kilo/pkg/mesh
Lucas Servén Marín e598102f04
pkg/mesh: fix routes for NATed nodes
Currently, when a node is behind NAT, it is possible that routes to the
node's private IP address, i.e. routes necessary to communicate with the
Kubelet and any Pods on the host network, will not be created because
the private IP is seen as the same as the location's endpoint and is
thus skipped because trying to encapsulate traffic to the endpoint would
break communiation with the endpoint itself.

This logic is not correct for nodes that are behind NAT, because the
endpoin that the node reports may not be the same as the discovered
endpoint for the location. Instead, we should compare the private IP
address to the discovered endpoint.

Signed-off-by: Lucas Servén Marín <lserven@gmail.com>
2022-03-30 13:58:29 +02:00
..
backend.go migrate to golang.zx2c4.com/wireguard/wgctrl (#239) 2022-01-30 17:38:45 +01:00
cni.go bumg golang 1.15 -> 1.17 2021-09-30 17:47:47 +02:00
discoverips.go bumg golang 1.15 -> 1.17 2021-09-30 17:47:47 +02:00
graph.go migrate to golang.zx2c4.com/wireguard/wgctrl (#239) 2022-01-30 17:38:45 +01:00
ip_test.go pkg/mesh: correctly check 172.16/12 IP range 2021-03-06 00:50:48 +01:00
ip.go pkg/mesh: correctly check 172.16/12 IP range 2021-03-06 00:50:48 +01:00
mesh_test.go migrate to golang.zx2c4.com/wireguard/wgctrl (#239) 2022-01-30 17:38:45 +01:00
mesh.go Merge pull request #278 from SerialVelocity/fix-peer-node-equality-checking 2022-03-01 21:09:46 +01:00
routes_test.go migrate to golang.zx2c4.com/wireguard/wgctrl (#239) 2022-01-30 17:38:45 +01:00
routes.go pkg/mesh: fix routes for NATed nodes 2022-03-30 13:58:29 +02:00
topology_test.go migrate to golang.zx2c4.com/wireguard/wgctrl (#239) 2022-01-30 17:38:45 +01:00
topology.go migrate to golang.zx2c4.com/wireguard/wgctrl (#239) 2022-01-30 17:38:45 +01:00