Revision 6552e096d00377a1c1cd48351a4bdd97a00fcf8b authored by Yusuke Suzuki on 18 June 2024, 04:49:32 UTC, committed by Jarno Rajahalme on 21 June 2024, 07:00:02 UTC
This commit fixes the issue that datapath erroneously redirects
(or doesn't redirect) the reply packets to the proxy if the packet
hits the stale CT entry.

The PR #32653 fixed the issue when the TCP connection hits a closing
stale entry by having __ct_lookup return CT_NEW in that case so that
the caller can recreate an entry to update the proxy_redirect flag.

This commit lets datapath recreate an entry in the case where
non-TCP packets hit the stale CT entry with the proxy_redirect flag,
or an active TCP connection suddenly comes into the scope of an L7 policy.

Signed-off-by: Yusuke Suzuki <yusuke.suzuki@isovalent.com>
1 parent 4c8c03d
History
File Mode Size
.devcontainer
.github
.nvim
.vscode
Documentation
api
bpf
bugtool
cilium-dbg
cilium-health
clustermesh-apiserver
contrib
daemon
examples
hack
hubble
hubble-relay
images
install
operator
pkg
plugins
test
tools
vendor
.authors.aux -rw-r--r-- 416 bytes
.clang-format -rw-r--r-- 7.6 KB
.clomonitor.yml -rw-r--r-- 984 bytes
.gitattributes -rw-r--r-- 887 bytes
.gitignore -rw-r--r-- 1.8 KB
.golangci.yaml -rw-r--r-- 4.4 KB
.mailmap -rw-r--r-- 6.9 KB
AUTHORS -rw-r--r-- 52.1 KB
CODEOWNERS -rw-r--r-- 28.2 KB
CODE_OF_CONDUCT.md -rw-r--r-- 2.2 KB
CONTRIBUTING.md -rw-r--r-- 691 bytes
FURTHER_READINGS.rst -rw-r--r-- 6.4 KB
LICENSE -rw-r--r-- 11.1 KB
MAINTAINERS.md -rw-r--r-- 4.6 KB
Makefile -rw-r--r-- 23.5 KB
Makefile.defs -rw-r--r-- 7.5 KB
Makefile.docker -rw-r--r-- 7.1 KB
Makefile.kind -rw-r--r-- 16.8 KB
Makefile.quiet -rw-r--r-- 818 bytes
README.rst -rw-r--r-- 19.6 KB
SECURITY-INSIGHTS.yml -rw-r--r-- 2.1 KB
SECURITY.md -rw-r--r-- 1.0 KB
USERS.md -rw-r--r-- 35.2 KB
VERSION -rw-r--r-- 11 bytes
Vagrantfile -rw-r--r-- 14.9 KB
go.mod -rw-r--r-- 13.6 KB
go.sum -rw-r--r-- 96.9 KB
netlify.toml -rw-r--r-- 92 bytes
stable.txt -rw-r--r-- 8 bytes
vagrant_box_defaults.rb -rw-r--r-- 334 bytes

README.rst

back to top