Skip to content

Make dropping of other IPIP traffic optional#316

Closed
dajudge wants to merge 3 commits intosquat:mainfrom
dajudge:optional-drop-rule
Closed

Make dropping of other IPIP traffic optional#316
dajudge wants to merge 3 commits intosquat:mainfrom
dajudge:optional-drop-rule

Conversation

@dajudge
Copy link
Copy Markdown
Contributor

@dajudge dajudge commented Jun 28, 2022

We faced some issues with misconfigured iptables when kilo is used in conjunction with kube-router. While this PR does not fix the underlying issue, it does optionally allow enabling a workaround that prevents the misconfiguration.

@dajudge dajudge marked this pull request as ready for review June 29, 2022 08:33
@dajudge
Copy link
Copy Markdown
Contributor Author

dajudge commented Jun 29, 2022

Can confirm that it's doing what it's supposed to do on a test cluster: the DROP rule is not present on the INPUT filter chain.

@dajudge
Copy link
Copy Markdown
Contributor Author

dajudge commented Jun 29, 2022

e2e tests maybe also affected by this? #317 (comment)

leonnicolas
leonnicolas previously approved these changes Jul 25, 2022
@leonnicolas leonnicolas requested a review from squat July 28, 2022 14:23
@dajudge dajudge closed this by deleting the head repository Dec 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants