Nathan Sweet

CFP: Remove Deprecated Function Calls

10

Running [staticcheck](https://staticcheck.dev/) on Cilium gives the following list: ``` daemon/cmd/status.go:279:29: strings.Title has been deprecated since Go 1.18 and an alternative has been available since Go 1.0: The rule Title uses...

policy: Add Port Range Support for Policies

5

See commits. Fixes: #16622 ```release-note policy: Add support for port ranges in network policies. ```

policy: Add Port Range Support for Policies Part 1

1

This commit prepares the policy engine for adding port ranges by changing the underlying datastructure for mapstate from the go builtin "map" to bitlpm. It also adds a utility port...

bitlpm: Convert UintTrie to Struct

1

It is more useful for the types that bitlpm provides to be structs than interfaces. There is already an Trie interface provided and making a convenience type out of a...

policy: Add Port Range Support for Policies Part 2/3

1

This PR prepares the policy engine for adding port ranges by enabling the underlying userspace cache to calculate insertion, deletion, and lookups with port ranges, as well as adding unit...

Support Custom Equality and Diff in Assert and Require

1

## Description Update `assert` to compare data structures that are isomorphically equal (such as a Tree, Trie, etc) to one another, but not equal by value or reference. ## Proposed...

docs: Add Port Range Information

1

~- SCTP and Port Ranges are now supported, both are removed from the unsupported features table.~ - DNS rules and L7 rules do not support port ranges yet. Notes are...

- Upgrade Cilium library to 1.16-rc - Add port range tests for all port-based connectivity tests.

policy: Policy Map Overflow Lockdown

8

see commits for details. ```release-note endpoint: Add an option to lock endpoints down (that is, drop all traffic) when their policy maps overflow. ```

jit: Enable JIT without "std" feature, but with global alloc

6

Add a new "alloc" feature that indicates that the crate importing rbpf has an implementation of the GlobalAlloc trait. Memory protection is ignored in the "no_std" environment.