Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BPF] clasiffy correctly forwarded traffic #7707

Merged
merged 1 commit into from
May 31, 2023
Merged

[BPF] clasiffy correctly forwarded traffic #7707

merged 1 commit into from
May 31, 2023

Commits on May 29, 2023

  1. [BPF] clasiffy correctly forwarded traffic 

    Previously, anything that had source the same as the host was considered
as "from host" by the policy engine and global policies with
applyOnForward=false would apply to such traffic. However, for instance
SNATed traffic due to nat-outgoing would be also considered "from host"
eventhough it originated in a workload.

This fixes it by first looking at a SEEN mark which indicates that the
packet was seen by another endpoint and thus is forwarded with the
exception of packets being routed via the bpf nat iface which is used by
the host processes.
    @tomastigera
    tomastigera committed May 29, 2023
    Configuration menu
    Copy the full SHA
    e647557 View commit details
    Browse the repository at this point in the history