Skip to content

Commit 10e2c78

Browse files
authored
ci: add Dependencies to README (#3827)
1 parent c89ce01 commit 10e2c78

File tree

1 file changed

+14
-6
lines changed

1 file changed

+14
-6
lines changed

bpf-prog/ipv6-hp-bpf/README.md

Lines changed: 14 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,17 @@
44

55
## Description
66

7-
The goal of this bpf program is to fix the issue described [here](https://github.com/cilium/cilium/issues/31326). It includes both egress and ingress TC programs. These programs are meant to replace the nftable rules since they don't work on cilium clusters.
7+
The goal of this bpf program is to fix the issue described [here](https://github.com/cilium/cilium/issues/31326). It includes both egress and ingress TC programs. These programs are meant to replace the nftable rules since they don't work on cilium clusters.
88
The egress bpf code converts the destination IPv6 of the packet from global unicast to link local, and ingress converts the source IPv6 from link local to global unicast.
99

10+
## Dependencies
11+
12+
Leverage the below make recipe to install the required libraries.
13+
14+
```bash
15+
make ipv6-hp-bpf-lib
16+
```
17+
1018
## Usage
1119

1220
Follow the steps below to compile the program and install it onto your node:
@@ -20,9 +28,9 @@ Follow the steps below to compile the program and install it onto your node:
2028

2129
3. Remove the nftable rules for ipv6 with the following commands:
2230
```bash
23-
nft delete chain ip6 azureSLBProbe postrouting
24-
nft delete chain ip6 azureSLBProbe prerouting
25-
nft -n list table ip6 azureSLBProbe
31+
nft delete chain ip6 azureSLBProbe postrouting
32+
nft delete chain ip6 azureSLBProbe prerouting
33+
nft -n list table ip6 azureSLBProbe
2634
```
2735

2836
4. Start the program with:
@@ -43,7 +51,7 @@ To copy to the node you need to create a node-shell instance
4351
kubectl cp egress.o nsenter-xxxxx:<path-in-node>
4452
```
4553
46-
Since this is for cilium clusters, cilium already creates a qdisc on eth0 of type clsact (which allows both ingress and egress filters to be attached). If cilium is not installed, you would have to create the qdisc on your own by doing the following:
54+
Since this is for cilium clusters, cilium already creates a qdisc on eth0 of type clsact (which allows both ingress and egress filters to be attached). If cilium is not installed, you would have to create the qdisc on your own by doing the following:
4755
```bash
4856
tc qdisc add dev eth0 clsact
4957
```
@@ -56,4 +64,4 @@ tc filter add dev eth0 egress prio 1 bpf da obj egress.o sec classifier
5664
## Verify the filter is attached
5765
```bash
5866
tc filter show dev eth0 egress
59-
```
67+
```

0 commit comments

Comments
 (0)