- 1f85a162d986b1bfe8bb363679192f03af152a19 Changes to send ICMP port unreachable if there is a service without backend 1) Modified the ICMP replies to a new BPF section 2) When there is no NAT backend, send a port unreachable similar to kube-proxy - abb430a8c4ab18532d12187664e89d5ba727a9fc UT cases for ICMP port unreachable - b803537c62b977f58b91141f131278f39071f353 Alignment changes - 018a99712ab54eb901b4af4ffcbee9d3c05842df Alignment changes - 94bc53dd0275fab322de05328bcd0272d194cd2e Code reorganization - deecd641c2926046ef12981dd8c15d3a3d7652e9 bpf: Map.Iter() uses bpf.GetMapNextKey syscall - d4a0eac6019dc767ec154fee588e8d1d672a4d26 bpf_route_mgr needs to call ensureDataplaneInitialised() earlier - 6b392382227eb270cf695ffa5f09daa1dd50674e bpf: LivenessScanner only deletes the current key - d8fbce081df363c9454c5e5e4c52670f019a6f4d bpf: bpf.Map.Open() opens map without creating it - 781f6832b71dca55bd515c22b95483abd9904f07 Adding more WireGuard FVs (#2362) - c30baf53ec96011de2a7ec5df5a25c328d3c0d0b Semaphore Automatic Update - a8e21861e9ecda7de0aa5e6c41ba81c992b5b201 Added a new FV test to verify icmp port unreachable - a891eaa062637a862f3723223211f0c1bc1d2674 Fix flake in config FV test. - e96a90b96c52f9c0524d4220758ee56c5129c683 Make race detector optional. Enable by default. - fc70e02179a44e01cc7e0358afc071bc5ec91086 Free up space on the build machine as recommended by Semaphore support. - f14d58bc7cb4abc3b1cbea9efb9b57f0156ce636 bpf: update a comment in conntrack cleaner - 726f58dca35784f859fc85eef02c2ba0b23508d9 fv: AutoHEPsEnabled mimics AutoHEPs in fv infra - 7569e6f79a141776db2aaea170fc9e6e00911e28 Semaphore Automatic Update - 8c7335946db7cad9d979019235a15abdea09fbda Changes to FV test to test for error message(connection refused) when trying to make a connection to service without backend. - d77dd146d14ec5164d16bd4e3011ef725c9fc4b7 Keep qdisc between program updates. - 134fc2065fbd434af82f2275ddc6075d2164613d Fix up UTs. - 37175de8ec8f1ac7c70deb2cc3ff5f6a7d360229 sending error as a response from test-connection - b3798eb842d1ab5afae01c8fbcfd32b1e160d198 bpf/proxy: ServicePort deep equal - f9863a58c2e72909b74834dc7d5fa664e7d1eca8 Minor changes to fv tests - 6ada537c9975ffae5d5b951aef32bc0447722367 bpf/proxy: calculate active endpoints for conntrack cleaning - 4428d7fa2363694d6f626ad4d9f171c3965a05d2 bpf: functions for creating various conntrack values - 3132d80a5e3cb140794b790d007807c390eadc58 bpf/proxy/tests: _ vars into camel - b28407ed11edc0d5faa69a0c468a5cdd8af467fb bpf/proxy: nat.BlackHoleCount is uint32 - 657d18f0033fec04a698def6c01877575f0dc3b6 bpf/proxy: syncer cleans up conntrack - a923e747b01cefba7b1ec1036f9286067411aa92 bpf/fv: test nodeport connectivity from host networked pods - 8c84d56450488eab11bc030d363c8f9808386701 bpf: generic conntrack Scanner - 9bc613adac4e358f45317341b9bf1d2334444ae7 bpf: move conntrack cleaning from proxy to conntrack pkg - c4c437c956e596d86d015e24e4c8df558a195dc3 Semaphore Automatic Update - 143a15806198a2607d92ca80c5eaeeb017db0c68 