telekom / das-schiff-network-operator

Configure netlink interfaces, simple eBPF filters and FRR using Kubernetes resources.
Apache License 2.0
27 stars 3 forks source link

Use BPF_FIB_LOOKUP_DIRECT for bpf router #81

Closed chdxD1 closed 7 months ago

chdxD1 commented 7 months ago

BPF_FIB_LOOKUP_DIRECT bypasses all ip rule statements and looks directly at the routing table of the interface (if interface is part of a VRF the VRF routing table is used). For some reason not using LOOKUP_DIRECT on 22.04 with hwe Kernel causes Linux to look into the default routing table, causing packet loops and forwarding errors. We can safely switch to LOOKUP_DIRECT because we don't care about routing rules and just want a lookup in the associated VRF.

based on https://github.com/telekom/das-schiff-network-operator/pull/75, should be merged first