- 04b08f33387b5b5931d656a57a966263029df56b add goreportcard to README
- ac15a32159bfd4ef09c3deab5e6fc138be68c959 Fix misspellings reported by goreport
- 023b10c7a7cbd77cb9a770b106c1b90ccdf5c3bf Implement GC of cali_jump maps.
- 593719424d80883d6860de43f1444b890f431c35 Clean up empty dirs too.
- e99d83aef4fc3459d2e8065509543a8fd7b36ac2 Add UT for jump map GC.
- 3e27d9da3025b60957be83a1dfeab9688dd4a1b1 Revert "Tweak MTU calculations."
- 86d3c26d193df679a885c6b8c74c931ae41db524 Revert "Fix up tests."
- 0cd6f8b5da4de6d49d53b02c620c6c5c7091b3c2 bpf: adjust the WEP tunnel MTU to the 1410 change
- 6e95b14b03aa80d3b8b0d3c81d6d8459ac63a47b bpf: swap MAC addresses on redirect return
- 958933fb817ac8221d3694c46e3de9d9cce5e253 bpf: fix swaping MACs
- 34b8f81183836415282308e4c2759beb5f2c711e bpf: fixed typos and added MTU comments
- 6bbc1abb5465d29d1e4739cf065bd3a77b1c6cc3 bpf: modify skb-> len mtu check to avoid underflow
- 8724564f2d3d62c95ae303d59d6c3224e9ec57b0 bpf: fix GSO handling on the host side of NP
- 905005eb5522ebc153c622d8c8f0a0947a57cab3 Revert "Flip src/dst when doing output fib lookup."
- 3d9a05bf33c6f168822d742880d34657ea60464c Revert "Flip src/dst when doing output fib lookup."
- 3d4479acfce250e50eb19212387283f0b2ddaef4 bpf: fix the state for icmp error replies
- 2fae2d7797ef3382713358c89adef8e470da441c bpf: mark icmp errors as approved
- cd7bd85660520eeb135aa40cb6688132e2d78ce4 bpf: allow packet approved for forward on WEP
- 14232e794c4fff0154f1e0deea7b573235e0d73f bpf: fix new line in a debug print
- 5759f342b4b780a98b4e4bad4e4e081e0073733c Remove unused constant
- de4880351e8b4382c2cbf82614fcd4ab11619238 report k8s version
- be0c7d7bab866bacb632a32006ab4d4f63c676d4 Beef up FV test infrastructure.
- e8af321fc9fa30b9262d317d20cc0b1e76fb2a7a Update go-build to v0.37
- 19c5de753b0b7d7daca92e9d98cb14f760b6f486 bpf: fv test for larger transfers
- 4cb4451ce802da998b262cb876f0d20c8635b7c5 fv: unify execution of connectivity test
- 6f6b347c9e8634d6197f2825badfccd1c193055d fv: add client MTU before and after to the result
- b491c58ce5c2e287e9394a49f01b9d8ea106f5de fv: test MTU expectations
- bd7f00900704982d4322dd5033f8799ffbaeb963 fv: get path MTU from workload
- e68335e0900604646f36b4f8f572a553ccf82521 fv: add ethtool to felix image
- dee509c0330156a832cd34ab843eb640f615b386 fv: test DSR and external client MTU stability
- 36ed98392000062d6b6a4a707be782bae8f94e2a fv: ExpectConnectivity supercedes ExpectSome
- 8010747bf1d4b2e2e52fcaaf10b76345a9698fa1 bpf: check the VNI of the VXLAN NP tunnel
- 07194d2bcac208cf7a823fd68b5e0003ce2ab747 Set log component for additional context
- 0b6d21d0159235496b948651d14d9b6c22d9f2a2 Remove duplicate BPF enabled check.
- 669a3ebcc12833d405db43d9e0de1299f06dc654 Allow DHCP from the workload, on kernels where rp_filter doesn't already
- b5bac768869193c0d87147fcb944bb60dc8bffaf Tighten pre-RPF DHCP whitelist to source 0.0.0.0 (anti-spoofing)
- 436673c3e23ff8b28d09ad368afdf342c0ae4fa1 Beef up explanation of what we're special casing and why
- e0e9a5b4f84508aed96a379e11e00cc2452a30db Fix up UT
- d9aac502e1d7205094045bcffe918735a70f8e5b DHCP special case is needed only for v4, not DHCPv6
- dcb80c2e44dec1c6682adcddeaca8f4587d7ed2a Fix linter errors
- 4c2787d19b5bce13bd3e600988c94566b4dd635d Use v3 validator for v3 resources
- 9e2a5f424ce9f683b7803e1d7ea8203582775fe5 Default to running tests sequentially.
