Fixed
- Remove unexpected
altname
after renaming interface to avoid failure when moving host interface to OVS bridge. (#6321, @gran-vmv) - Do not try to update type of Secret in selfSignedCertProvider to avoid self-signed certificate update failure. (#6205, @tnqn)
- Install multicast related iptables rules only on IPv4 chains to fix the antrea-agent initialization failure occurring when the Multicast feature is enabled in dual-stack clusters. (#6123, @wenyingd)
- Fix a single rule deletion bug for NodePortLocal on Linux and improve robustness of NPL rule cleanup. (#6284, @antoninbas)
- Fix a bug causing AntreaProxy not to delete stale UDP conntrack entries for the virtual NodePort DNAT IP. (#6379, @hongliangl)
- Improve stale UDP conntrack entries deletion accuracy in AntreaProxy. (#6193, @hongliangl)
- Fix antrea-agent crash when enabling proxyAll in networkPolicyOnly mode. (#6259, @hongliangl)
- Fix a bug preventing local traffic from being identified in networkPolicyOnly mode. (#6251, @hongliangl)
- Avoid generating defunct process when starting Suricata, the L7 ANP engine. (#6366, @hongliangl)