From 8a6f98ae6c81caac28a6dd6e4fc6f59cb19a0155 Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Sun, 18 Feb 2024 06:54:37 +0800 Subject: [PATCH] fix(cilium): disable BPF masquerade (#1334) * fix(cilium): disable BPF masquerade It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium). There's also no real advantage to using in homelab, so it should be safer to disable this. * fix(cilium): disable BPF masquerade It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium). There's also no real advantage to using in homelab, so it should be safer to disable this. --- bootstrap/templates/partials/cilium-values-full.partial.yaml.j2 | 2 +- bootstrap/templates/partials/cilium-values-init.partial.yaml.j2 | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/bootstrap/templates/partials/cilium-values-full.partial.yaml.j2 b/bootstrap/templates/partials/cilium-values-full.partial.yaml.j2 index 968cf638..111b031b 100644 --- a/bootstrap/templates/partials/cilium-values-full.partial.yaml.j2 +++ b/bootstrap/templates/partials/cilium-values-full.partial.yaml.j2 @@ -2,7 +2,7 @@ autoDirectNodeRoutes: true bgpControlPlane: enabled: true bpf: - masquerade: true + masquerade: false cgroup: automount: enabled: false diff --git a/bootstrap/templates/partials/cilium-values-init.partial.yaml.j2 b/bootstrap/templates/partials/cilium-values-init.partial.yaml.j2 index cb785f9e..8ec51ebf 100644 --- a/bootstrap/templates/partials/cilium-values-init.partial.yaml.j2 +++ b/bootstrap/templates/partials/cilium-values-init.partial.yaml.j2 @@ -2,7 +2,7 @@ autoDirectNodeRoutes: true bgpControlPlane: enabled: true bpf: - masquerade: true + masquerade: false cgroup: automount: enabled: false