- bf1af1d145e5c7a892f87789d89d2f35a8290622 Rework routing calculation so that l3 resolver calculates all the routes.
- f852cb7cb295c69326807c1028e60baab9df4d9f Add corner case tests for route calculation.
- ed1e6332443ac30593d3fed016249dd0da92bc2e Fix up protobuf naming convention.
- 5497c48eb5809bf04e4289068912aa86b255eea4 Increase semaphore v2 time limit.
- bc415fc83d395a18b589713dca19a1ac59423bab Lower log level on non-error
- eaeb639698ef7ad75a501eeee475966e38cfcc4b bpf: fix endianess of state->{sd}port for encap traffic
- 79efdd9f7792e0be6c83965b2acda2645b3cfe6b Normal policy support for host-* endpoints (#2228)
- 5afd243a64fa17ed4bf273ad60e2e9f4f8029cbc Add local WEPs to trie.
- 0e6d42b2ca5b789eccb93b2ae1e7aaa21a694690 Markups for L3 route resolver.
- 9f268d756ffd9aa72350f151df92e5bfc1f416b9 Markups.
- 0c2f4aebbb467b90549765ca495af2b372740807 Markups.
- 6c2e97f1ee14adc31a0f50cdddb0f4eccdd11888 Fix handling of local WEP routes.
- 651db76a8369d975c1cb127f5f071df0cd8f331a Fix up UTs to expect new routes.
- 647cefc6db5c7ee3bfa5dc7b5fab7860a75a1c3e Update BPF route manager to use new routes.
- 59fa9592cd289692f3b1fa86d17e513736a5bbd5 bpf: configure tc.AttachProgram through tc.AttachPoint only
- a6d1ea6455668afbb71b2a3c4410cabae0c3259b bpf: tc.AttachProgram() is now a method of AttachPoint
- 9a3d89ce0ba926090cc6203f41e162532ac55681 bpf: AttachPoint is pure configuration
- 79fd7ed0d9fb0a7272eaa98c3191286991f9d075 bpf: abstract manipulating precompiled binaries
- ad4fb8c3ec50a68c8e2b48f261fc379bbaaa627d bpf/ut: bpf .o not generated per host IP
- 663c031d261a92eb181ac4abc4fd4f5e2e3da42b bpf: load time configurables
- 3db4781c016d6fe6d1afd01f3996ffc2a26a4335 bpf: tunnel MTU is configurable via VXLANMTU
- 8b4a00a62ab80d8e8555dce8729fe28516e86522 bpf: fixed comments of TunnelMTU
- 6c7b6ae990b966521e2a6a99a60b78d310723c3c fv: test docker image to run fv tests
- c9ec6a4a5de05ae92dda926500a52b13b20db7c5 fv: move tcpdump to its own package
- 97ac833a32a613f9514658db04a72abe99249ee9 fv: fix for moving tcpdump to its packege
- b831a874b609586bedb6314fa5c92dbaa1a53b38 fv: install tcpdump in felix-test image
- 744647d7a5c93bfc4516f853d6d0c13ebe0cab47 fv: AttachTCPDump method for Container/Workload
- f8177f68f95e231a4be9788dcdec8d7b7dff3fab fv/tcpdump: allow finer filtering
- b63ddac19f156052449b17b72c7b5b8206eeb317 bpf: ct_make_key() to make keys CT easily
- ee18268279a66547f32acabdb2cf2d4f1b7e8e90 bpf: icmp related lookup for non-NATed traffic
- a684d887cafade18e45f0df308a881a2ca8d3e73 bpf: icmp_skb_get_hdr() returns the icmp header
- 1c8652b4839446c54355fb5ebc42dfb2802d7507 bpf: icmp related for NAT
- c49f2058d5d80865bc398ba952a8ce2f280112ce bpf: ut for NAT related from the host
- 290081d747f94b71ca860ed75e1bf4afa65d1c22 fv: allow creating inactive workloads
- 57cf27a83fa0da665d73909814084b4cbf69f1c8 fv: allow to start inactive workload
- 910c0f635130851cf4d207398478eac2dbd75ed3 fv/bpf: addWorkload returns the workload
- 7fc04a8259f7b82597fe8d172686b3149c6a8406 bpf/fv: fix the IP size in makeICMPError() and test ports
- b483d5e71d321cfc9638a0fc194d02d17aa1349d fv/bpf: check icmp related outer IP header
- cbf1998927861b77396df774af970e380e07c2ad bpf: tunneling from host and csum of icmp related
- 2a5acc34725c0bae8acd918d45dc39e07bc7d21d Disable unprivileged BPF mode by default.
