Search results

Traffic Replies being dropped by policy

affects/v1.18This issue affects v1.18 branchThis issue affects v1.18 branch

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

info-completedThe GH issue has received a reply from the authorThe GH issue has received a reply from the author

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#41045 In cilium/cilium;

· alexandermarston opened on Aug 9, 2025

CFP: Allow all L4 protocols for traffic between pods

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

#39601 In cilium/cilium;

· skmatti opened on May 19, 2025

datapath: store NAT info in the CT entry

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

feature/snatRelates to SNAT or Masquerading of trafficRelates to SNAT or Masquerading of traffic

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#39256 In cilium/cilium;

· julianwiedmann opened on Apr 30, 2025

Combine NAT Map Iterations into a single observable pass

feature/conntrack

feature/egress-gatewayImpacts the egress IP gateway feature.Impacts the egress IP gateway feature.

feature/snatRelates to SNAT or Masquerading of trafficRelates to SNAT or Masquerading of traffic

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

kind/performanceThere is a performance impact of this.There is a performance impact of this.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#37004 In cilium/cilium;

· tommyp1ckles opened on Jan 16, 2025

Batch ctMap GC deletes

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

kind/performanceThere is a performance impact of this.There is a performance impact of this.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Task

#36981 In cilium/cilium;

· tommyp1ckles opened on Jan 15, 2025

Sporadic "CT: Map insertion failed" errors, mostly on short-lived connections

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

sig/scalabilityImpacts how well Cilium handles a high rate of events or churn.Impacts how well Cilium handles a high rate of events or churn.

Status: Open.

Bug

#35010 In cilium/cilium;

· lgyurci opened on Sep 23, 2024

hostfw: scalability issue due to BPF connection tracking for overlay traffic

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/host-firewallImpacts the host firewall or the host endpoint.Impacts the host firewall or the host endpoint.

feature/conntrack

kind/performanceThere is a performance impact of this.There is a performance impact of this.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#32335 In cilium/cilium;

· julianwiedmann opened on May 3, 2024

test: CT / NAT GC testing with entries populated by BPF_PROG_TEST_RUN

area/CI-improvementTopic or proposal to improve the Continuous Integration workflowTopic or proposal to improve the Continuous Integration workflow

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

feature/snatRelates to SNAT or Masquerading of trafficRelates to SNAT or Masquerading of traffic

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#28825 In cilium/cilium;

· brb opened on Oct 27, 2023

datapath: Avoid double packet accounting in CT entries

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/host-firewallImpacts the host firewall or the host endpoint.Impacts the host firewall or the host endpoint.

feature/conntrack

feature/snatRelates to SNAT or Masquerading of trafficRelates to SNAT or Masquerading of traffic

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Bug

#18552 In cilium/cilium;

· brb opened on Jan 20, 2022

datapath: Upgrade CT map

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

kind/tech-debtTechnical debtTechnical debt

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#17483 In cilium/cilium;

· brb opened on Sep 28, 2021

Improve Conntrack garbage collection

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/conntrack

kind/featureThis introduces new functionality.This introduces new functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#5048 In cilium/cilium;

· joestringer opened on Jul 30, 2018