Tomas Hruby
Tomas Hruby
> The differences here lies on the result of FIB lookup, for x86 platform, the FIB lookup failed with code 7, then marked with 0x1000000; for arm64 platform, the FIB...
relates to https://github.com/projectcalico/calico/issues/6544 and https://github.com/projectcalico/calico/issues/4326
@Zempashi LB are often implemented using NodePorts. Do you have the same issue without wireguard?
Do I understand correctly that you effectively have one iface (eth0) to reach the outside world and another interface (wg1) to do intra-cluster networking? If so, `wg` should be included...
> `Final result=DENY (eb)` This means that the packet was dropped because of IP options, which we do not support. We drop packets with IP options to/from workload endpoint. We...
> `wg1------I` This deny is on ingress. We would need to see a bit more context from the logs. Could you attach a full bpf dump? Or at least provide...
`wg1------I: Drop packets with IP options` cc @mazdakn
could pls decribe the exact steps for setting up such a cluster. That would help us to repro it and diagnose it. Thanks
Seems like a code issue. If you have a reasonably steady number of pods, you should have a steady number of programs. If the number of programs keep increasing, then...
I do not think there would be much needed on the ebpf side. MASQ is done in iptables anyway. The best to figure it out is to have fv test...