Martynas Pumputis

You could make `NODEPORT_PORT_{MIN,MAX}` and the rest configurable.

> is it possible to make NODEPORT_PORT_{MIN,MAX} and NODEPORT_PORT_{MIN,MAX}_NAT overlap? You could make it, but requires code changes. > If yes, that's great (but why isn't it the default or...

@rpthms Seems that the datapath is not aware that the wg device is L3, although it should. Could you share `cilium status --verbose` output?

> But accessing the kube-apiserver using the cilium-master's WireGuard interface IP, still fails and I keep getting the UnknownEthernetType log messages. Do you get those messages on cilium-worker or cilium-master?...

I think the datapath can stop handling the ND all together after https://github.com/cilium/cilium/issues/23445 has been resolved. This would resolve this issue too.

> so you think this PR has to be closed. Right? ~Yep, I suggest so. Anyway, thanks for the PR.~

> so you think this PR has to be closed. Right? I missed that the deletion was not working in that case. So, it's very unlikely that someone was using...

Let me ping some maintainers first. Mind pinging me (`martynas`) on Slack? We can coordinate there.

Yep, just that I still didn't manage to coordinate all efforts with pkg maintainers. Which distro would you target first?

Great! I'm not familiar with distro packaging. Perhaphs you could reach out to the Arch community? @Foxboron mentioned that he might help with Arch.