- be1b90f0d883ee7ea31ea65bf4dde61610c77723 Rev typha/libcalico.
- 8739e6f64ae032ca93e129b4fcfff4621cf278ec fv: tcpdump fails test if it never listened
- 43c8738431e650189db3b47a7d39d3de31fd3ba6 fv: tcpdump for containers without tcpdump installed
- 5dc2d4862129590bd5c4a666b9b45f02b32a06d0 bpf: nodeports and icmp related
- 65314c5573c518b42d0f0ee93c4376a0c46ffcdf bpf: update conntrack vars only when icmp related success
- e4759c1a791ac8901e55da7c4a16ef0096635e17 bpf: SNAT of outer IP only if returning to outer client
- 14b77219fe275153f918c566ae28d8cd7adb8ea7 fv: icmp related workload-workload
- 5c6a24e45586d4a31032b032a0966d91b0ac6c42 bpf: fix comment in handling ttl
- 83e5114d7799fa0322501268683963ef2b16542e Update typha / libcalico-go pins
- 7e0c6c4d1860dd138922dea19908e7f00a34950f Add BPF mode in clustertype
- 7cbe463549f5a423742c211f8df092b75a673e0c fv: icmp related workload-workload through service
- aa28d96bff1ed4e429464f3ddf175e31de92a768 bpf: icmp related retunign from tunnel is fwd approved
- f4e2b5c711568651c92d1ac28a0bd4e594b94581 Update amd64 dockerfile to match calico/node
- e4700cf48ff1ac60b1756f3203195c5a9b06127a Add in licenses to amd64 image
- ad33d3c12ef3316386fdc58399dee93fe6654fb0 Bump go-build to a good version
- 3845c01b509b6e2ad85907cde3b5a4eef89febf9 Install hping in the Felix test image
- 0364cf6db4d76feee8b38a33bcfc38061d42ff3e bpf: fixed comment in icmp related SNAT
- 91475fe0f8a1ab94a20f20868e6c7781b1593e28 Update routetable to accept deltas, exact interface name matches, non-link scope routes for prohibit, blackhole and throw
- 83c71e90487a901a9c187cdca322bde96be78330 Bump libcalico (#2267)
- 72dbcac76f7ef5a846549d8c8982d75671afea2b Semaphore Automatic Update
- 2cf09d1f132986b9decee312f8a4c3c98aeb31f5 Configurable source for routing information (#2269)
- ee7f85cec223fa7137e4d5534bf96f44c5d57a34 Test static arp invocations
- a37d11b0450daca3e42dbb48402d4ad61a6217e4 Revert "Merge pull request #2264 from lmm/update-dockerfile"
- 627a4ad9ef4d482b0add4609f8725fad86f93109 Bump libcalico pin for pre-merge new config field
- 06154760dfdc68d744d6605344126a59ef11546c Handle route table range config from libcalico-go
- 54d1d6213519e1501cef114f7a8df6e09fb505f9 Add and use routing table manager
- b66b3152cf7efe2f4de47b30ecdf23ae4ec67c45 Placate the linter
- 1a0f33b9cddd07e5e35a18b067da51de22e0f1d0 Add GrabAllRemainingIndices API
- 7995f5a7d91adb22ac1fc0d75224ea887505ae3b Make more generic: IndexAllocator
- 10d69b61e7de7cae6d6f888f362d24a6e383f722 Make sure we safely take a pointer of the target
- c7ea942ce6e160df2c59a7dace0cdfd8110934cd test: fix static check in routetable
- 68d3032da4898d00a4e33e07a668b660a959a290 fv: pktgen - a utility to generate raw IP packets
- 6c94a4caa176b32822002b069008ef75b0fe3583 fv: add pktgen test-connection and test-workload to image-test
- ee55a7a1420901e46a5865c25e08961d6b82cb9a bpf: all bpf tc progs are either from or to host
- 0d269922e2cb8d01e23fa3dcae32205a33bba882 bpf: rpf check for conntracked traffic
- 82db3b90c85bca54d67e9a2b18534dde96354a1e fv: test for RPF drops bad packets
- 6d20a6423767662911e610f752ff2e7c65b366a8 bpf: first packets from outside host RPF checked by host
- 9e540fcefe0394b7efdb38347a8f0403676234af fv: test for switching routes in multi NIC env.
