-integration

Artyop
authored and
aanm
committed
endpointsynchronizer: suppress warning log when endpoint is terminating
giorio94
committed
Move L3-csum updating before L4 processing

yushoyamaguchi
authored and
pchaigno
committed
Add FPT Telecom to USERS

minhng99
authored and
xmulligan
committed
docs: Update the bpf toolchain documentation to reflect repository changes

dkanaliev
authored and
dylandreimerink
committed
hubble: Fix non-accurate event count debug log in observer

devodev
authored and
kaworu
committed
counter: Add RangeCounter and IntervalRangeCounter

devodev
authored and
kaworu
committed
hubble: Rate-limit lost events sent from Observer server

devodev
authored and
kaworu
committed
hubble: Rate-limit lost events sent from monitor consumer

devodev
authored and
kaworu
committed
api: Add First/Last timestamps to flow.LostEvent

devodev
authored and
kaworu
committed
hubble: Support time range in emitted lost events

devodev
authored and
kaworu
committed
hubble-cli: Print lost event time range in observe

devodev
authored and
kaworu
committed
gh: e2e-upgrade: temporarily disable XDP for config 6 and 14
julianwiedmann
committed
kvstoremesh: fix regression in determining end of bootstrap phase
giorio94
committed
.github/workflows: automatically add /test for renovate PRs
aanm
committed

Commits on Sep 21, 2025

Commits on Sep 22, 2025

Commits on Sep 23, 2025

ipsec: remove dead usage of EncryptedOverlayReqID

ldelossa
authored and
pchaigno
committed
daemon: don't enable policy log with debug

bimmlerd
authored and
tklauser
committed
endpoint: share endpoint policy debug logger

bimmlerd
authored and
tklauser
committed
gateway-api: Fix incorrect `Owns` call in refactor
youngnick
committed
hubble: move the NamespaceManager into its own directory
kaworu
committed
hubble: introduce FakeNamespaceManager
kaworu
committed
hubble: refactor namespace manager as a Cell
kaworu
committed
shell:hive: make shellSockPath configurable via cell config

smagnani96
authored and
tklauser
committed
README: Update releases

jrajahalme
authored and
qmonnet
committed
datapath/linux/route: Disregard MTU value when deleting routes
pippolo84
committed
k8s/client/testutils: Fill in TypeMeta for objects added via clientset
joamaki
committed
doc: add note on hostfw and ipsec interaction

darox
authored and
pchaigno
committed
bpf/scapy: misc fixes (v6 utils, formatting)

msune
authored and
aanm
committed
bpf/tests: fix NULL iface MAC on ipv6 ND tests

msune
authored and
aanm
committed
bpf/lib: fix ICMPv6 csum for non-llsrc opt NS

msune
authored and
aanm
committed
bpf/scapy: fix ASSERT data vs __data

msune
authored and
aanm
committed
bpf/tests: adapt IPv6 NDP to scapy

msune
authored and
aanm
committed
bpf/test: more cleanups on IPv6 NDP test

msune
authored and
aanm
committed
bpf: Fix handling of encrypted packets in bpf_host
pchaigno
committed

Commits on Sep 24, 2025

bpf, dbg: add vtep policy for flexible routing from/to outside world
zstas
committed