Review comments on FV tests - e46e19287356a0e045424fbdcfad885b0328be0b Added ExpectNoConnectivity method - e3a1788eccb05e87362b1110e3040ab0c74ce016 Update policy program without replacing whole program. - f696cf0310eb74877f96d1e81d81d81d84802ce7 Markups. - 9f23b45ec71dd39e6caa5586bd4905972863e630 Fix collision of ingress/egress FDs. - 3390b967bbc49cfd6eb62c100c4283579e54afaa Markups. - a54de01f10ef74e865a17ada22d15cc82e68dfe7 bpf: conntrack cleaning only in kube-proxy - 19f0aaa501bfc8cd9f857e50e990e5a48e5990f9 bpf/proxy: Avoid mangling []string by sort in ServicePortEqual - cb156b1b74693199ac202dc2eac0a78a09b9a773 bpf/conntrack: typos and minor fixes - a48a8bdc245b9d9273e9b3373ce2c582bf196a01 Fix up formatting and make sure protobuf file gets formatted. - 1e9421301d80a14c4d537938096e557325468378 Markups. - 4cd77b3374344c567c189de507bf1ae1b052e63d fv: ExpectConnectivity takes ports as an option - 5c63e4eabb2737fe7986db313b9eafe43ff95615 fv: ExpectConnectivity is a universal expectation - d265d41fc48492fa7eec836ed8b09b8127a5f7b5 Remove FORCE_WIREGUARD_FV - d2373d59e6423cb6151072331c143d5b4ac69eae Update semaphore job name - 896994f8ae452029f48c486c42f1939b544836bb Fix typo - 4cc28d72e24b36ea4892e30d5876cbe9c575c838 bpf/proxy: remove StaleUDPSvcs from state - 96e9f5ac9bcd3819848ecfcbc88994f76fb6c06f bpf/proxy: checkState checks "eventually" - 7c8777e3e75287142701888202b9c0ab9954347a Make --random-fully configurable for MASQUERADE - bdb508c9b99d3f2deede68ba08a76cd52d030ec6 New FV tests to test service type changes - a9f5dfdf7928afd476d6cc900e6a046b84816244 Remove compiler logic that is now unused - 20ede0f81f730509cf1bd4c5e2fa662d77f3a65d Updated fv tests - bd61e0886a953eff0fdd9f855c45b98e3e285a9c Add BPF dataplane support for Wireguard - d4c9592a26a457c26f0dd32334075690d0d19b57 bpf: reduced allocations in map related syscalls - 85d3b11338dc809192e067a4c9f48e992cad2bb2 FeatureDetectOverrides structure added - cb4d1e601c66179177aad5322d304d02af9e10d8 Handle FeatureDetectOverride and added some unit-tests - 7bb5fe7aaa542f90ba838acbbcc744b95262e94d FV: Print container log lines without additional log header - 128ec5978616d421fb22bd5cf9a9071a849799a0 UT for service type changes - 3666b14aafa8cf766bd876b2be009467d9840ffe Error handling when updating service - 331f8e45d662aaa24ba51624f53151eb2755e852 Add a IptablesFeatureDetectOverride config parameter - fdb823b7d05aad3ebd7bb07a059708cf15f410c1 Clean up of UT - 13648450709f2d974e978844321ab63657b26565 Param IptablesFeatureDetectOerride -> FeatureDetectOerride - ea6e48c67255fade9562cebcdf089508f7e03c1d Revert "Make --random-fully configurable for MASQUERADE" - c7ff860ee30510bb6de43319e17a9302243a7fed Removed the feature-override pre-check - 5ff9d1d55678f43c4993d025cd3f3766fe113816 bpf/proxy: syncer startup benchmark - 914c69d43d1b8d03aceab769bdfd27e6968f5fd7 bpf/proxy: pushing startup resync from O(n^2) towards O(n) - 48569633428cb3db7d24c42feb822147c3453555 benchamark build tag - ee2def1203d4a80f4d6848bab2cace002314a992 