Skip to content

Conversation

@chez-shanpu
Copy link
Contributor

@chez-shanpu chez-shanpu commented Sep 1, 2025

Follow up #345

@chez-shanpu chez-shanpu force-pushed the feat-nftables branch 2 times, most recently from b09cab5 to 1d39829 Compare September 8, 2025 05:49
Till0196 and others added 16 commits September 8, 2025 15:50
Add nftables support for egress NAT functionality

temp: enable CI for this branch

Add nftables usage logging to coil-egress initialization

Improve enable-nft flag description to clarify NAT backend choice

Add nftables manifest

Add coil nftables test

Add nftables to Dockerfile

Remove iptables CHECKSUM rules from FoU tunnel initialization

add mac support

Add Mac support to setup-echotest

Add support multi platform

Add EnableNFT field to Egress CRD

Add nftables E2E test support

Remove unnecessary kube-proxy double NAT workaround

Add counter expressions to nftables rules in egress

add cross-platform support for yq binary download

Fix crd manifest generation in Makefile

Update generated CRDs to controller-gen v0.18.0

Run garbage collection immediately without waiting for first tick

refactor: use timer instead of ticker in garbage collector

ci: remove support-nftables branch trigger
Signed-off-by: Tomoki Sugiura <tomoki-sugiura@cybozu.co.jp>
Signed-off-by: Tomoki Sugiura <tomoki-sugiura@cybozu.co.jp>
@chez-shanpu chez-shanpu marked this pull request as ready for review September 17, 2025 08:27
@chez-shanpu chez-shanpu changed the title WIP Feat nftables Feat nftables Sep 18, 2025
@terassyi
Copy link
Contributor

@chez-shanpu

I think we need add following contents about this changes.

  • added flags (egress-controller and coild)
  • in the future, this flag value will be set nftables as default, and removed

Signed-off-by: Tomoki Sugiura <tomoki-sugiura@cybozu.co.jp>
@chez-shanpu
Copy link
Contributor Author

@terassyi

  • added flags (egress-controller and coild)

It seems egress-controller already has a backend flag.
About coild I don't think we have to to as the comment #346 (comment)

@terassyi
Copy link
Contributor

@chez-shanpu
Finally, please update some documents for this.

Signed-off-by: Tomoki Sugiura <tomoki-sugiura@cybozu.co.jp>
Copy link
Contributor

@terassyi terassyi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@chez-shanpu chez-shanpu merged commit 9808a2a into main Oct 17, 2025
157 of 164 checks passed
@chez-shanpu chez-shanpu deleted the feat-nftables branch October 17, 2025 07:56
@chez-shanpu
Copy link
Contributor Author

@Till0196 Finally, nftables feature is merged! Thank you for your contribution!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants