https://github.com/cilium/cilium
Revision 332bf3333de4f211ff2849affb1c219f1c1bcf18 authored by Daniel Borkmann on 22 November 2023, 09:12:32 UTC, committed by Daniel Borkmann on 04 December 2023, 14:09:24 UTC
Fix the default route masquerading `--enable-masquerade-to-route-source` option
in two aspects:

- Output devices should be ! -o cilium_+
- Destination must not be 0.0.0.0/0 but rather ! -d snatDstExclusionCIDR

The fixes have been validated in the user's environment that they address the
connectivity issue they were experiencing under mentioned agent option.

Fixes: 0d10aca58f44 ("cilium, iptables: Extend to cover default route in enable-masquerade-to-route-source")
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
1 parent 223c39d
History
Tip revision: 332bf3333de4f211ff2849affb1c219f1c1bcf18 authored by Daniel Borkmann on 22 November 2023, 09:12:32 UTC
cilium, iptables: Fix default SNAT rule under masq-to-route-source
Tip revision: 332bf33
File Mode Size
.devcontainer
.github
.nvim
.travis
.vscode
Documentation
api
bpf
bugtool
cilium-dbg
cilium-health
clustermesh-apiserver
contrib
daemon
examples
hack
hubble-relay
images
install
operator
pkg
plugins
test
tools
vendor
.authors.aux -rw-r--r-- 416 bytes
.clang-format -rw-r--r-- 7.6 KB
.clomonitor.yml -rw-r--r-- 984 bytes
.gitattributes -rw-r--r-- 887 bytes
.gitignore -rw-r--r-- 1.8 KB
.golangci.yaml -rw-r--r-- 4.1 KB
.mailmap -rw-r--r-- 6.4 KB
.travis.yml -rw-r--r-- 506 bytes
AUTHORS -rw-r--r-- 46.8 KB
CODEOWNERS -rw-r--r-- 26.1 KB
CODE_OF_CONDUCT.md -rw-r--r-- 2.2 KB
CONTRIBUTING.md -rw-r--r-- 691 bytes
FURTHER_READINGS.rst -rw-r--r-- 6.4 KB
LICENSE -rw-r--r-- 11.1 KB
MAINTAINERS.md -rw-r--r-- 4.5 KB
Makefile -rw-r--r-- 40.6 KB
Makefile.defs -rw-r--r-- 7.1 KB
Makefile.docker -rw-r--r-- 7.1 KB
Makefile.quiet -rw-r--r-- 818 bytes
README.rst -rw-r--r-- 19.6 KB
SECURITY.md -rw-r--r-- 1.0 KB
USERS.md -rw-r--r-- 31.7 KB
VERSION -rw-r--r-- 11 bytes
Vagrantfile -rw-r--r-- 14.9 KB
go.mod -rw-r--r-- 12.6 KB
go.sum -rw-r--r-- 125.5 KB
netlify.toml -rw-r--r-- 92 bytes
stable.txt -rw-r--r-- 8 bytes
vagrant_box_defaults.rb -rw-r--r-- 334 bytes

README.rst

back to top