Revision dd1895858c6a5ce22db72039d8620a64cb0e7b04 authored by Koichiro Den on 25 March 2019, 00:00:26 UTC, committed by Thomas Graf on 26 March 2019, 01:32:06 UTC
When a connection is newly created against a service, we generate two CT entries in both loopback and non-loopback cases. Running the same logic as the one for loopback scenario where reverse SNAT is required against non-loopback scneraio creates a useless CT entry, whose saddr and daddr are both the same target addr. Regardless of other fields in the tuple, it's harmless since it's considered martian and never be utilized in an unexpected way in any place but let's not waste CT map. Signed-off-by: Koichiro Den <den@klaipeden.com>
1 parent 14f4053
| File | Mode | Size |
|---|---|---|
| include | ||
| lib | ||
| probes | ||
| sockops | ||
| .gitignore | -rw-r--r-- | 27 bytes |
| COPYING | -rw-r--r-- | 17.6 KB |
| Makefile | -rw-r--r-- | 3.1 KB |
| Makefile.bpf | -rw-r--r-- | 1.6 KB |
| bpf_alignchecker.c | -rw-r--r-- | 2.2 KB |
| bpf_features.h | -rw-r--r-- | 162 bytes |
| bpf_ipsec.c | -rw-r--r-- | 1.1 KB |
| bpf_lb.c | -rw-r--r-- | 5.4 KB |
| bpf_lxc.c | -rw-r--r-- | 33.0 KB |
| bpf_netdev.c | -rw-r--r-- | 16.6 KB |
| bpf_overlay.c | -rw-r--r-- | 6.5 KB |
| bpf_xdp.c | -rw-r--r-- | 4.7 KB |
| cilium-map-migrate.c | -rw-r--r-- | 13.3 KB |
| filter_config.h | -rw-r--r-- | 1.2 KB |
| init.sh | -rwxr-xr-x | 12.3 KB |
| lxc_config.h | -rw-r--r-- | 2.5 KB |
| netdev_config.h | -rw-r--r-- | 1.1 KB |
| node_config.h | -rw-r--r-- | 2.9 KB |
| run_probes.sh | -rwxr-xr-x | 3.6 KB |
| spawn_netns.sh | -rwxr-xr-x | 3.0 KB |
Computing file changes ...
