Skip to content

Enable extra kernel options to support Istio dns proxy feature #8153

@davidshen84

Description

@davidshen84

Is your feature request related to a problem? Please describe.

Istio DNS proxy fails with the current kernel build, Linux/x86 5.10.60.1. There's a discussion on this issue.

Describe the solution you'd like

Enable these two kernel option:

  • CONFIG_NF_CONNTRACK_ZONES=y
  • CONFIG_NETFILTER_XT_TARGET_CT=y

Describe alternatives you've considered
Use native Linux

Additional context

Istio version: 1.12.0

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions