cilium / cilium / 11618
39%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 454
Run time 43s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 45.359% (-0.01%) from 45.373%
11618

push

travis-ci-com

borkmann 
bpf: always force egress nat upon nodeport requests

For requests originating from outside world to a NodePort service,
enforce doing SNAT for remote backends no matter whether the source
port is below ephemeral port range.

Client node:

  # curl --local-port 23 192.168.1.125:30000
  <html><body><h1>It works!</h1></body></html>

Intermediate node, before:

  [...]
  13:39:49.979959 IP 192.168.1.120.23 > 192.168.1.125.30000: Flags [S], seq 1574471836, win 29200, options [mss 1460,sackOK,TS val 471781941 ecr 0,nop,wscale 7], length 0
  13:39:49.979975 IP 192.168.1.120.23 > 10.12.22.74.80: Flags [S], seq 1574471836, win 29200, options [mss 1460,sackOK,TS val 471781941 ecr 0,nop,wscale 7], length 0
  13:39:50.983064 IP 192.168.1.120.23 > 192.168.1.125.30000: Flags [S], seq 1574471836, win 29200, options [mss 1460,sackOK,TS val 471782945 ecr 0,nop,wscale 7], length 0
  13:39:50.983078 IP 192.168.1.120.23 > 10.12.22.74.80: Flags [S], seq 1574471836, win 29200, options [mss 1460,sackOK,TS val 471782945 ecr 0,nop,wscale 7], length 0
  [...]

Intermediate node, after:

  [...]
  13:35:02.917628 IP 192.168.1.120.23 > 192.168.1.125.30000: Flags [S], seq 1384089837, win 29200, options [mss 1460,sackOK,TS val 471494876 ecr 0,nop,wscale 7], length 0
  13:35:02.917644 IP 10.11.185.253.61009 > 10.12.22.74.80: Flags [S], seq 1384089837, win 29200, options [mss 1460,sackOK,TS val 471494876 ecr 0,nop,wscale 7], length 0
  13:35:02.917900 IP 10.12.22.74.80 > 10.11.185.253.61009: Flags [S.], seq 1601640307, ack 1384089838, win 28960, options [mss 1460,sackOK,TS val 1089404797 ecr 471494876,nop,wscale 7], length 0
  13:35:02.917921 IP 192.168.1.125.30000 > 192.168.1.120.23: Flags [S.], seq 1601640307, ack 1384089838, win 28960, options [mss 1460,sackOK,TS val 1089404797 ecr 471494876,nop,wscale 7], length 0
  [...]

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

26102 of 57545 relevant lines covered (45.36%)

1197.13 hits per line

Jobs
ID Job ID Ran Files Coverage
1 11618.1 0
45.36
 Travis Job 11618.1
Source Files on build 11618
Detailed source file information is not available for this build.