bpf/proxy: add some startupSync() related comments - 1e90aec9aaf94c9e1df65b0a6ded4f95d3288c30 bpf/proxy: rename vars in matchBpfSvc() for clarity - 761287278c52619b48463f5f753a22b2aa5d15ee bpf/proxy: startupBuildPrev preallocs eps arrays - 7cf318a20233125373f839e25a68e2db0e5574d8 fv: dumpNATmaps executes in parallel - 2692b086cedc3fb0cbf133ff03a6edda20c2ed64 Adding support to detect RHEL with kernel version 4.18.0 - 7181db6287c1b0c7c0c6f5c99aaaa5f607ee3bf8 Removing unused variable - f3b109547aec87be5db4ad786579a80f4add8ec3 Run the FV tests for TCP as this test is not impacted by the protocol - 1e60fc19ba0b285eff4c8215d8433966d2ab185b Code restructuring and some UT - 46016981656e07f4daf4594d6692cc1a82e72bd5 Allow tc to run in parallel again. - 9254a43e84ae73cedae3b84c840b2bac27896685 Quieten skipped tests. - b67c21e96ed3c5b99bcd94889943b5ca45f24bc4 Fix race to upadte ifaces map. - 4f968f64d3467c80daf5f6bdc429affe27983b80 Instrument FV cleanup. - 1385b0c6b31e1de2e44d7ff613978a166fccd8ef Try k8s cleanup in parallel. - bdefdb564bc45efea5dc5af64285e3151cc6a363 Tweak API server/controller manager flags. - 68ab2e425b40aa139a33d0f1473b1d33aafe556b Increase QPS for test's clients. - e9d40663dfc3082ffa1c609b55367752dedc4e3d Handle cluster role being auto-created. - b028a96214760f236a9939e41c593bb54d5741e0 Start felix nodes in parallel. - 33d1b70d36e91b7f9e464721d265301cf4b26e12 Improve diabs when a command fails. - b1130149987499b5c3acd09ab5748ab007bb3828 Markups. - 4743b601c383f4c121da6308d7427e47d5707ad9 Added support to compare version strings with a suffix - bbb8ea1db3926e2deb51bd3925e9f1f812fdbe39 Add FV tests for WireGuard host to workload - 31b3fb64f2c624ce121b8449160300fc18d5ec9f Review markups - c250a103617e473d7a7e5fc6a8c704c7c817b67f Add a KeyValue list parse function - 98ee41973e8a8b5f46ceb7646d6a5dbb6d921a21 Replace the FeatureDetectOverrides scruct with a map[string]string - 5e6bb2773fbff4469841c66b162dd13f7778c77e make fix - 641f2df51aa89a0f7b4a0cdcb85dfa4209bca25e Add benchmarks for named port index. - ab6b8e791afbe5e2940844f0aab88a9cf49f2441 Accept empty items, e.g tailing "," - 111f5b7793d15f19a704c9261b724f5c125694f1 Added a KeyValueListParam type with validation - a8d96b81035a3b0c07b999bd81ebf0ce998af945 Switch from Skip to conditional test definitions. - e26823422446f806d339e76b61251f6fd2db0745 Removing hasi-corp library and using our own Versionparse library - 0dc7a78d2832421e673851ecb313e023dc085d52 Changes to remove hashi-corp library - e56842889f6f90ab8cbf09a89fbbfb618163e06a Remove unnecessary pointer to map[string]string - d5cd2b356d0bbe9c994086faf02eb4ce9bb02ac1 Allow empty values - 04c4c54dc03011c4e183d9abb27c96d87af269b3 Back out parallel cleanup. - 6042e5630041f0c9e05cf33599de0c097ad98b8d Run a stripe of BPF tests with Wireguard as well - 5b367068c5347e6512de723318d417d01e5eb278 Fix IPAM -> BGP typo/misunderstanding - e6ffc32f3165ea67d35bae2dfe8bdc549cdc7c90 Addressed review comments - 1b1a084b296a7858311e69da532a855f69448f6d Move regex parse outside the function - d7b95bc42a2850953f7656c90b64cb3d215e830f Integrate Wireguard FVs into main FV runs, including BPF - 5c35c741665b15f373c4f987722da63adda6a8cd Restore running Wireguard FV tests without BPF - 640b6bf1633b5b5f07f597cff29a5714bbf51192 Check that Wireguard is NOT available on the normal Semaphore VM - 4a25224a5833a8f6a370ed708fb2deb4144614c2 Review markup: comment for wireguard check - a6a6ad4405a281dd429bd9a4733c745b9a402b7f Corrected issues found by "make static-checks" - 7bebfec4e98e3d347b3ac1f401e06fe0a82570dd Simplify FIB lookup logic. - 33dbb55d26d88714f39c3c1750b8aae84b36d815 Support for appending and inserting chains in iptables dataplane - 93aaaf43c4bec73e9297c062f0f92d883233632a Markups. - 1c0b834cf0a0c2f7388a2cd4005012cfafd46fde Add more jobs to new-kernel FVs and reduce normal FVs. - d1fa4fa264ca36b679df6e57f7d8fd339e0b12de Squash spammy wireguard log. - 51f015abc91173785be130923e20d599bfb10293 Removed the "local" flag for FeatureDetectOverride - 5f2a3c9162cd47792aaa17db0da63bf1d3fa0602 Updated go.mod, go.sum - 9df492d7b0b250de1f90b915eb883cf930a99078 Move policy acceptance to end of the filter table forward chain - 8cb997567d9aa0a19d541c4429d4289f63ee5927 Semaphore Automatic Update - 47bc54bebc69667400f19c6ba4402323a8dc5de2 Add AWS source-destination-check handling (#2381) - 540c4562377ea1387c50562894f5e991fdb08940 Semaphore Automatic Update - 32d96f9384bcdfb4e2a3cd6351f96cb0c81eb105 Rename time shim; avoid name clash with real time package. - aac1aaabb122bb384190a595462b89dc4bb52e40 Rename netlink shim to avoid name clashes. - 59058085f2b88f3cb582c8925421b695b5a365d1 Markups - c728a728ee4480487986e4820bfa3dc1c541d806 Rate-limit jump map cleanups. - c006b9154d14b8a6dda050d44523fddf5fe1e461 Add FV for jump map cleanup. - 192450d259b133a4bb217b90438c963a231d53f6 Markups - d959a121144d5076841c9a12e7de5aaad098e40f Only enable verifier log for post-failure retry - b8309ff76f512249c673283d1a8051d9c9e80234 Update Dockerfile.s390x - 51bfa0e418b596133d200db219c3d06b4e114f67 Markups. - e52916cfb8200c9acec2a2f03bc95d3fc4f758f3 Add (currently failing) FV test for pre-datastore connectivity. - 1046210300cc8fbabe4204207ead740aa8220818 Add constants for mark bits. - 90d71be324fd53df638b71eb6769a66b3ff484cc Adjust mark bits to give clean seen/bypass bits. - 50e49b98b985efc15763ec1f0a6e5b1d816d1458 Block traffic to unknown workloads. - 7e1057a9b89857ec676a30319df3f2f2a884a3a6 Format code. - 944e4980cf29b98fb6ebdb5a4a34ed701797d7d1 Markups. - dc3bb62b948b68aff659276255775804dc954510 Make nat outgoing a "bypass" mark. - 0f188b7065ea212f1e82f2c46cc7d4eb0832428f Catch background goroutine assert. - a3e3bb3643d45ff7b323bade4d36240bd4b037fb Fix logic for removing happy WEPs. - 3763aca2abffc5d010d0e7421853f398fe386385 Test fix: wait longer for jump map cleanup. - 7e751aa360e60104c525dcd823dd43db296d949b Add config param to control the interface monitor's resync interval. - 57ca7aae25e1f79c26cff1d930fddc8be96236ea Semaphore Automatic Update - 4da528213806377af02c9390d7912f330c13e58a Remove inconsistency in map presence checks. - c30cee1374f37a8e6fb69c4a96e473ed5dee6208 Refactor BPF endpoint manager to handle workload cleanup. - 7f68f3b72aab63193ea316d6457db5936a2ce5e7 Clean up struct naming, fix lint. - 63122e1d1d01c0e6988fcc476f7b55d86a01cce3 Check that BPF program is still valid on each policy update. - 0cb08d96bc5504822aad27fe7c04e969da3d78e0 Add FV test for recreating interface. - 864ec2c3dcfd56930646d08ebb689c9885d9026e bpf: CALI_F_L3 unifies WG nad IPIP egress - cf3ccc7e3dbe9de92b469ac5d5e280567e0e5546 bpf/ut: test compile/load wireguard prog versions - 05ca05e7ba04ec820a2e0aec4dbdc179b993952c bpf/fv: do not test 2 tunnels at the same time - ffcbd3129ef8737d1781115f12086a6b2e1a6568 bpf: skb_iphdr() also prints IP id - 506d8ef018388b5c1d35c46b204e6c35e52c4a47 bpf/fv: fix AutoHEPs for wireguard tests - 97ec8d7af441cab9c2d19b893bf5adb97cfb7e8f bpf/fv: fix expected host IP with wireguard - 4e48dce462bd1274b2c058f7a927ffd839b1b2e8 BPF syncer changes for LoadBalancer - e3f723bded091778e89533ee8fd3e7261a0b7ad9 Changes to handle LoadBalancerIPStrings as a derived service - fd555a5b93d4ae1a87c74009ba27b66530b720a6 Semaphore Automatic Update - e524812b495460e26125c4f73aa234179b621dfe Updated the UT for external Ip and LB IP strings - d5351fd4a6a9d316338bae6db65d89e5fab822e9 Removing comments - c9107eaa2ba0c47854228efb4081fbebc84dea17 Changes to fix wireguard ci failure - 6c1944eee3083c61d680098780edb6c9c8fd5bc6 Update .semaphore/semaphore.yml - 6f6dcbf2ef4b51b730a407191317424000ba902d Addressed review comments - d53db5715a948a9d2826b821d86f17fc6a0d3057 Upgrade to golang 1.14 - 1906faebc89a76a7572db7863b16cd4bf1495f3a Changing the LB src range UT to test with extIP and lbIP - 6ada6707086b3ce11c1517cd42c4fe4d45f8c6b6 Remove vendor dir if it exists on clean - 6944e18eab2aad6ef639cd29ba706cc2ee771363 bpf/proxy: benchmark proxy golang part - f0cd537810af74635190946af2959124ec1588ab bpf: BenchmarkServiceUpdate for single service update - 34b16acc1d9e9abcc5e2f9d91f15b1d06b0ea5a4 bpf/proxy: less evaluations/allocs for debug prints - 50f90875b5c5fdd1a9a949625a34a5693f906e9a bpf/proxy: remove unused code in benchmark - f2ef9b303b33ad1bfef75768d93ffb97fb76fa86 Semaphore Automatic Update - ebe17e9a89015a9bd4dabfaf1eb9d5d33f921790 Add map iterator - ae1816de164e902388f40fb47ef1f0a7fae2978e PRe-alloc attrs. - 7cbd8c6d97a5aa120fcffe148f330d266677679b Use return code from map iterator to control deletion. - 8f6db398381fe455fa075d6b6efd77f920463127 Fix bpf syscall stub. - 321a19c8679c251f27690511ab8dba4a0507ae41 Fix a couple of missed refactoring updates. - 5113e264192bd81b6bb60e9a6885e6c2308e44dc more proxy tests - 89772e7e43929305e43d7e3b25b50cd9ae5ae0d9 bpf/proxy: start with preallocated newSvc/EpsMap - f9ed4810eda81147055765ea67552595cb813f19 Semaphore Automatic Update - 4ae0951681c932cdea46f4670e73cfca1fdca8f5 Fiux shadowing of variable, and add test for iterator action return value. - 697c80e3963af53b7477009a7def5534d140899f Cleanups. - a8d39c97bb2a74d7f45d54473f3a98162f859298 Fix up mock maps. - 8456d320a3b2c92ef81332b55beec3e4bde913ec Cache kernel time lookups. Was spending a lot of time in ClockGettime. - 933bf65ccc1afaa759fa33396f3ea80a9fa61be3 Avoid more debug allocations. - 65172005343978e5f29fc628ca85ee4be26498f2 Batch iteration in cgo function. - cd41c59df0f08ae28bc7088c8cfd28b4820eb47f Remove unused map iteration variants. - b9ce9e8f0062597963db36ce4cce8cfacc72889c bpf/proxy: remove the build benchmark tag - a4bf4bbf9220c5165a2e79b96aae5bcf80208b4f bpf/proxy: check errors in Benchmarks - 7abe6ef50aaf925b00cf4d5aeb4caed293da8778 Semaphore Automatic Update - ca3e53bab0a7d1996cdca428409895fc92343d6d Fix up conntrack UTs; move to timeshim. - 417c731357a96d13e156b0d49be06804b36a1473 More UT fixes. - b56a54be9bfebf69fc86d8093f3937f35e0a0e0d Fix race between interface deletion and cleanup. - 09177c3d3e5f308ecf4855f6faae3a7a0d13c0e2 Fix missing return. - 94845844fe1a4031f1be2ff9e0e2afc96aa48fbc Add silent retry for loading BPF program. - d580283bf056fe574a8bac1ce4fc8bb3071b38db Improve tc error handling to handle non-existent interfaces gracefully. - 1f3a32582e183e21d33ab358d5263332c2085656 Avoid race between attaching qdiscs. - 9c2472f6e69eb068b1bd6b43f6306593d0dcfea8 bpf/proxy: syncer tests with maps and service types - aefd38b53178c106320b0a3359e95b0d132c40a0 bpf/proxy: preallocate slices if we know their size - 0abce35fef713fcc3f26c036b8994a132cede4db bpf/proxy: do not update unchanged services - a6853322a5be59c1bc3e7ef1eb900c2fd08f19c5 bpf/proxy: do not overwrite derived if unchanged - 364e97637d7336e3de29e31afdda80439f3f2154 bpf/proxy test remove benchSyncer from syncer tests - 4b3f165c6f9ce1f55d4f0417eb2f14a1a6a2a58b bpf/prox: benchmak Fix nodeport allocation - c79ea203a8135d0bc5881f3ea9e5a8babfe8169f Semaphore Automatic Update - cb49d31188dd87fee24cc5c9d1982f8b84a71316 Added windows code and fix copyright. - 5f26748193ad43536ecb7a457f16e84d670aefdf Markups. - cd6ee8a689e8598788f9fe86763f812461473594 Remove !windows build tag for bpf files - f3cb36b46b1c77ea7149ec0fd855d25b91c6aa73 Reduce log spam from missing interfaces. - 5c95883994603c9227cb734ae037f0b02b37cae4 Fix slow retries in route_table and finesse logging. - 677e2381fbbc90ae51aae2be0a7cf2aae798e537 Fix that profile refs weren't cleaned up when removing endpoint. - 2eaef06ddc53ea49b056dd7f350eb0dac8cee6b3 Avoid spammy VXLAN-configured log. - 7e253278335b7703edd3b239fb85131c717f4011 Downgrade route table "not out route" log. - ffc8522d62ce4b25448339896420fbee22eb1f01 Suppress conntrack cleanup errors when no flows are found. - 32fc92f78a10c35ef5ab8238d5f73b1ba3b67cb6 Avoid error logs when interface is deleted while searching for its jump map. - 36551ef471ab2ffcbd89d1c89c8b9dd4efb1c4d3 Downgrade error log within BPF prog load retry loop. - 353f749f988dba5877f2e33a31c0b0049470e23e Markups. - 56a4178e2058c803504143590ead999126eeea44 REmove duplicate check, log out conntrack's actual error. - c168b4b79f178bb5cb878c242460be7862721965 Only log final conntrack dleetion attempt above Debug. - ce9e42243272772fbd7135274632e7648184fa3f Optimise conntrack command execution. - fd3090880c64f1c998e9b51e87b995c0f179277f Reduce severity and improve active rule calc's missing profile log. - 67bc1678bada61d37b0bcc9dd40c57e695bfd00c Restrict parallelism when applying BPF programs. - 4af1b3c2b323d849c755fb5624f2471bb615027e Beef up bpf syscall retry. - 973c7e416cfde75552e605b24e91e588f0b687ad Downgrade status combiner log; spammy when interface is removed. - 5020ef1a3d20e77ab0b1eb96bf94b59bc3314e2b Detect another possible tc error output. - 6d5caa7d3927cb360dccb923df1fe816a8b1aea1 Fix that async calc graph could fail its watchdog if dataplane stalled - e8dc0dccbd29c636de0c5df64a79e2f1646a494c bpf/ut: fix TestMapIterWithDelete* - d5029f3070d23d75c54da1e6b3073216e7193240 add MapIteratorNumKeys to !cgo to pass linter - 799971424132fef02ffa924280f28fbd2faad108 applySvc - make error always the last return val - ea91da0ae3566c2ce3dc444a59f9256df962c498 serviceEpsEqual in O(n) with O(n^2) fallback. - e9ceea6d0b71297021ea6ed234a3c49b7e9ac100 Semaphore Automatic Update - dd0adc7885787b2429742239b160cc850485938f Fix leaks of BPF map and program FDs. - 06482d874dc0f2e6b607f68526b711b644ca126e Fix that state of interface wasn't written back if info didn't change. - 363e1974fe551266068ab091672198470e29349c bpf/conntrack: fix assumed ordering in NewStaleNATScanner - 1a407846c20ceca2ee6ea5df472f4f225125af74 bpf/proxy: Conntrack cleaner runns immediately after sync up - 5c97f346c9b8fd469c8a169e2b10f5754fc33013 bpf/proxy: run liveness scanner immediately - 9a60ba235d53dd0fa93216a933265e296d319328 Semaphore Automatic Update - 949833c943926477d2ac1894fe59929d89637444 Merge pull request #2457 from fasaxc/fix-cleanup-race - 3710cbc23ad8d551e17f6ff2a259ef3ea89271e6 Merge pull request #2456 from tomastigera/tomas-allow-to-host - a7ab3b8ddf4b163b47c7229fb1bdb4460d7b77a7 Merge pull request #2458 from fasaxc/fix-cleanup-race - c68a6e116a150dd3ecca0ccd9ffd0a42e8aeead7 Merge pull request #2459 from fasaxc/fix-cleanup-race - ae746553df1f37654b76cd50a9e4942f42604daf Pin back to release-v3.6 typha and libcalico-go. - 62d29bc84f39523639b074505a6427a94eef610e Do a bpf_skb_pull_data is skb is too short. - d8393caa6108ee5aea31caf71ba7c53be40f2349 Try to pull enough data for TCP. - c81c43aec5820e60009864d9e519cc92d4be4112 Markups. - 138b607f4adaa0227d4bfc9661d305ccd1f51262 bpf/proxy: stopExpandNPFixup only if runExpandNPFixup - 562990a7452b6bc1aee85a73df1e694ad2308c2d bpf/proxy: ignore bpf deletes ENOENT errors - 09b99aa78e64feb1252bf1f9cd005814749ca0ce Actually check bpf map deletion result. - 08ffabd8e101427cfd36c0f2ae48d7d35bd13599 Merge pull request #2463 from song-jiang/song-fix-ep - 4fd7f7fafbce8dc98728de01cf87df4507237fcf Update pins (#2474) - 99825c368b15322e5d23d70a1330cb36ede2ea7d Fix policy updates for Windows dataplane. - 739e50af18ff6296d1c5e85b6b974b9b6591ad8c Log out k8s connection params, used in BPF mode. - dafee87b314db70cc5cf6e8e0911ebcdd1d1094c Update pins (#2478)