Commits on Jun 28, 2024

1. [BPF] enable ipv6 spoof tests

   

   tomastigera committed Jun 28, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 90069ef
   • Browse repository at this point

   Copy the full SHA

   90069ef View commit details

   Browse the repository at this point in the history

2. [BPF] send RST to midflow TCp packets from unknown streams …

   For a smooth switch from iptables to ebpf mode, we do not want to
   interrupt existing connections. If we see midflow packets, we pass them
   to the host stack. If the stack can verify that they belong to an
   existing conntrack, we let them through and we learn the conntrack.
   
   We drop the rest. However, there are some situations when we can see a
   stray TCP packet during ebpf mode, for instance when a pod dies and ECMP
   kicks in and sends a packet to a different host.
   
   If such a packet gets dropped, the end of the connections remains stuck.
   This change sends an RST to such a stream instead of just dropping the
   packets so that the end host can break the connection.
   
   Fixes projectcalico#8882

   

   tomastigera committed Jun 28, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 05a2b7c
   • Browse repository at this point

   Copy the full SHA

   05a2b7c View commit details

   Browse the repository at this point in the history

3. Merge branch 'master' into tomas-bpf-spoof-tests

   

   sridhartigera committed Jun 28, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for c0de4cd
   • Browse repository at this point

   Copy the full SHA

   c0de4cd View commit details

   Browse the repository at this point in the history