Search results

NodePort with enable DSR should rewrite smac to VIP's when return from realserver

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/dsrRelates to Cilium's Direct-Server-Return feature for KPR.Relates to Cilium's Direct-Server-Return feature for KPR.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#42374 In cilium/cilium;

· gaopeiliang opened on Oct 24, 2025

Nodes and Pods can't connect to assigned ExternalIP when internal- and externalTrafficPolicy differ

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

info-completedThe GH issue has received a reply from the authorThe GH issue has received a reply from the author

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#42245 In cilium/cilium;

· NiklasBeierl opened on Oct 17, 2025

bpf:nat When DSR and PER_PACKET_LB are enabled, cilium connectivity tests fail.

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/dsrRelates to Cilium's Direct-Server-Return feature for KPR.Relates to Cilium's Direct-Server-Return feature for KPR.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

Status: Open.

#41962 In cilium/cilium;

· gyutaeb opened on Oct 1, 2025

LB-IPAM: only one ip is shared, not the set

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/ipamIP address management, including cloud IPAMIP address management, including cloud IPAM

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/lb-ipam

info-completedThe GH issue has received a reply from the authorThe GH issue has received a reply from the author

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

Status: Open.

#41947 In cilium/cilium;

· batleforc opened on Sep 29, 2025

Cilium DSR response packets use wrong interface when nodes have multiple NICs (RKE2 cluster)

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/dsrRelates to Cilium's Direct-Server-Return feature for KPR.Relates to Cilium's Direct-Server-Return feature for KPR.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

need-more-infoMore information is required to further debug or fix the issue.More information is required to further debug or fix the issue.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#41758 In cilium/cilium;

· MohammadZare96 opened on Sep 18, 2025

loadbalancer: implement Hybrid-DSR using the annotation-based dispatch mode

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/kprAnything related to our kube-proxy replacement.Anything related to our kube-proxy replacement.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

kind/tech-debtTechnical debtTechnical debt

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#41690 In cilium/cilium;

· julianwiedmann opened on Sep 16, 2025

Egress Gateway VS Service with externalTafficPolicy: cluster

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/egress-gatewayImpacts the egress IP gateway feature.Impacts the egress IP gateway feature.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

need-more-infoMore information is required to further debug or fix the issue.More information is required to further debug or fix the issue.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#41549 In cilium/cilium;

· pasztorl opened on Sep 5, 2025

Improve efficiency of socket termination

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

staleThe stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.The stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.

Status: Open.

Enhancement

#40862 In cilium/cilium;

· jrife opened on Aug 1, 2025

l7lb: Same pod routing issue

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

area/proxyImpacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

Status: Open.

#39531 In cilium/cilium;

· sayboras opened on May 14, 2025

Increase MaxSetOfServiceID limit beyond 0xFFFF (65 535) to support large clusters

area/agentCilium agent related.Cilium agent related.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

staleThe stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.The stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.

Status: Open.

#39236 In cilium/cilium;

· devopsInterviews opened on Apr 29, 2025

Service IP traffic blocked when only bpf.lbAlgorithmAnnotation is enabled

area/agentCilium agent related.Cilium agent related.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#39037 In cilium/cilium;

· nueavv opened on Apr 19, 2025

[wireguard] Encrypt LB traffic in XDP mode

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/wireguardRelates to Cilium's Wireguard featureRelates to Cilium's Wireguard feature

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#38477 In cilium/cilium;

· julianwiedmann opened on Mar 25, 2025