CheckOrMountCgrpFS this checks if the cilium cgroup2 root mount point is
mounted and if not mounts it. If mapRoot is "" it will mount the default
location. It is harmless to have multiple cgroupv2 root mounts so unlike
BPFFS case we simply mount at the cilium default regardless if the system
has another mount created by systemd or otherwise.
SkmsgEnable will compile and attach the SK_MSG programs to the
sockmap. After this all sockets added to the cilium_sock_ops will
have sendmsg/sendfile calls running through BPF program.
SockmapDisable will detach any sockmap programs from cgroups then "unload"
all the programs and maps associated with it. Here "unload" just means
deleting the file associated with the map.
SockmapEnable will compile sockops programs and attach the sockops programs
to the cgroup. After this all TCP connect events will be filtered by a BPF
sockops program.
Affected by 
Documentation
¶
Source Files