12566
39%

Ran 10 Jan 2020 11:24PM UTC

Jobs 1

Files 447

Run time 33s

Badge

Embed ▾

Committed 10 Jan 2020 11:02PM UTC coverage: 45.905%. Remained the same

Build # 12566

Build Type

push

travis-ci-com

Committed by

borkmann

Commit Message

bpf, external ip: fix service xlation for containers

We need to compile the service lookup back in for bpf_lxc when in the
config ENABLE_EXTERNAL_IP is set. Reason is that for !local IPs we
correctly bypass the xlation in the host ns, but given BPF cgroups hook
is not ns aware, it's also bypassed for containers which is not the
behavior of iptables based kube-proxy. Therefore, the only way to fix
it is to rely in this case on the veth ingress hook and finalize the
external IP xlation there. Spotted by Andre's amazing kube-proxy test
suite.

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

Coverage Stats

26638 of 58028 relevant lines covered (45.91%)

1206.39 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	12566.1	10 Jan 2020 11:24PM UTC	0	45.91	Travis Job 12566.1

Source Files on build 12566

Detailed source file information is not available for this build.

cilium / cilium / 12566
39%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 12566

cilium / cilium / 12566 39%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 12566

cilium / cilium / 12566
39%

README BADGES
x