- 1b5c9bc4126de1b9c7510be5e84cdbe5f984aa75 bpf: always use ct_result_rc() to get rc
- 651277b58f25403d0dddec646dc642c217168bc4 rules: single out RPFilter() for RPF rules
- 60b41a07001a38b94e90e123d34ec535260b1ae1 bpf: make strict RPF check using iptables
- cfbc1d43856f32811208e04266d6eeb1284fd240 bpf: every packet to host is marked as seen
- 876e66b7ba9dbf08dd43e07e226b6ef72028002a bpf/fv: fix conntrack.Value decoding and improve RPF test
- 44684ade50fa18022b1af2d2431f2bbd97e0e60f Semaphore Automatic Update
- 389ce360a469e511f96ae29b4d499e5e34e38be1 Makefile: always rebuild image if there are changes
- bfbc3713bacc33ac200114c5fa666b795f77fdda Semaphore Automatic Update
- 58e13d5f47d8dba499a013603da3323a8e8c9805 Remove accidental libcalico-go pin from personal repo
- 8f7555eb6aa50cbd307e56455d1b44d607affe98 Update to latest libcalico-go and Typha pins
- 06c29428e929d6e45a2cfefe5a229dfa6c1b79c4 Fix logging when VXLAN device doesn't exist.
- d481094002b90fb9e3d9bd7b10d2b7ae166eb23f Optimize for route lookups by node in l3 route resolver
- 469e44aa6398abe08e18153709ba07eae6d2a6c4 Semaphore Automatic Update
- a2644a45a250588594558b11af67abba11b0ae9e bpf: conntrack table V2
- 0643f147f8a5fa8de66bd7dc6979d09fca0d8ef4 bpf: v1 maps defined using CALI_MAP_V1() macro
- 704c9a5c14742baf8377b4864ebd8061ad5dc28d Wireguard implementation
- 1e3003a2dc1ac8e612c2e1cf1aa5a953290b56ff bpf/ut: allow naming ifces in UT tests
- 8a98291c6f596a04cc51e440039c84a84aee46b7 bpf: do not override fib=false if no forward
- 4454d1ee02d8e15f1833a1ece1116eabea757dff bpf: simplify whitelisting and test it
- b6534859596cf8b9baad6b60b3dde72a5fe8572d Semaphore Automatic Update
- be9999edcbd6f6b475ab6a448d9cfcbc68da371d Merge pull request #2287 from fasaxc/bpf-kernel-ver-check
- ac565505b977176a20f93db161382698adf050ff Add rule manager
- 7cb8b55ffa7f4b3904793ee003a5d6244bb34e8f Test resync after deleting rule out-of-band
- 9c3dc46028a7975d8d8b030ca35963e750b07ef9 Delay felix startup
- 35d7e508f8c253b12e109d2dee5054bbbcca2cc0 Only route to wireguard for workload-originated flows
- a01817dbcc94085df2877e5e9bfb7c4399576436 Don't use log context in multiple go-routines
- 8b49fe374848561287749976f98f69ac3f8584de Ensure table index is assigned to wireguard even when disabled
- b5321e489358f719bfbabc639a19d5dfcdde3fe7 Merge pull request #2290 from tomastigera/tomas-multi-nic-np
- 2ff8e2666bbdb13db68aa220e578c31998a59684 Add local throw routes to wireguard table
- 7e343ad871ae6eb1d4908069fd1cf79d5888a550 Merge pull request #2301 from robbrockbank/fix-conntrack-deletion
- d56c03e46d8cdcc051f7385aa80a0357cef3386e Update libcalico-go and typha pins