types

Oct 10, 2024

Changes in this version

+ const ResourceLogField

Sep 20, 2024

Changes in this version

type ServerParameters

+ StateNotification StateNotificationCh

+ type StateNotificationCh chan struct

Jul 24, 2024 GO-2024-3071 +1 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

Changes in this version

+ const AdvertTypeLogField

+ const BGPNodeConfigLogField

+ const FamilyLogField

+ const InstanceLogField

+ const ListenPortLogField

+ const LocalASNLogField

+ const PathLogField

+ const PeerLogField

+ const PodIPPoolLogField

+ const PolicyLogField

+ const PrefixLogField

+ const ReconcilerLogField

+ const RouterIDLogField

+ type FakeRouter struct

+ func (f *FakeRouter) AddNeighbor(ctx context.Context, n NeighborRequest) error

+ func (f *FakeRouter) AddRoutePolicy(ctx context.Context, p RoutePolicyRequest) error

+ func (f *FakeRouter) AdvertisePath(ctx context.Context, p PathRequest) (PathResponse, error)

+ func (f *FakeRouter) GetBGP(ctx context.Context) (GetBGPResponse, error)

+ func (f *FakeRouter) GetPeerState(ctx context.Context) (GetPeerStateResponse, error)

+ func (f *FakeRouter) GetRoutePolicies(ctx context.Context) (*GetRoutePoliciesResponse, error)

+ func (f *FakeRouter) GetRoutes(ctx context.Context, r *GetRoutesRequest) (*GetRoutesResponse, error)

+ func (f *FakeRouter) RemoveNeighbor(ctx context.Context, n NeighborRequest) error

+ func (f *FakeRouter) RemoveRoutePolicy(ctx context.Context, p RoutePolicyRequest) error

+ func (f *FakeRouter) ResetNeighbor(ctx context.Context, r ResetNeighborRequest) error

+ func (f *FakeRouter) Stop()

+ func (f *FakeRouter) UpdateNeighbor(ctx context.Context, n NeighborRequest) error

+ func (f *FakeRouter) WithdrawPath(ctx context.Context, p PathRequest) error

type Family

+ func ToAgentFamily(fam v2alpha1.CiliumBGPFamily) Family

+ func (f Family) String() string

type NeighborRequest

+ Peer *v2alpha1api.CiliumBGPNodePeer

+ PeerConfig *v2alpha1api.CiliumBGPPeerConfigSpec

type Path

+ Family Family

type RoutePolicyRequest

+ DefaultExportAction RoutePolicyAction

type Router

+ func NewFakeRouter() Router

Sep 20, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Aug 12, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 11, 2024 GO-2024-3071 +3 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jun 10, 2024 GO-2024-3071 +3 more

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

May 10, 2024 GO-2024-2922 +4 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Apr 11, 2024 GO-2024-2922 +4 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 26, 2024 GO-2024-2922 +4 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 13, 2024 GO-2024-2666 +5 more

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Feb 14, 2024 GO-2024-2653 +8 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jan 31, 2024 GO-2024-2653 +8 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3071: Gateway API route matching order contradicts specification in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3074: Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Changes in this version

+ var TestCommonRoutePolicies = []struct{ ... }

type Afi

+ func ParseAfi(s string) Afi

+ type GetRoutePoliciesResponse struct

+ Policies []*RoutePolicy

type NeighborRequest

+ Password string

+ type PolicyPrefixMatchList []*RoutePolicyPrefixMatch

+ func (l PolicyPrefixMatchList) Less(i, j int) bool

+ type ResetNeighborRequest struct

+ AdminCommunication string

+ PeerAddress string

+ Soft bool

+ SoftResetDirection SoftResetDirection

+ type RoutePolicy struct

+ Name string

+ Statements []*RoutePolicyStatement

+ Type RoutePolicyType

+ func (in *RoutePolicy) DeepEqual(other *RoutePolicy) bool

+ type RoutePolicyAction int

+ const RoutePolicyActionAccept

+ const RoutePolicyActionNone

+ const RoutePolicyActionReject

+ type RoutePolicyActions struct

+ AddCommunities []string

+ AddLargeCommunities []string

+ RouteAction RoutePolicyAction

+ SetLocalPreference *int64

+ func (in *RoutePolicyActions) DeepEqual(other *RoutePolicyActions) bool

+ type RoutePolicyConditions struct

+ MatchNeighbors []string

+ MatchPrefixes []*RoutePolicyPrefixMatch

+ func (in *RoutePolicyConditions) DeepEqual(other *RoutePolicyConditions) bool

+ type RoutePolicyPrefixMatch struct

+ CIDR netip.Prefix

+ PrefixLenMax int

+ PrefixLenMin int

+ func (m *RoutePolicyPrefixMatch) DeepEqual(other *RoutePolicyPrefixMatch) bool

+ type RoutePolicyRequest struct

+ Policy *RoutePolicy

+ type RoutePolicyStatement struct

+ Actions RoutePolicyActions

+ Conditions RoutePolicyConditions

+ func (in *RoutePolicyStatement) DeepEqual(other *RoutePolicyStatement) bool

+ type RoutePolicyType int

+ const RoutePolicyTypeExport

+ const RoutePolicyTypeImport

type Router

+ AddRoutePolicy func(ctx context.Context, p RoutePolicyRequest) error

+ GetRoutePolicies func(ctx context.Context) (*GetRoutePoliciesResponse, error)

+ RemoveRoutePolicy func(ctx context.Context, p RoutePolicyRequest) error

+ ResetNeighbor func(ctx context.Context, r ResetNeighborRequest) error

type Safi

+ func ParseSafi(s string) Safi

+ type SoftResetDirection int

+ const SoftResetDirectionBoth

+ const SoftResetDirectionIn

+ const SoftResetDirectionOut

type TableType

+ func ParseTableType(s string) TableType

Sep 20, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Aug 12, 2024 GO-2024-3208

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 11, 2024 GO-2024-3072 +1 more

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jun 10, 2024 GO-2024-3072 +1 more

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

May 10, 2024 GO-2024-2922 +2 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Apr 11, 2024 GO-2024-2922 +2 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Mar 26, 2024 GO-2024-2922 +2 more

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Changes in this version

+ func CanAdvertisePodCIDR(ipam string) bool

Mar 13, 2024 GO-2024-2666 +3 more

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Feb 13, 2024 GO-2024-2653 +6 more

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jan 18, 2024 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Changes in this version

type Path

+ GoBGPPathUUID []byte

Dec 11, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Nov 10, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Oct 18, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Sep 11, 2023 GO-2024-2568 +8 more

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Aug 11, 2023 GO-2023-2078 +11 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Jul 27, 2023 GO-2023-2078 +11 more

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

  GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

  GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

  GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

Changes in this version

+ type Advertisement struct

+ GoBGPPathUUID []byte

+ Prefix netip.Prefix

type PathRequest

+ Advert Advertisement

type PathResponse

+ Advert Advertisement

Jul 17, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 28, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 16, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 1, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jul 17, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Jun 28, 2023 GO-2024-3072

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Aug 31, 2023 GO-2022-0457 +10 more

  GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

  GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

  GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

  GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

  GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

  GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

  GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

  GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

  GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

  GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

  GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

Changes in this version

+ var CommonPaths = []struct{ ... }

+ type Afi uint32

+ const AfiIPv4

+ const AfiIPv6

+ const AfiL2VPN

+ const AfiLS

+ const AfiOpaque

+ const AfiUnknown

+ func (a *Afi) FromString(s string) error

+ func (a Afi) String() string

+ type BGPGlobal struct

+ ASN uint32

+ ListenPort int32

+ RouteSelectionOptions *RouteSelectionOptions

+ RouterID string

+ type Family struct

+ Afi Afi

+ Safi Safi

+ type GetBGPResponse struct

+ Global BGPGlobal

+ type GetPeerStateResponse struct

+ Peers []*models.BgpPeer

+ type GetRoutesRequest struct

+ Family Family

+ Neighbor netip.Addr

+ TableType TableType

+ type GetRoutesResponse struct

+ Routes []*Route

+ type NeighborRequest struct

+ Neighbor *v2alpha1api.CiliumBGPNeighbor

+ VR *v2alpha1api.CiliumBGPVirtualRouter

+ type Path struct

+ AgeNanoseconds int64

+ Best bool

+ NLRI bgp.AddrPrefixInterface

+ PathAttributes []bgp.PathAttributeInterface

+ UUID []byte

+ func NewPathForPrefix(prefix netip.Prefix) (path *Path)

+ type PathRequest struct

+ Path *Path

+ type PathResponse struct

+ Path *Path

+ type Route struct

+ Paths []*Path

+ Prefix string

+ type RouteSelectionOptions struct

+ AdvertiseInactiveRoutes bool

+ type Router interface

+ AddNeighbor func(ctx context.Context, n NeighborRequest) error

+ AdvertisePath func(ctx context.Context, p PathRequest) (PathResponse, error)

+ GetBGP func(ctx context.Context) (GetBGPResponse, error)

+ GetPeerState func(ctx context.Context) (GetPeerStateResponse, error)

+ GetRoutes func(ctx context.Context, r *GetRoutesRequest) (*GetRoutesResponse, error)

+ RemoveNeighbor func(ctx context.Context, n NeighborRequest) error

+ Stop func()

+ UpdateNeighbor func(ctx context.Context, n NeighborRequest) error

+ WithdrawPath func(ctx context.Context, p PathRequest) error

+ type Safi uint32

+ const SafiEncapsulation

+ const SafiEvpn

+ const SafiFlowSpecUnicast

+ const SafiFlowSpecVpn

+ const SafiKeyValue

+ const SafiLs

+ const SafiMplsLabel

+ const SafiMplsVpn

+ const SafiMplsVpnMulticast

+ const SafiMulticast

+ const SafiMup

+ const SafiRouteTargetConstraints

+ const SafiSrPolicy

+ const SafiUnicast

+ const SafiUnknown

+ const SafiVpls

+ func (s *Safi) FromString(safi string) error

+ func (s Safi) String() string

+ type ServerParameters struct

+ Global BGPGlobal

+ type SessionState uint32

+ const SessionActive

+ const SessionConnect

+ const SessionEstablished

+ const SessionIdle

+ const SessionOpenConfirm

+ const SessionOpenSent

+ const SessionUnknown

+ func (s SessionState) String() string

+ type TableType int

+ const TableTypeAdjRIBIn

+ const TableTypeAdjRIBOut

+ const TableTypeLocRIB

+ const TableTypeUnknown