christarazi

#include <linux/skbuff.h>
#include <net/flow.h>
#include <net/xfrm.h>

/*
 * This script was used to debug https://github.com/cilium/cilium/issues/15826
 * and create https://github.com/cilium/cilium/pull/16057.
 *
 * The script will attach to functions in the XFRM subsystem around XFRM
 * policy lookup and evaluation. The probes are defined in the order of their

christarazi

#!/bin/bash

set -eu

pod="${1}"   # Cilium pod name (e.g. cilium-2341d)
op="${2}"    # iptables operation (e.g. append or delete)
etcd="${3}"  # Etcd node IP to apply iptable rules to (e.g. hostname or IP addr)

if [[ "${op}" == "append" ]]; then
    op="-A"

christarazi

Keybase proof

I hereby claim:

• I am christarazi on github.
• I am christarazi (https://keybase.io/christarazi) on keybase.
• I have a public key ASCz8T4IiWb3Licm-zlD1DpUomIzZJlNFwxeb2pbfLM1dwo

To claim this, I am signing this object: