mirror of
https://hubproxy.babadafafafafa.cn/https://github.com/kube-vip/kube-vip.git
synced 2026-09-20 08:03:47 +08:00
50993b63f1
* do not masquerade for local endpoints Signed-off-by: Daniel Nägele <daniel@naegele.dev> * fix: do not add VIP to lo in wg mode Signed-off-by: Daniel Nägele <daniel@naegele.dev> * fix: setup policy routing for wg interface Signed-off-by: Daniel Nägele <daniel@naegele.dev> * refactor: use k8s API types for protocol Signed-off-by: Daniel Nägele <daniel@naegele.dev> * conservatively apply packet mark only apply the ct mark as packet mark if it matches our calculated fwmark Signed-off-by: Daniel Nägele <daniel@naegele.dev> * use new nftable setup the nftable setup now uses only one set of chains per tunnel and utilizes named maps and sets to match NAT the connections properly Signed-off-by: Daniel Nägele <daniel@naegele.dev> * ensure proper cleanup Signed-off-by: Daniel Nägele <daniel@naegele.dev> * watch kubernetes endpoints Signed-off-by: Daniel Nägele <daniel@naegele.dev> * refactor wireguard nftables implementation Signed-off-by: Daniel Nägele <daniel@naegele.dev> * use helper for if name determination Signed-off-by: Daniel Nägele <daniel@naegele.dev> --------- Signed-off-by: Daniel Nägele <daniel@naegele.dev>