11788
39%

Ran 07 Nov 2019 08:05AM UTC

Jobs 1

Files 456

Run time 25s

Badge

Embed ▾

Committed 07 Nov 2019 07:37AM UTC coverage: 45.39% (+0.02%) from 45.366%

Build # 11788

Build Type

push

travis-ci-com

Committed by

borkmann

Commit Message

iptables: Fix incorrect SNAT for externalTrafficPolicy=local

So far, Cilium has installed a rule to clear the masquerade bit set by
kube-proxy in an attempt to still expose the correct source IP for kube-proxy
traffic regardless of the externalTrafficPolicy setting.

This works relatively well unless hostPort is getting involved. By clear the
bit, it is no longer possible to distinguish hostPort traffic and traffic for
which externalTrafficPolicy=local has been set.

Revert this strategy and stop clearing the masquerade bit. This allows to
remove several SNAT/MASQUERADE rules installed by Cilium which attempted to
replicate the kube-proxy SNAT behavior. Instead, leave it up to the user to
properly set externalTrafficPolicy=local.

Signed-off-by: Thomas Graf <thomas@cilium.io>

Coverage Stats

26436 of 58242 relevant lines covered (45.39%)

1538.66 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	11788.1	07 Nov 2019 08:05AM UTC	0	45.39	Travis Job 11788.1

Source Files on build 11788

Detailed source file information is not available for this build.

cilium / cilium / 11788
39%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11788

cilium / cilium / 11788 39%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11788

cilium / cilium / 11788
39%

README BADGES
x