Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automated cherry pick of #5687: Fix NP not working on Hairpin #5701

Commits on Nov 13, 2023

  1. Fix NP not working on Hairpin

    Fix antrea-io#5681
    
    Network policy didn't work when using a server Pod to establish a
    connection to the service provided by itself. This hairpin service
    connection initiated through a local Pod will be SNATed to the
    gateway IP, which will prevent it from being correctly categorized by
    the network policy during the Ingress rule enforcement.
    
    This commit added a bypass flow to always allow the hairpin service
    connection to address this issue. Given we don't consider self-access
    blocking to be a valid case.
    
    Signed-off-by: graysonwu <wgrayson@vmware.com>
    GraysonWu committed Nov 13, 2023
    Configuration menu
    Copy the full SHA
    e153b12 View commit details
    Browse the repository at this point in the history