projectcalico / calico

Cloud native networking and network security
https://docs.tigera.io/calico/latest/about/
Apache License 2.0
6.04k stars 1.35k forks source link

Use longer (and thus more descriptive) nftables chain names #9528

Open caseydavenport opened 3 hours ago

caseydavenport commented 3 hours ago

Description

nftables supports longer chain names than iptables. This means we don't need to truncate / hash chain names as much in nftables mode.

Until now, we've been enforcing the same character length of 28. This PR bumps it up to 256 - which should result in much more human readable chain names.

Related issues/PRs

Todos

Release Note

TBD

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

Every PR needs one release-note-* label.

Other optional labels: