- 52eba27746813420d6e16de1cb9de5bb3f331c1d Allow FailsafeInboundHostPorts & FailsafeOutboundHostPorts to be configured with an optional CIDR (format: cidr:protocol:port) - 1fb342a89d2beff0dbdef3b8b094d54d580014dd Automatic Pin Updates - bb102df87f43af9854bb31f92df954ee225bc54c Automatic Pin Updates - ebe487f1bf009c673a482f13dd4a9cf6f21d1d68 Automatic Pin Updates - e9fc0108b6f1691114cd1657328d95586672ad96 Automatic Pin Updates - 8ea176a8c429ed4493828710669257a1fe3bd0ce Send SYN retries to the same backend. - 4736236909461562a0ad68900ab1483d1daa2ada Markups. - 8ba1413d0283c7bb66fee5a085ba4c14f6352f07 Do not forward incoming VXLAN packets. - 68d0b530554f72c4f5b8e16c7f922fcd80258ed1 Automatic Pin Updates - b33b92706929148a3fb60833976f141380b2549c Automatic Pin Updates - ce5f09a46e7fd546756f2700f0d1419022f2ea97 Ignore log rules in BPF mode. - c0c9933840923e18fa274d6e017a770b22b9f94f Automatic Pin Updates - 91eca0ea9976e48fd3c35df623974138423556cc Allow felix build on 32 bits systems (armv7) - 4220f445dc16c7c8e88cc36bdc4dc1e23c3ae9e0 Fix that VXLAN tests only ever tested the WorkloadIP case. - 6fa1de9892acb79930b3d6020bf373291c3d1872 For eBPF data plane, respect externalTrafficPolicy for LB services (#2686) - 5c0408d372cb34bcce1d7265c36744a2ffa407a1 Service loop prevention for external IPs - 5396784ff4f7ae068fb5486cfec2af00c043643f Remove -i flag on go build - 0be01b32261091f93000c855f3ed1ef063ba0383 switch FailsafeInboundHostPorts & FailsafeOutboundHostPorts config structure to <protocol>:<net>:<port> - 30a6abbf9dae364754729ea02fbbd204c87a3de0 Default wireguard FailsafeInboundHostPorts & FailsafeOutboundHostPorts net to 0.0.0.0/0 if the protocol and listening port doesn't already exist in the failsafe list. - 96887fc8df3c88b6ed16b9f25ffa8fd068c9c187 Automatic Pin Updates - 62b22a34551af79c08a0533072d2176d561052c4 Add debug logging for failsafes when wiregaurd is enabled to indicate if user or system configured failsafes are being used - 0c1d193e04e0c3ec1de4dc4340c889c4302b4c76 Move copy of slice inside if statements so there isn't an empty element at the end if a custom failsafe has been provided for wireguard - 4b58bbaf9925fbc77454eef9b4c3761a5eecb54d Automatic Pin Updates - 2a505016ba7865f38f1689e0e0c0fa27ce45329b Merge pull request #2694 from song-jiang/song-static-rule - 56f7d254826ac0b95e879d4833196f9723217304 bpf: calculate ICMP csum as L4 not to confuse offloading - 784659d33fa75e2857ac47cb29e6cd7eab5f70a3 bpf/conntrack: scanners IterationEnd called in reverse order - 0f47f5f28cbaf4f752be1d0805cf3a0a972352bf Automatic Pin Updates - 78b5edcf36371d26d21905da29e6abf56aa5a59e Automatic Pin Updates - 69c3afe8b04335c78bb2cc1644e44060ecbd06ae Handle failure of netlink channel. Report a fatal error. - cd4be787791052687abc370a2687d06661c94411 Make interface monitor retry if netlink fails. - 0e75360ad0dd0eacc17fafe775161f7e2f241e22 Markups. - 561d2d9b5a57cd54e228d755e3120520fe21c1f0 Receive interface address updates - 0ffca5de8875ce43b6b275b28b3db743026a6f10 Add debug logs - b7b2481fb77bea8bd89cf45a92db0149e85c13f8 Get IP address for interface name - dc8c91b84b7a673f3960af5f8be3551361ca3958 Return IPv4 address - 0731baeeffb0088339adbf7b756b5f0012903747 IPv4 address get - 3588f84b7921d469fc30257025afb7ca98e9abed Add UT for SYN conntrack. - c0e5ebaa0158372c5b73358c8d13e4cc3ba82b5c Debug IP addrs add - 771bb034b3d25866d3a789d879f8a46db78202b7 Debug - 0a9d5e7031aebbde9a80850c2804bb59ebfdfb4e Debug - f63c88d06b030b0f23efed3fc62d3f0eee4fac81 Pass Intf_ip to the BPF program - 69d164b6301dbd8d7adb4c1eabcdc25dc3da71f1 Debug - 3d89d8fed91de5bccc1847399eab309778bd98a3 Rev libcalico-go and kubernetes pins. - 25eaf768924756041ea2cdbca9abcef4fc00b239 Automatic Pin Updates - 479c564ac14772de0eb45adef629dd11ed6efd31 Remove unwanted debug prints - f23e3957681c9b32de8553d239ea0c5881e6c8d8 Fix felix crash - 1595f3cb663e9fd379e26637e74c8c01a9e93fd5 Fix panic - bb50cb29fd2800b0c0f837f8d4f58ed6a37303e4 Set Interface IP as 0.0.0.0 for workloads - 275dfc72ff18c74255b85a31f3e459b407af2b22 Automatic Pin Updates - 9bd910de54e2ca0416a129f1063be254e91f9637 Automatic Pin Updates - da0749c1388835d38e18273351d76a5b6ff465d1 Pass CalicoRouterIP as intf IP for workloads - 9ff5f9c61dc36d9afa57e35b02226052741805c3 Sort interface IP addresses - 5b4f94e8a8a47d9d7aaaae6bfee07a5ce9e8247f Fix static check error - 1b9927d1c83286277205b8af0a78294498d6cc40 Sort IP addresses from getInterfaceByName - d7cf3b580a6de0255e7e66ca1a4b9c8527763c07 Filter out net.IPNet and sort the IPv4 addresses - 671e7354dd3c3dcde428d43d11eede15188d8190 bpf: set rc to TC_ACT_UNSPEC if CALI_RES_REDIR_IFINDEX fails - 1ef8eef9953fdc19cefb7bddf47688769ae6ba3f bpf: fix ensure failsafes map exists - 0316b28a95b139b3f9e55f7336481d10d17200d8 Add handling for IPv6 networks in failsafe rules - d04d83747d4bde6799264a1253d53e18610e4446 Automatic Pin Updates - 2c443dc71139ecd87f9a8e5c3d34d752de9d51b5 Fix for FV failures in l3_route_resolver - 7e1854410e5116ca48c7574450efdfd8b34a1376 Populate Vxlan addresses and node addresses - 7a5a6b58a7deb3456ba043f3fad2aec6012bef1b Fix FV tests - ba2de998d22eb5e8df21227da49e9141f6349e54 Adding go.mod and go.sum for test purposes - da54902862c1af2b063afd2b226485fe7d95a59a Remove addresses in vxlan tests - af70c56de48619ee7dce09085bf8f2dc8ba680d5 Automatic Pin Updates - 9f2bfb37804e971c10e5dac8c8332bc7d256776f Update libcalico-go to latest version (#2754) - d57ac5aa520b59776fbc649176793e8d9258f1f3 Remove the go.mod changes - b05915e8d4459ecec64b41f0038e59e233264287 Updating go.sum - 53db53fa2368110c8a4fdb118d21b2f7690ca263 Automatic Pin Updates - 3eecb2d7f9120a51bb2bfc2507e8be334e3279ad Clean up Makefile - 71a079787c331e32c046f841eb985dd2ee4e7f3b Automatic Pin Updates - 53b3745e2a9b042483a149c73d764c2d7460a304 Split up CI to avoid disk issues - c0377618cd71fa2972807167a7578445abe093f2 Add CIDR handling for failsafes in bpf - 47076320f902e3f780e569adfec6ccefb3742569 make key hashable - 7e2bd9f0b20eaaf71952305ef1d6b48c055597b3 Add a caching wrapper around a BPF map. - ac04f13df4524a7769e1e8070430089eeee0dbc2 Add FV test of overlapping external IPs. - eed0ed8d09cdcf4d0cf03730cd0e0b821b47061c Initial rebase of proxy Syncer onto CachingMap. - ce819111d2104d5e9324d43a9d09027d5f21ce62 Get UTs compiling (not passing yet) - 78678fe52ed1a300feeec37ca14d55b500a0c347 Fix incorrect update logic. - db1b3ef02f58a817df680f597a80eca87b5c5958 Fix up more UTs. - 049fd62e2bb8e6788a80f6a2d88ef1df92b0e855 Fix benchmark. - 533f4088a460f781a37bc91b9dd0650571cdb137 refactor tests - 837b6c4a6132ea8d6046c80c567e61c62f216a32 Fix errors from old versions of failsafes and add regression tests - a12dea417cc90845e31c054399f70beb5e7915a7 Remove stick service deletion flag; no longer being set. - becb75ace02a592e663410ef742a7fe9839fcd98 Remove unused function. - 51f4f5180e02fa14f03e4ac7be26b46417625114 Markups. - 7f50f568646d9610c71eebe721828f7e6c4d47df UTs for CachingMap. - 8d72d22f16e9f2b4df0f9508419d718214aaed3f Add external IP overlap UT. - a54dd441aa94526704709c66d8b538c17e5e1cd2 Cover CachingMap. - 5eff89ae547a95794f153abb5be5f0e7a0b1e7d1 Add to error - b89a7a56345f023149706817e8a7e8dd0f326d96 Dont panic when we see a sctp named port - 1f95075581cdf1bad4cea15122792acbd5997a7b add default cidr - 7ce747cdfd7bf096ec422dcb3d1f33e381a796eb Change Error to warning - 0d02dcea69d8f67d76093d06a2ad505fe4cb429e Node port fixer: only trigger new sync if an endpoint was resolved. - 7987c8f81503ca9cec397fefd71df0dd0763176f Automatic Pin Updates - a662ef7aed985e05e84076f00059a844c6d3e847 bpf: BpfExtToServiceConnmark - EKS rpf check - 87c68a8b66f6a57170a3ab5084c8c7b66baacdd4 bpf: EKS workaround iptables rule for BPFExtToServiceMark - c23ee5276382a09b318dbfcdf050f33a6751e26e fix fv FELIX_BPFExternalServiceMode - 844f52121f8a7896aa136b31da3193c5befbf011 Markups. - 02a8726bd382771788359836b9b79a08e378e57d Reuse keys and values in caching map for performance. - 427228d721cc4c64ccd8f1ee8deb2e0ab1b8f43f Fix that benchmark was timing the set-up on the first iteration. - 268ac9cee44b610d88a63763aa46a4d30102cd63 Automatic Pin Updates - 5e24eaa1c31e9723c32068d92f5a40dcbcd4ef55 Automatic Pin Updates - 755206b4f61e44473805664cc20459c4386ffa0f bpf: reserve conntrack flags for upgrade compatibility - 0f5df4770220e6f09315f3c31c8b034461996990 Automatic Pin Updates - 95d0bd07f9c65bde79aa7cfd454cbb7c436a3630 Automatic Pin Updates