Revision 00bb13bdf2757dc8dbe8b92ae1c29bd7d0fad668 authored by Paul Chaignon on 07 June 2023, 15:37:53 UTC, committed by Sebastian Wicki on 13 June 2023, 19:22:04 UTC
[ upstream commit d0ab559441311dbe0908834a86d633aa9eeb6a84 ] We use this wildcard IPv6 CIDR in the catch-all default-drop OUT policy as well as in the FWD policy. It was incorrectly set to ::/128 instead of ::/0 and would therefore not match anything instead of matching everything. This commit fixes it. Fixes: e802c2985 ("ipsec: Refactor wildcard IP variables") Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com> Signed-off-by: Sebastian Wicki <sebastian@isovalent.com>
1 parent 3a5aa36
File | Mode | Size |
---|---|---|
complexity-tests | ||
custom | ||
include | ||
lib | ||
mock | ||
sockops | ||
tests | ||
.gitignore | -rw-r--r-- | 154 bytes |
COPYING | -rw-r--r-- | 17.6 KB |
Makefile | -rw-r--r-- | 18.1 KB |
Makefile.bpf | -rw-r--r-- | 3.0 KB |
bpf_alignchecker.c | -rw-r--r-- | 3.0 KB |
bpf_features.h | -rw-r--r-- | 333 bytes |
bpf_host.c | -rw-r--r-- | 35.2 KB |
bpf_lxc.c | -rw-r--r-- | 55.2 KB |
bpf_network.c | -rw-r--r-- | 1.9 KB |
bpf_overlay.c | -rw-r--r-- | 12.3 KB |
bpf_sock.c | -rw-r--r-- | 29.6 KB |
bpf_xdp.c | -rw-r--r-- | 6.7 KB |
cilium-probe-kernel-hz.c | -rw-r--r-- | 3.9 KB |
ep_config.h | -rw-r--r-- | 1.5 KB |
filter_config.h | -rw-r--r-- | 508 bytes |
init.sh | -rwxr-xr-x | 18.5 KB |
netdev_config.h | -rw-r--r-- | 375 bytes |
node_config.h | -rw-r--r-- | 6.8 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...