From 329981ea1ad625604f75c978070bacc68ece75ac Mon Sep 17 00:00:00 2001 From: Vegard Hagen Date: Fri, 14 Nov 2025 21:29:29 +0100 Subject: [PATCH] fix(cilium): disable bpf.hostLegacyRouting It's no longer a requirement for Talos Enable bpf.masquerade https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routing Signed-off-by: Vegard Hagen --- k8s/infra/network/cilium/values.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/k8s/infra/network/cilium/values.yaml b/k8s/infra/network/cilium/values.yaml index 78493dc..28a623b 100644 --- a/k8s/infra/network/cilium/values.yaml +++ b/k8s/infra/network/cilium/values.yaml @@ -18,10 +18,9 @@ cgroup: enabled: false hostRoot: /sys/fs/cgroup -# https://www.talos.dev/latest/talos-guides/network/host-dns/#forwarding-kube-dns-to-host-dns # https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routing bpf: - hostLegacyRouting: true + masquerade: true # https://docs.cilium.io/en/stable/network/concepts/ipam/ ipam: