Revision - a20094d - bpf: egressgw: clarify IPSec key for tunnel encapsulation - origin: https://github.com/cilium/cilium

visit type:

https://github.com/cilium/cilium

09 April 2024, 21:14:05 UTC

Revision a20094d7a5272f0f38b30d4042383a47cdaa01f2 authored by Julian Wiedmann on 02 November 2022, 08:25:44 UTC, committed by Tobias Klauser on 22 November 2022, 10:58:18 UTC

bpf: egressgw: clarify IPSec key for tunnel encapsulation

The `encrypt_key` in handle_ipv4_from_lxc() is obtained from a IPCache
lookup for the packet's `daddr`. It doesn't make sense to use this key in
the context of redirecting EgressGW traffic - here the tunnel's remote
endpoint is not `daddr`, but an EgressGW node.

As EgressGW and IPSec are currently mutually exclusive, we can just
hard-code this parameter to 0 for now. In the future we would need to
look up the IPSec key of the selected EgressGW node.

Signed-off-by: Julian Wiedmann <jwi@isovalent.com>

1 parent cdff193

Files
Changes

Permalinks

Tip revision: a20094d7a5272f0f38b30d4042383a47cdaa01f2 authored by Julian Wiedmann on 02 November 2022, 08:25:44 UTC
bpf: egressgw: clarify IPSec key for tunnel encapsulation

Tip revision: a20094d

File	Mode	Size
.github
.nvim
.travis
.vscode
Documentation
api
bpf
bugtool
cilium
cilium-health
clustermesh-apiserver
contrib
daemon
envoy
examples
hack
hubble-relay
images
install
jenkinsfiles
operator
pkg
plugins
proxylib
test
tools
vendor
.authors.aux	-rw-r--r--	416 bytes
.clomonitor.yml	-rw-r--r--	181 bytes
.gitattributes	-rw-r--r--	550 bytes
.gitignore	-rw-r--r--	1.7 KB
.golangci.yaml	-rw-r--r--	3.1 KB
.mailmap	-rw-r--r--	5.6 KB
.travis.yml	-rw-r--r--	492 bytes
AUTHORS	-rw-r--r--	32.5 KB
CODEOWNERS	-rw-r--r--	23.1 KB
CODE_OF_CONDUCT.md	-rw-r--r--	2.2 KB
CONTRIBUTING.md	-rw-r--r--	473 bytes
FURTHER_READINGS.rst	-rw-r--r--	6.4 KB
GO_VERSION	-rw-r--r--	7 bytes
LICENSE	-rw-r--r--	11.1 KB
MAINTAINERS.md	-rw-r--r--	4.3 KB
Makefile	-rw-r--r--	30.9 KB
Makefile.defs	-rw-r--r--	7.3 KB
Makefile.docker	-rw-r--r--	6.9 KB
Makefile.quiet	-rw-r--r--	818 bytes
README.rst	-rw-r--r--	17.0 KB
SECURITY.md	-rw-r--r--	629 bytes
USERS.md	-rw-r--r--	24.5 KB
VERSION	-rw-r--r--	8 bytes
Vagrantfile	-rw-r--r--	14.7 KB
go.mod	-rw-r--r--	11.8 KB
go.sum	-rw-r--r--	158.2 KB
netlify.toml	-rw-r--r--	92 bytes
stable.txt	-rw-r--r--	8 bytes
vagrant_box_defaults.rb	-rw-r--r--	394 bytes

Showing with 0 additions and 0 deletions (0 / 0 diffs computed)

Computing file changes ...

https://github.com/cilium/cilium

bpf: egressgw: clarify IPSec key for tunnel encapsulation

README.rst