Follow-ups for #23165:

• Add support for the ip-masq-agent

  • PR: ipmasq: Add support for ip-masq-agent with IPv6 #23219

• Fix ip-masq-agent

  • Issue: ip-masq-agent broken for IPv4-only #26262
  • PR: Fixes for ip-masq-agent #26435

• Look into the Host Firewall code and figure out how to run it with BPF IPv6 masquerading. What happens if we have masquerading enable for both IP versions? For one IP version only?

  • Context: Implement BPF-based masquerading for IPv6 (rebased) #23165 (comment)
  • After addressing it we want to lift the restriction on using BPF IPv6 Masquerading and Host Firewall in daemon/cmd/daemon_main.go and in the description of the conformance-e2e workflow
  • PR: Support host firewall with IPv6 BPF masquerading #26323

• Rework snat_v6_needed() in bpf/lib/nat.h to bring it closer to snat_v4_prepare_state()

  • Context: Implement BPF-based masquerading for IPv6 (rebased) #23165 (comment)
  • PR: bpf: nat: Make snat_v6_needed() get on par with snat_v4_prepare_state() #26236

• Rework error handling from ipv6_hdrlen() and ct_is_reply6() in snat_v6_needed(), and ct_is_reply4() in snat_v4_prepare_state()

  • Context: Implement BPF-based masquerading for IPv6 (rebased) #23165 (comment)
  • PR: bpf: nat: Handle errors from snat_v(4|6)_prepare_state() #26501

• Add BPF integration tests (bpf/tests/) for IPv6 Masquerading

• Enable IPv6 masquerading tests in datapath_configuration.go with KPR/BPF masquerading

  • PR: test: Enable IPv6 datapath_configuration tests with BPF masquerading #26500

• Lift BPF host routing for per-endpoint-routes wrt IPv6 support (for 1.14)

  • PR: cilium: enable bpf host routing with per endpoint routes for IPv6 as well #26205

• IPv6 BIG TCP documentation: fix up ipv6 masquerade=false.. can be removed now

  • PR: cilium: IPv4 BIG TCP support #26172

• Once the ip-masq-agent fixes are merged, find a way to move the new test away from Ginkgo

• Mark IPv6 BPF Masquerading as Beta in documentation

  • PR: docs: Mark IPv6 BPF masquerading as beta #26499

• Investigate and fix BGP Control Plane + Native Routing + LB-IPAM + BPF masquarade results in unable to accept IPv6 traffic on LoadBalancer (1.14.0-rc.0) #26816

  • Likely not related

Now that the 1.15 development cycle has started:

• Lift restriction from d6f4c53

  • PR: update upgrade tests to test from v1.14.0 to main #27114

• Get out of Beta

To investigate:

• Testing Follow-ups for BPF-based IPv6 Masquerading #26074 (comment)