kumahq/kuma-net issues and pull requests

#124 - ci(.github): automatic sync of files in kumahq/.github

Pull Request - State: closed - Opened by github-actions[bot] almost 2 years ago

#123 - fix(iptables): changed append to insert for dns

Pull Request - State: closed - Opened by lukidzi almost 2 years ago

#121 - ci(runner): use ubuntu-20.04

Pull Request - State: closed - Opened by mmorel-35 almost 2 years ago - 1 comment

#120 - Revert "chore(deps): bump golang.org/x/sys to v0.2.0"

Pull Request - State: closed - Opened by slonka almost 2 years ago

#119 - chore(deps): setup dependabot

Pull Request - State: closed - Opened by mmorel-35 almost 2 years ago - 1 comment

#118 - chore(deps): bump github.com/vishvananda/netns to 0.0.1

Pull Request - State: closed - Opened by mmorel-35 almost 2 years ago - 1 comment

#117 - feat(ebpf): make ports & kuma-dp UID configurable

Pull Request - State: closed - Opened by bartsmykla almost 2 years ago

#116 - chore(deps): bump golang.org/x/sys to v0.2.0

Pull Request - State: closed - Opened by mmorel-35 almost 2 years ago - 2 comments

#115 - fix(tp): insert docker vnet rules at the begining of PREROUTING chain

Pull Request - State: closed - Opened by lukidzi almost 2 years ago

#113 - Move this repo inside kumahq/kuma

Issue - State: closed - Opened by lahabana almost 2 years ago
Labels: triage/accepted, kind/cleanup

#112 - chore(ebpf): put ebpf programs in image to /ebpf/

Pull Request - State: closed - Opened by bartsmykla almost 2 years ago

#111 - fix(ebpf): removed net cleanup script which is not used anymore

Pull Request - State: closed - Opened by lukidzi almost 2 years ago

#110 - chore(ebpf): add UnloadEbpfPrograms function

Pull Request - State: closed - Opened by bartsmykla almost 2 years ago

#109 - chore(ebpf): export some helper functions for CNI

Pull Request - State: closed - Opened by bartsmykla almost 2 years ago

#108 - Fix eBPF on container-optimisedOS

Issue - State: closed - Opened by lahabana almost 2 years ago - 1 comment
Labels: triage/accepted, kind/bug

#107 - Switch CNI to use BPF CO-RE/libbpf based programs

Issue - State: closed - Opened by lahabana almost 2 years ago
Labels: triage/accepted, kind/feature

#106 - Maybe make eBPF on Kernel <= 5.4

Issue - State: closed - Opened by lahabana almost 2 years ago - 3 comments
Labels: triage/accepted, kind/bug

#105 - Fix eBPF on arm

Issue - State: closed - Opened by lahabana almost 2 years ago
Labels: triage/accepted, kind/feature

#103 - [wip] Feat/docker vnet different labels

Pull Request - State: closed - Opened by slonka almost 2 years ago

#102 - chore(*): removed platform because buildx does it for us

Pull Request - State: closed - Opened by lukidzi almost 2 years ago

#101 - feat(*): support running iptables with docker

Pull Request - State: closed - Opened by lukidzi almost 2 years ago

#100 - chore(ebpf): add cleanup fallback - non-linux arch

Pull Request - State: closed - Opened by bartsmykla almost 2 years ago

#99 - feat(ebpf): add ebpf cleanup

Pull Request - State: closed - Opened by bartsmykla almost 2 years ago

#98 - feat(ebpf): add cleanup when pod is being removed

Pull Request - State: closed - Opened by bartsmykla about 2 years ago

#97 - feat(ebpf): be defensive with cgroup/bpffs paths

Pull Request - State: closed - Opened by bartsmykla about 2 years ago

#96 - create arm64 image of kuma-net

Issue - State: closed - Opened by lahabana about 2 years ago - 3 comments
Labels: triage/accepted, kind/feature

#95 - feat: make use of merbridge with libbpf loaders

Pull Request - State: closed - Opened by bartsmykla about 2 years ago - 3 comments

#94 - feat(*): added logging rule to the iptables

Pull Request - State: closed - Opened by lukidzi about 2 years ago - 1 comment

#93 - feat: exclude ports by uids

Pull Request - State: closed - Opened by slonka about 2 years ago

#92 - chore(*): added instruction of running perf test and scripts

Pull Request - State: closed - Opened by lukidzi about 2 years ago - 3 comments

#91 - fix: outbound tests with exclude

Pull Request - State: closed - Opened by slonka about 2 years ago - 2 comments

#90 - feat: introduce ebpf tc programs

Pull Request - State: closed - Opened by bartsmykla about 2 years ago

#88 - eBPF ability to configure ports

Issue - State: closed - Opened by lahabana about 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#87 - fix(*): added definition of interface for ipv6

Pull Request - State: closed - Opened by lukidzi about 2 years ago

#86 - Transparent proxy with reachable services bypasses mTLS when using eBPF with init-container

Issue - State: closed - Opened by jakubdyszkiewicz about 2 years ago - 1 comment
Labels: triage/accepted, kind/bug

#85 - Ability to have the entire docker network's traffic redirected to transparent proxy

Issue - State: closed - Opened by lahabana about 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#84 - Add ability to ignore a uid from redirects

Issue - State: closed - Opened by lahabana about 2 years ago - 3 comments
Labels: triage/accepted, kind/feature

#83 - get rid of make in eBPF code

Issue - State: closed - Opened by lahabana about 2 years ago - 2 comments
Labels: triage/accepted, kind/cleanup

#81 - chore(*): tidy go.mod

Pull Request - State: closed - Opened by mmorel-35 about 2 years ago

#80 - fix: merge tproxy config before dns servers check

Pull Request - State: closed - Opened by bartsmykla about 2 years ago

#79 - chore: ebpf instance ip config change

Pull Request - State: closed - Opened by bartsmykla about 2 years ago

#78 - Cleanup when uninstalling kuma with ebpf enabled

Issue - State: closed - Opened by bartsmykla about 2 years ago
Labels: triage/accepted, kind/feature

#77 - eBPF can't exclude ports from redirect

Issue - State: closed - Opened by lahabana about 2 years ago - 1 comment
Labels: triage/accepted, kind/bug

#76 - eBPF how to figure out if the packet is going to a podIP

Issue - State: closed - Opened by lahabana about 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#75 - How do we cleanup eBPF maps of IPs of pods that are no longer running

Issue - State: closed - Opened by lahabana about 2 years ago - 2 comments
Labels: triage/accepted, kind/feature

#74 - feat: build and publish kuma-net-ebpf docker image

Pull Request - State: closed - Opened by bartsmykla about 2 years ago - 1 comment

#73 - feat: add logic to use ebpf for tproxy

Pull Request - State: closed - Opened by bartsmykla about 2 years ago

#71 - Integrate merbridge in `kumactl install transparent-proxy`

Issue - State: closed - Opened by lahabana about 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#70 - feat(*): added possibility to disable inbound/outbound redirects

Pull Request - State: closed - Opened by lukidzi about 2 years ago

#69 - feat(*): added flag to redirect only dns requests with specific ip

Pull Request - State: closed - Opened by lukidzi over 2 years ago

#68 - feat(*): added ability to include only specific ports in tp rules

Pull Request - State: closed - Opened by lukidzi over 2 years ago

#63 - feat: move firewalld from kuma to kuma-net

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#60 - add outbound DNS traffic to eBPF engine

Issue - State: closed - Opened by lahabana over 2 years ago - 2 comments
Labels: triage/accepted, kind/feature

#59 - add outbound workload traffic to eBPF engine

Issue - State: closed - Opened by lahabana over 2 years ago - 2 comments
Labels: triage/accepted, kind/feature

#58 - add inbound filter to eBPF engine

Issue - State: closed - Opened by lahabana over 2 years ago - 2 comments
Labels: triage/accepted, kind/feature

#56 - How do we install merbridge on Kuma?

