Tomas Hruby
Tomas Hruby
``` 2024-06-01T07:40:08+03:00 libbpf: Kernel error message: Filter with specified priority/protocol not found 2024-06-01T07:40:08+03:00 2024-06-01 04:40:08.995 [WARNING][69] felix/attach.go 171: Failed to attach to TC section cali_tc_preamble attachPoint=&tc.AttachPoint{AttachPoint:bpf.AttachPoint{Hook:1, PolicyIdx:24, Iface:"cali58c64a0c8be", LogLevel:"off"}, LogFilter:"",...
You can use `bpftool net` to see which programs are directly connected to the device.Those :arrow_up: policy programs are called eventually in a chain of programs.
given the lowercase `e` in `p4e_cali58c64a0` is seems like you went from 3.25ish? Seems like some cleanup did not happen. The error message comes from https://github.com/torvalds/linux/blob/92e5605a199efbaee59fb19e15d6cc2103a04ec2/net/sched/cls_api.c#L2316 Are the failing pods...
> root@stage1-6495d69d65xsx98l-7s8td:/# ip ro get 10.222.47.32 > 10.222.47.32 dev calieca2ba1ed43 src 10.220.1.11 uid 0 > cache > > root@stage1-6495d69d65xsx98l-7s8td:/# bpftool prog | grep calid2b > # empty :( `calid2b` why...
I am not entirely sure if I understand correctly, but it feels like you want to insert your own rules that should play well with calico. Have a look at...
This is a known limitation. @coutinhop currently works on making it work without the need for users to switch to tcx, which is only available in (iirc) 6.10+ kernel (which...
> when we can't respond to ICMP so packet get dropped. @ehsan310 why can't you respond to icmp?
Any update on this one?
It first tries to find in `/nodeproc/1/mountinfo` whether the fs is already mounted. So it does not seem like it is mounted yet. Interestingly, it manages to create `/run/calico/cgroup`. Maybe...