cilium
a8fc017e - option: Add --dnsproxy-enable-transparent-mode (default false)

Commit
1 year ago
option: Add --dnsproxy-enable-transparent-mode (default false) [ upstream commit 35162d1fb57c6aaeb8a57d3ec866625f1a2838b5 ] Add dnsproxy-enable-transparent-mode option to enable DNS Proxy transparent mode. If 'true', Cilium DNS proxy will use the original source address of the source pod in the forwarded DNS requests. Local host sources and destinations are excepted due to networking stack compatibility reasons, but the use of the original address is typically not significant for node local traffic. Defaults to 'false' for backwards compatibility for upgrades, or to 'true' for Cilium 1.12 onwards. Transparent mode is not compatible with CNI chaning modes, so if CNI chaining is used, transparent mode will not be set unless explicitly set with helm value 'dnsProxy.enableTransparentMode=true'. Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
Author
Committer
Parents
  • Documentation/cmdref
    • File
      cilium-agent.md
  • daemon/cmd
    • File
      daemon_main.go
  • install/kubernetes/cilium
    • templates
      • File
        cilium-configmap.yaml
    • File
      values.yaml
    • values.yaml.tmpl
  • pkg
    • defaults
      • File
        defaults.go
    • fqdn/dnsproxy
      • File
        proxy.go
    • option
      • File
        config.go