Search results

DNS disruption when using node-local-dns with local redirect policy

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#43454 In cilium/cilium;

· ryan-vance-cresta opened on Dec 19, 2025

UDP fragmentation when DNS Proxy + WireGuard

affects/v1.15This issue affects v1.15 branchThis issue affects v1.15 branch

affects/v1.16This issue affects v1.16 branchThis issue affects v1.16 branch

affects/v1.17This issue affects v1.17 branchThis issue affects v1.17 branch

affects/v1.18This issue affects v1.18 branchThis issue affects v1.18 branch

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.Impacts encryption support such as IPSec, WireGuard, or kTLS.

area/proxyImpacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.

feature/wireguardRelates to Cilium's Wireguard featureRelates to Cilium's Wireguard feature

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

Status: Open.

#43431 In cilium/cilium;

· smagnani96 opened on Dec 18, 2025

CI: GKE: IPsec + overlay routing is broken

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

ci/flakeThis is a known failure that occurs in the tree. Please investigate me!This is a known failure that occurs in the tree. Please investigate me!

feature/ipsecRelates to Cilium's IPsec featureRelates to Cilium's IPsec feature

integration/cloudRelated to integration with cloud environments such as AKS, EKS, GKE, etc.Related to integration with cloud environments such as AKS, EKS, GKE, etc.

Status: Open.

#43410 In cilium/cilium;

· julianwiedmann opened on Dec 17, 2025

CI: BPF: add netns-aware testing

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loaderImpacts the loading of BPF programs into the kernel.Impacts the loading of BPF programs into the kernel.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Enhancement

#43406 In cilium/cilium;

· julianwiedmann opened on Dec 17, 2025

Cluster-IP can not be access via BGP with enabled kube proxy

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#43395 In cilium/cilium;

· jeschero opened on Dec 17, 2025

cli: Add coverage for HostFw + WireGuard + Native

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

area/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.Impacts encryption support such as IPSec, WireGuard, or kTLS.

area/host-firewallImpacts the host firewall or the host endpoint.Impacts the host firewall or the host endpoint.

feature/wireguardRelates to Cilium's Wireguard featureRelates to Cilium's Wireguard feature

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

#43374 In cilium/cilium;

· smagnani96 opened on Dec 16, 2025

datapath: NAT-info-in-CT follow-ups

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/snatRelates to SNAT or Masquerading of trafficRelates to SNAT or Masquerading of traffic

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

kind/metaMeta-task for co-ordination.Meta-task for co-ordination.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Enhancement

#43370 In cilium/cilium;

· julianwiedmann opened on Dec 16, 2025

CFP: How to increase request body size limit for specific HTTPRoute

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

Status: Open.

#43359 In cilium/cilium;

· SnoozeFreddo opened on Dec 16, 2025

When you swap ports between pods on the same LB IP, Cilium does NOT push the update into BPF maps. The LB keeps sending traffic to the old pod. Only restarting the Cilium agent refreshes the maps.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#43358 In cilium/cilium;

· vijaypal-palc opened on Dec 16, 2025

Race condition in the 'restart-unmanaged-pods' controller resulting in deletion of Succeeded and Failed pods matching the PodRestartSelector

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#43353 In cilium/cilium;

· ben-bertrands-hs opened on Dec 15, 2025

Remove or unexport <code>bpf.Map.Close()</code>

area/agentCilium agent related.Cilium agent related.

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

Status: Open.

#43343 In cilium/cilium;

· ti-mo opened on Dec 15, 2025

Cilium's VXLAN mode is very sensitive to packet fragmentation and out-of-order issues. Poor network quality can easily cause out-of-order packets, which in turn can lead to packet loss. Are there any optimizations for this?

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

Status: Open.

#43341 In cilium/cilium;

· zhenliangliang opened on Dec 15, 2025