Affected by GO-2023-2078 and 6 other vulnerabilities

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

maglev

package

v1.12.13 Latest Latest Go to latest Published: Aug 14, 2023 License: Apache-2.0 Imports: 7 Imported by: 3

Details

View Source

const (
	DefaultTableSize = 16381

	// seed=$(head -c12 /dev/urandom | base64 -w0)
	DefaultHashSeed = "JLfvgnHc2kaSUFaI"
)

View Source

var (
	SeedJhash0 uint32
	SeedJhash1 uint32
)

func GetLookupTable(backends []string, m uint64) []int

GetLookupTable returns the Maglev lookup table of the size "m" for the given backends. The lookup table contains the indices of the given backends.

func Init(seed string, m uint64) error

Init initializes the Maglev subsystem with the seed and the backend table size (m).

This section is empty.