Enabled Cilium eBPF host-routing

Signed-off-by: Philip Schmid <phisch@cisco.com>
isovalent · Jan 10, 2025 · d6d582d · d6d582d
1 parent 4c86753
commit d6d582d
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/example/03-cilium-values.yaml b/example/03-cilium-values.yaml
@@ -30,6 +30,14 @@ kubeProxyReplacement: "true"
 k8sServiceHost: ${KUBE_APISERVER_HOST}
 k8sServicePort: ${KUBE_APISERVER_PORT}
 
+# BPF optimizations
+bpf:
+  masquerade: true
+  # Legacy host routing is required when Talos' forwardKubeDNSToHost is used
+  # together with Cilium's eBPF host-routing.
+  # See https://docs.cilium.io/en/latest/operations/performance/tuning/#ebpf-host-routing
+  hostLegacyRouting: true
+
 # -- Monitoring and Flow Visibility
 
 # Enable Cilium Hubble to gain visibility