Comments (3)
squeed
commented on June 1, 2024
maybe @youngnick has an answer :-) ?
from cilium.
chaunceyjiang
commented on June 1, 2024
The current implementation of Gateway API through Envoy does not allow for getting the source IP of the requests done via the Gateway. I've seen that the Ingress Controller has support for enabling the proxy protocol in the latest version (1.15.0-rc.0), but the Gateway API still has no way to enable this.
Hi， @nushkovg I've submitted a PR to implement this feature. Could you help me test whether this PR meets the requirements? You can directly use the image here.
from cilium.
youngnick
commented on June 1, 2024
Sorry for the delays everyone, and thanks for getting to this one @chaunceyjiang. Adding a mechanism to say "all Gateway API gateways will pass PROXY protocol", the same as the existing Ingress support seems like a reasonable step.
from cilium.
Related Issues (20)
- node.SetDefaultPrefix causing traffic blackhole using multi-pool IPAM, native routing, eBPF HOT 5
- ci: Add /retest option to rerun only failed test HOT 2
- Cilium dropping UDP fragments of packets of certain sizes
- CI: Cilium E2E Upgrade: cilium-health-ep is failing HOT 4
- Report the use of components with vulnerabilities in cilium
- TCP connection drops with LB mode: DSR ON when trying to reach ingress endpoint from outside the cluster
- Linux 5.10 (minikube ISO) crashes on "address family not supported by protocol" HOT 1
- Gateway API 1.1.0 released HOT 9
- enable-nat46x64-gateway breaks network connectivity over tun interfaces HOT 2
- Issues with Cilium in eBPF replacement mode on Rocky 9.1 HOT 1
- Ingress paths with multiples match does not give precedence to the longest match HOT 1
- Move program attachment logic out of `replaceDatapath()`
- Stale service conntrack entries causing packet drop HOT 4
- Cilium dropping IPIP packets w/ unknown drop reason of 119 HOT 11
- CFP: add loadBalancerSourceRanges to the Gateway HOT 1
- CFP: add loadBalancerSourceRanges to the Gateway listeners
- Ingress annotations not propagated to the generated Kubernetes service object HOT 1
- Delayed NLRI withdrawl for ingress-nginx endpoint removal HOT 3
- CFP: propagate gateway annotation for source-range to the load-balancer managed by the gateway
- Problems with coredns timeouts and pods DNS resolution with bpf.masquerade enabled HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cilium.