From 0a8b88aff430b13e9f33dc2e60315723f4aab7fe Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Mon, 9 Dec 2024 12:55:47 +0800 Subject: [PATCH] fix(cilium): full BPF routing --- .../_networking/cilium/app/config/biohazard/helm-values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml b/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml index 9c05f182..5f244168 100644 --- a/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml +++ b/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml @@ -56,7 +56,7 @@ bpf: masquerade: true hostLegacyRouting: true # so pods can use the normal Linux routing table from the host tproxy: true # L7 netpols stuff - preallocateMaps: true # reduce latency, increased memory usage + # preallocateMaps: true # reduce latency, increased memory usage policyMapMax: 40960 # 2.5x default, Increase Cilium map sizes due to amount of netpols and identities, when BPF map pressure hits 100 endpoint creation starts failing, max dynamic size ratio doesn't increase this enableTCX: true # testing if it causes Cilium 1.16 BGP LB timeouts l7Proxy: true # enables L7 netpols (including DNS) via proxy, e.g. Envoy