Affected by GO-2023-1862 and 9 other vulnerabilities

GO-2023-1862: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-3635: In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

ipmasq

package

v1.13.2 Latest Latest Go to latest Published: Apr 17, 2023 License: Apache-2.0 Imports: 11 Imported by: 1

Details

This section is empty.

This section is empty.

This section is empty.

type IPMasqAgent struct {
	// contains filtered or unexported fields
}

IPMasqAgent represents a state of the ip-masq-agent

func NewIPMasqAgent(configPath string) (*IPMasqAgent, error)

func (a *IPMasqAgent) Start()

Start starts the ip-masq-agent goroutine which tracks the config file and updates the BPF map accordingly.

func (a *IPMasqAgent) Stop()

Stop stops the ip-masq-agent goroutine and the watcher.

func (a *IPMasqAgent) Update() error

Update updates the ipmasq BPF map entries with ones from the config file.

type IPMasqMap interface {
	Update(cidr net.IPNet) error
	Delete(cidr net.IPNet) error
	Dump() ([]net.IPNet, error)
}

IPMasqMap is an interface describing methods for manipulating an ipmasq map

type Ipnet net.IPNet

ipnet is a wrapper type for net.IPNet to enable de-serialization of CIDRs

func (c *Ipnet) UnmarshalJSON(json []byte) error