Support WireGuard with IPv6 Underlay #40051
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
d10cb31 to
e087a85
Compare
smagnani96
approved these changes
Jun 17, 2025
viktor-kurchenko
approved these changes
Jun 20, 2025
gentoo-root
approved these changes
Jun 20, 2025
youngnick
approved these changes
Jun 30, 2025
Thanks to our recent support of IPv6 underlays, IPv6 packets are not always encapsulated in IPv4 anymore. Hence, we need to send encapsulated traffic to the WireGuard interface regardless of its IP family. Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
The previous commit fixed our datapath to allow VXLAN/GENEVE-over-IPv6 to be sent to the WireGuard interface, so WireGuard should now be allowed with IPv6 underlay. Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
When running in an IPv6-only cluster in tunneling mode, the node encryption test fails because the tcpdump filter is incorrect. It goes "... and host and host " leaving the host IP addresses empty. This commit fixes it by supporting all cases of IPv4-only, IPv6-only, and dual-stack. Fixes: f5bd938 ("connectivity: Add special case to test WG w/ tunneling") Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>
e087a85 to
95a3000
Compare
|
/test |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
First two commits add support for WireGuard encryption with IPv6 underlay. Last two commits cover it in CI.