- 2edb662aaa253f83b9e8b6d0ce3cd3ee634310bd Speed up FV container tear down. - bf2d174b58bc78f99bf1dcba37371da6534592c9 Actually check bpf map deletion result. - f3089f23c5588e69c271a20d4082e33f0d9c6888 Always apply BPF programs to workload interfaces - 8ba57cc74123a5c0145e7f71b6468eddfa3d3ea7 bpf/fv: test host-host with full CT table - 527ebb7d8f03bf8f2425b9542e292dd969c3bed3 bpf: Allow traffic from/to the host when CT is full. - 7a60d4ad97c74df1917e7cb9da2951d5cd09e40d bpf/ut: faster map resets - 0610bcbbad7c4dda26bf7475b17b5e4377d300bd bpf/ut: whitelist_test cleanup refactor - eee1a5c3726fd9c87e83add98b9f6cb71c5888cd Semaphore Automatic Update - 9209bbe1586ef2ccf5adda979e5eaff683558042 Fix incorrect handling of interface state in BPF mode. - 3a3721ebcf4be6c4abece4d4927ae3c97ba28c0e Drop dirty entry for interfaces that are gone. - 30869fc3d31c349c9d6a836de401a7a0ecfe49ee Register gauges. - 03e51cf5ddaa866f189e405c78c0cf1c84fdad38 Fix that BPF endpoints were never removed from the cache. - c189637fd2dee1ba740ccd0eed01bd9cb657c52d Semaphore Automatic Update - aa3ea643607faf590ab1ff3bb2440a8d874a4f8e Do a bpf_skb_pull_data is skb is too short. - d840382d0f90f5288a3610558a0c1d4669a2ed47 Try to pull enough data for TCP. - 977800c1232df29901ca6865ea990abb7a7f335d Markups. - 5087b5c58dc495ea5f8a5b662f70bf47c1bca3fd Refresh endpoint cache on WEP update for windows. - 88bcfe425f0b482260e8733d25ecc09f20f60f96 Change iptables backend default to auto (detect) - 2049e74b0e69c0bdd4648025c95d283b3da74c12 bpf/proxy: stopExpandNPFixup only if runExpandNPFixup - e9682cea90158f4a0109cc71a0cee59e147c5353 bpf/proxy: ignore bpf deletes ENOENT errors - 02ada57d9f63da27cb0948d11908753307892b2c Refactor hns API to pass static-checks - 06bd96015fd0a9a4ddb36be554df9a832d4c8e64 Semaphore Automatic Update - d41759d82fbfb6e3898ca72ff3b7fea2bfb58953 BPF: Change data interface regex to avoid EKS workloads - 172c5536d2fe79d55751e7589fe6ba971acea8d9 Semaphore Automatic Update - 97a1f337812fb9dc5e44d2208af7b5ff2690d2c9 Add option for Felix.Stop to shutdown gracefully - 40b2603c7b5a355344bc4b21aecfcbe5a04a878b Log out k8s connection params, used in BPF mode. - e3681b58df1034666ae4606103d895c923b57407 Semaphore Automatic Update - 37f23af7619ec12916a24197c99ffa236f50b716 Merge pull request #2476 from song-jiang/song-policy-update (#2479) - 53b10a57ea553de628fb331a48ff9de169a75c0a Add knobs to disable adding encap drop rules from workloads (#2484) - 55f2eab2e1fdcfbbe3f73d30fbd075bfd015f1fa Semaphore Automatic Update - 4ea27231b72417004d007bb3c64aee8ccccc56bc bpf: harden accept_local using iptables rpfilter - 12adf9ca786605c09435b8926d01b96f5fdcbfb5 bpf: avoid jump to epilogue in HEP - no policy yet - a1f9c53176e955589417743e48a2c5f1d4a9f786 Retry BPF_PROG_TEST_RUN on EINTR. - a5de69074af9fc5e8350fb86e2f87e746639648b In BPF mode, check that the BPF mark bits are assigned. - f89add61004ac7c885ebad1d6754400604b4d71b Add tests for BPF mark bit requirements. - e0f77a29a9950a7305d9fabf5bb2c8c4529c6f73 Markups. - 01c321892f667747f0385edeb66f2d570266b051 Fix that broadcast routes weren't filtered out. - 894ed27074a825a2498c27945b5ddaacaa758bef bpf/proxy: add info logging when Syncer iteration start/ends - c1baf6d7aea590485b7109e3eaed3b946e4f71b0 Avoid missing bpf.h problem, often seen with 'make ut' - 7d45e0be350e8e87e93bd85418ec5f51f68ea461 Clean *.d files in bpf-apache as well as bpf-gpl - 5dfa9875b1814ba0fa390c117b04ab5fc151a10b Update pins - e3b0ddbea3d456417bce89f37f4310f34f7610bb Set DatastoreType etcdv3 if EtcdEndpoints or EtcdAddr specified - 12e947fd1e8ae054177f8d421ddc36ffb453a95b Add update pins pipelines - 1f7f81f6ebf3880dfd78a5251d0948ac4d9ae59f Semaphore Automatic Update - d351df9133399d77856acc8c8c6f37553772e5b1 Allow semaphore-run-auto-pin-update-workflows to set the SEMAPHORE_PROJECT_ID (only default it if it's not set) - aa08a4bfb79654a1ef8ec3c739d866219900b25a adding ec2 health fix and fv health status test - e64f9adfa40bbb14cdcf93a60eea27b6e939069d Automatic Pin Updates - ee127f037ca80f5bd6b6088451482ac2f9cff6c1 gomega.default conflicts with config.Default in tests - 9b8c0ae8ca7eac1de40499733c9b174614bf486c fixed lint for deprecated github.com/golang/protobuf/proto - 0f618bdc574e8c40e390f18a1bd7c0dd77667e13 Automatic Pin Updates - f09b8d3af6ec93cf6170e3a6dffb89aafdcf9cd7 Automatic Pin Updates - 180cb051fa1b95034de5c4876381037a1c7a5f35 Address/Investigate a WG fv flake (#2499) - deff9a585f1241462b443bfd2b789666e57b3067 Automatic Pin Updates - dd1d5d204229383f8f01dcb5035a0cc410ddc6dc bpf: enforce RPF check for possible spoofed TCP - 6befe9c7d4737f6e97bc4f61d6e4ffa6eba93c16 Update go-build version to v0.48 (go 1.15.2) - 435e17946fee00a35a7ebc731b9c629c014655cd Automatic Pin Updates - a17cba8a266d72948fc1a7d1aad1eb691ed13b42 Multiple node addresses result in multiple routes - 762a6ca1897803abc6788c9b09011ffc6e4c1118 Fix L2 dataplane reconciliation - f53f10fa3c659094ffb68f5bf4cb6adfa5d67e6b Moving the CGO functions to a separate C file - 96a5b99927e290d3105472235bc80eb434df5ae7 Moving the CGO functions to the header file - 09a04e851745b410eabf72f70c9abec2bf09b80c bpf: test EKS-like SNAT outgoing - fc711b192fd8c66ac883fa8fd5b61bec7f77e4e7 bpf: skip FIB for WEP egress leaving the cluster - 2b2ad018689b76aa6fadd4f15db53dfcc42d5b33 Fix wireguard resync processing: correctly flag already handled nodes - 475bfe7ae4ec26dd5ff67c0321c629f9114b8523 Update libcalico and Typha pins for ServiceLoopPrevention field - e5768750cda66482e8bd6b322d3a837d583f4e10 Add ServiceLoopPrevention field to Felix config - d0e5e788450ef47995cabb15394b9fdb6d9e71d0 Define proto.GlobalBGPConfigUpdate - 2ab96e2da226608c917663efe24dd080bf00b374 Pass global BGPConfiguration through calculation graph - 1b27ab6010d51de001766b51ff682612d15b55c4 Avoid seeing logging in clean UT runs - f39b0870e6c001fcc726180c52052de7d5e82269 Program iptables for service loop prevention - b6da47d046b4c47b0ff624b1e5e80466fbe8f6f5 UT for service loop prevention code - 9ea192f1e03acad74283ea433817b230aa5c17ad FV for service loop prevention - a00a6e6413fa4ede42e4890035ab2811eab69ca4 Code review markups - 969801686b118356fcc0bf4b417cd5a81cd3a538 Use tcpdump to check that there is no routing loop - e109be4f5ff456add4f928613be8c94a5fa88bfa Code review markup - 1545cc8a97496823322c376dcce9bc58eabe1d21 Automatic Pin Updates - b2deab017b7d15764bfecbea742a0641ab88d865 Automatic Pin Updates - 1e11deea34b8d911a560550e4a0deed05ec7e2b9 Export multipath route to kernel - ce40abb9cef32303953e10f1d71c65059d52065e Calculate MTU based on host interfaces (#2511) - 70aa88f79b7e280a6ad4519d984ddba565379b56 bpf: pick a random backend after affinity timeo expires - 0ec13584e4c75e06ec1162e3b299102aafbbf307 bpf/proxy: fix typo - b7eaadee9dc4ab8b6b940a9c65b4bdc69887a296 update netlink 1.0.0 -> 1.1.0 - b3f77315e36a258d43c7e2e722195df394d48f63 Semaphore Automatic Update - ba5dedff4435969b0035073c6c656f680dad9524 Update semaphore YAMLs. (#2558) - 4d8f2413196df3ea577c91a00ef6c94b5f541104 Automatic Pin Updates - db58fe606b04993404a1288f52e97b55969d13bd Fix service loop prevention in IPVS mode. - 3e7c3cc43319c639f00973dfcddbe4032c67d11b Log in to dockerhub on remote VMs too. - c53cbef96d527524b8a937a29a605a86c4acc6d4 Expand interface detection regexes. - c796cc7246643eaa20aa15ccc37384d08338bda2 Detect iptables-swave error when run on a system with nft rules. - 1208d34a223eb4911bf59f2466672a90d240fa32 Fix release branch pin update regex (add ^ to start) and cascade pin updates - a2905ab743c571f7eb55cdcba839e340b6fdfa2f Semaphore Automatic Update - f20fc2b296f7286ea4824fbe71af0394c0c2abb8 Automatic Pin Updates - 0b7be1f1fbb6a407060471a655f0193c4e3398af Handle when unable to detect host MTU (#2563) - 891409f1ec9f98ac8ade2323983350b1ae7337a1 Fix flaky MTU test wait time (#2570) - 9ec8fbdc54bef6cc9be8c71248fccc5b774292d3 Automatic Pin Updates - 6df0a41e0c86e974877678d2bdb05d39ce1ec538 Automatic Pin Updates - 627442c6e2a3a38a0e77cfbc64003d084491a131 Turn down log level on spammy MTU log (#2578) - 07b8b1a9039d235f3070eac264dbe4e2976bc4d9 Automatic Pin Updates - e77b44893c81d1274c6805a3f27bdb4994988708 bpf/proxy: fix stale NAT entries cleanup - d3dca340e822dc8aee9d87f56174b4d13878d608 Automatic Pin Updates