Skip to content

Support carrying seclabel in IPv4 option #909

@tgraf

Description

@tgraf
  • Investigate feasibility of carrying seclabel as IPv4 option to not require overlay for IPv4 mode
  • Provide minimal BPF helper to grow headerroom at L3 (IP options)
  • XDP -> cls_bpf metadata transfer
  • Optional: Add support to add helpers such as AH/ESP which require skb metadata change
  • cilium-agent work

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/enhancementThis would improve or streamline existing functionality.kind/performanceThere is a performance impact of this.staleThe stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions