Skip to content

Route through explicitly selected backends - #844

Closed
scotwells wants to merge 1 commit into
mainfrom
codex/nlb-backend-addresses-galactic
Closed

scotwells wants to merge 1 commit into
mainfrom
codex/nlb-backend-addresses-galactic

Conversation

@scotwells

Copy link
Copy Markdown
Contributor

Summary

Honor NetworkRule.spec.backendAddresses on both gateway and backend nodes. The gateway routes only to selected, VPC-owned addresses; removing an address also removes its backend binding. An explicit empty list withdraws the rule's VIP.

Depends on datum-cloud/network#33. This is a one-VIP DSR capability; two VIPs cannot share the same backend address, port, and protocol until the return path preserves VIP identity.

Verification

  • Linux: go test ./internal/controller -count=1
  • task ci on macOS stops during Linux eBPF generation because linux/bpf.h is unavailable; the focused Linux controller suite passed in Docker.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants