Offload authorization may fail after Kmesh restart

[YaoZengzeng]

What happened:

I deployed Kmesh in kind, and then I restarted the machine where kind was located.

Then I followed this doc (https://kmesh.net/en/docs/userguide/tcp_authorization/) to conduct offload authorization related tests.

I deployed the ALLOW rule. For the allowed source IP, it can be executed normally, but for other IPs, sometimes it passed and sometimes failed.

root@dev:~# k exec sleep-5577c64d7c-k7n5t  -- curl http://httpbin:8000/headers 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    78  100    78    0     0  26174      0 --:--:-- --:--:-- --:--:-- 39000
{"headers":{"Accept":"*/*","Host":"httpbin:8000","User-Agent":"curl/8.11.1"}}
root@dev:~# k exec sleep-5577c64d7c-k7n5t  -- curl http://httpbin:8000/headers 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
curl: (52) Empty reply from server
command terminated with exit code 52
root@dev:~# k exec sleep-5577c64d7c-k7n5t  -- curl http://httpbin:8000/headers 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    78  100    78    0     0  21201      0 --:--:-- --:--:-- --:--:-- 26000
{"headers":{"Accept":"*/*","Host":"httpbin:8000","User-Agent":"curl/8.11.1"}}
root@dev:~# k exec sleep-5577c64d7c-k7n5t  -- curl http://httpbin:8000/headers 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    78  100    78    0     0  22968      0 --:--:-- --:--:-- --:--:-- 26000
{"headers":{"Accept":"*/*","Host":"httpbin:8000","User-Agent":"curl/8.11.1"}}
root@dev:~# k exec sleep-5577c64d7c-k7n5t  -- curl http://httpbin:8000/headers 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    78  100    78    0     0  26298      0 --:--:-- --:--:-- --:--:-- 39000
{"headers":{"Accept":"*/*","Host":"httpbin:8000","User-Agent":"curl/8.11.1"}}
root@dev:~# k exec sleep-5577c64d7c-k7n5t  -- curl http://httpbin:8000/headers 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:02 --:--:--     0
curl: (52) Empty reply from server
command terminated with exit code 52

What you expected to happen:

Hope it works as expected.

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

• Kmesh version:
• Kmesh mode(kmesh has Kernel-Native Mode and Duel-Engine Mode):
• Istio version:
• Kernel version:
• Others: