UT to drop and allow packets based on src IP
@@ -599,6 +599,7 @@ static CALI_BPF_INLINE int calico_tc(struct __sk_buff *skb)
state.tun_ip != 0, &nat_lvl1_drop);
if (nat_lvl1_drop) {
+ CALI_DEBUG("Dropping packet at level1 nat lookup\n");
goto deny;
}
if (nat_dest != NULL) {
@@ -686,7 +687,7 @@ static CALI_BPF_INLINE int calico_tc(struct __sk_buff *skb)
*/
map_state->pol_rc = CALI_POL_ALLOW;
bpf_tail_call(skb, &cali_jump, 1);
- CALI_DEBUG("Tail call to epilogue program failed: ALLOW\n");
+ CALI_DEBUG(" sridhar Tail call to epilogue program failed: ALLOW\n");
return TC_ACT_UNSPEC;
}
