Search results

Bundled SPIRE server datastore can deadlock the cluster: its PVC depends on storage whose control plane is gated by the mutual-auth policy SPIRE enforces

Status: Open.

#46392 In cilium/cilium;

· devantler opened on Jun 6, 2026

Gateway API: HTTPRoutes not allowed by HTTP listener are still programmed into insecure listener

feature/k8s-gateway-api

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

Status: Open.

#46359 In cilium/cilium;

· marcofranssen opened on Jun 4, 2026

bgp LoadBalancer DSR mode causes extreme latency (733ms) for cross-node HTTP short connections; switching to SNAT restores performance (8ms)

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and affected area.This issue requires triaging to establish severity and affected area.

Status: Open.

#46357 In cilium/cilium;

· donyhuang opened on Jun 4, 2026

Agent panic (nil deref) in probeForSockDestroy: socket probe callback doesn't check the netlink error before using the socket

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and affected area.This issue requires triaging to establish severity and affected area.

release-blocker/1.20This issue will prevent the release of the next version of Cilium.This issue will prevent the release of the next version of Cilium.

Status: Open.

#46351 In cilium/cilium;

· appletalk opened on Jun 4, 2026

BIG TCP IPv4: GSO/GRO setup fails on VXLAN with high-tso_max_size NICs (mlx5) on kernel 6.12

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and affected area.This issue requires triaging to establish severity and affected area.

Status: Open.

#46337 In cilium/cilium;

· andysharma24 opened on Jun 2, 2026

ztunnel: tear down in-pod redirect rules when the feature is disabled

area/agentCilium agent related.Cilium agent related.

feature/ztunnel

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Enhancement

#46333 In cilium/cilium;

· nddq opened on Jun 2, 2026

Support excluding specific L7 HTTP headers from Hubble flow logs

kind/cfpCilium Feature ProposalCilium Feature Proposal

kind/featureThis introduces new functionality.This introduces new functionality.

Status: Open.

#46326 In cilium/cilium;

· maanti opened on Jun 2, 2026

Azure per-request timeout too low for some large VNETs

area/azureImpacts Azure based IPAM.Impacts Azure based IPAM.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

need-more-infoMore information is required to further debug or fix the issue.More information is required to further debug or fix the issue.

Status: Open.

#46306 In cilium/cilium;

· dougbryant-ant opened on Jun 1, 2026

ctmap: TOCTOU race in batched GC deletes active connections

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

Status: Open.

#46298 In cilium/cilium;

· gyutaeb opened on Jun 1, 2026

toFQDNs: pod-egress DNS proxy redirect dropped (UdpNoPorts) with socket-LB + vxlan tunnel + legacy host-routing (v1.16.5, kernel 5.15)

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/kprAnything related to our kube-proxy replacement.Anything related to our kube-proxy replacement.

area/proxyImpacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and affected area.This issue requires triaging to establish severity and affected area.

Status: Open.

#46284 In cilium/cilium;

· sergiogarciasilva opened on May 31, 2026

CiliumEnvoyConfig with an internal listener fails to apply when --enable-bpf-tproxy=true

area/proxyImpacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and affected area.This issue requires triaging to establish severity and affected area.

Status: Open.

#46275 In cilium/cilium;

· liuxu623 opened on May 31, 2026

IPv6 L2 Announcements unreachable behind Proxmox Linux bridge with multicast snooping

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and affected area.This issue requires triaging to establish severity and affected area.

Status: Open.

#46274 In cilium/cilium;

· yuito-it opened on May 31, 2026