Vincent Li

not familiar with this, maybe TPROXY only requires port to redirect traffic? https://www.kernel.org/doc/Documentation/networking/tproxy.txt, see "2. Redirecting traffic"

not sure if related but interesting https://cilium.io/blog/2020/06/22/cilium-18#ebpf-based-tproxy-replacement and LPC2019 - Scaling container policy management with kernel features https://youtu.be/b-Tdn_TOoS8 start from 22:20

@wangfakang the diagram attached describe the current working flow of cilium envoy proxy, in regard to the src ip after envoy proxying, the src ip is ip on `cilium_host`, so...

> client pod and server pod on different node，client is the most possible request server with 64 connections. platform : k8s v1.20.15 kernel : Linux master 5.4.0-107-generic #121-Ubuntu SMP Thu...

@FanHTao I happen to have envoy enabled in Cilium, could you describe what load test tool you used in your client test pod? what steps you performed in the load...

@FanHTao nice! did you file issue or send PR to https://github.com/cilium/proxy?

@brb @ti-mo @joestringer I think this PR is ready for review :)

Hi @brb I checked those, the error did not occur from previous run, only the last push changes which does not change anything to `*test.go`. ``` CHECK contrib/scripts/check-missing-tags-in-tests.sh Test file(s)...

or could be the pkg/alignchecker/testdata/bpf_foo.o binary submitted which now include BTF info to be treated as test file that does not has `tag privileged_tests or !privileged_tests tags` ? seems unlikely...

@brb @ti-mo gently ping, I think both of you are familiar with this area, could you give some feedback on this PR ? thanks! :)