Issue - State: closed - Opened by lahabana over 2 years ago - 3 comments
Labels: kind/feature, triage/duplicated

#55 - Update merbridge to integrate with Kuma

Issue - State: closed - Opened by lahabana over 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#54 - Move the tproxy/firewalld logic from kuma to kuma-net

Issue - State: closed - Opened by lahabana over 2 years ago
Labels: triage/accepted, kind/feature

#53 - feat: dns conntrack rules when extension available

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#52 - feat: introduce inbound ipv6 redirect port (15010)

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#51 - chore: enable by default dns conntrack zone split

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#50 - feat: display test results on PRs

Pull Request - State: closed - Opened by bartsmykla over 2 years ago - 2 comments

#49 - feat: add golangci-lint

Pull Request - State: closed - Opened by bartsmykla over 2 years ago - 1 comment

#48 - why do we not need a `--redirect-outbound-port-v6`

Issue - State: closed - Opened by lahabana over 2 years ago - 5 comments
Labels: triage/accepted, kind/feature

#47 - Add flag `--redirect-inbound-port-v6`

Issue - State: closed - Opened by lahabana over 2 years ago
Labels: triage/accepted, kind/feature

#46 - Add a flag to not redirect inbound traffic

Issue - State: closed - Opened by lahabana over 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#45 - Investigate whether we need `--redirect-dns-upstream-target-chain`

Issue - State: closed - Opened by lahabana over 2 years ago - 3 comments
Labels: triage/accepted, kind/feature

#44 - chore: add tests status badge to README.md

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#43 - Add `--redirect-dns` flag

Issue - State: closed - Opened by lahabana over 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#42 - feat: configure ghactions and remove circleci

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#41 - fix: timeouting ipv6 tests on some machines fix

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#40 - fix: remove duplicated line in circleci config

Pull Request - State: closed - Opened by bartsmykla over 2 years ago - 1 comment

#39 - feat: setup circleci

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#38 - feat: improve github actions ci

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#37 - feat: setup github actions CI

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#36 - feat: add missing blackbox tests for dns

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#35 - feat: get rid of GID related iptable rules

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#34 - feat: add ipv6 capabilities to iptables engine

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#33 - feat: add generation of random ipv6 addresses

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#32 - fix: destination parameter had wrong strings

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#31 - Add iptables rules for LOGGING

Issue - State: closed - Opened by lahabana over 2 years ago - 2 comments
Labels: triage/accepted, kind/feature

#30 - Add option for allow-ports

Issue - State: closed - Opened by lahabana over 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#28 - Get rid of GID related rules

Issue - State: closed - Opened by bartsmykla over 2 years ago

#27 - test: add unit tests for parameter/outinterface

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#26 - feat: add option to drop invalid packets

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#25 - refactor: clean and improve test/framework

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#24 - CI for kuma-net repo

Issue - State: closed - Opened by lahabana over 2 years ago - 2 comments

#23 - ipv6 support

Issue - State: closed - Opened by lahabana over 2 years ago
Labels: triage/accepted, kind/feature

#21 - Introduce logic to discard invalid packets

Issue - State: closed - Opened by bartsmykla over 2 years ago
Labels: triage/accepted, kind/feature

#18 - test: add more unit testst for parameters

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#17 - feat: add logic to exec iptables-resolve

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#16 - chore: customize config closer to current kuma one

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#15 - feat: allow disabling dns conntrack zone split

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#12 - test: add logic for networking test framework

Pull Request - State: closed - Opened by bartsmykla over 2 years ago

#7 - release CNI/Transparent-proxy binaries/libraries

Issue - State: closed - Opened by lahabana over 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#6 - Implement wrapper to do CNI

Issue - State: closed - Opened by lahabana over 2 years ago - 1 comment
Labels: triage/accepted, kind/feature

#5 - Figure out which flags from the original transparent-proxy needs to be supported

Issue - State: closed - Opened by lahabana over 2 years ago - 4 comments
Labels: triage/accepted, kind/feature

#4 - Implement wrapper to do Transparent-proxy

Issue - State: closed - Opened by lahabana over 2 years ago - 3 comments
Labels: triage/accepted, kind/feature

#3 - Add tests for port redirect and DNS redirect and make them pass with existing CNI/Transparent proxy

Issue - State: closed - Opened by lahabana over 2 years ago - 3 comments
Labels: triage/accepted, kind/feature

#1 - Implement network "engine" with port redirect iptables

Issue - State: closed - Opened by lahabana over 2 years ago - 2 comments
Labels: triage/accepted, kind/feature

GitHub / kumahq/kuma-net issues and pull requests