This release addresses performance issues related to network policy enforcement. Network policy enforcement is significanly faster. Also support for DSR(Direct server return) functionality has been expanded to any CRI's in additions to Docker.
Thanks to all the contributors who submitted the PR's and helped with testing.
Changelog
f4b7d61 support egress to namedport without dst address (#1037)
43c3c9d Handle headless services (#1047)
1fb0820 fix(npc): sync npc on pod label changes (#1046)
40512f1 serialize the iptables changes by NRC and NPC while starting
99cb40b while doing ipset restore, ensure sets are flushed before adding entries
187a3f2 fix(ipset): add type option to RefreshSet
d1e1923 prevent iptable command calls when necessary rules already exists
fe515d1 fix(pod.go): ensure traffic at end of chain is only dropped once
22b031b feat(metrics): add more iptables sync metrics
95299a4 fix(pod.go): comment quoting issues
afd866c use ipset save and restore to modify ipset to reduce exec calls
888cac9 use iptables-save and iptables-restore commands to consolidate individual iptables command that are run during full network policies sync
8f2e26a Update deps for k8s, cni and golang (#1030)
8105734 metrics: Add metric for build_info (#1031)
49b9add Making IPIP/tunnel and override-nexthop independent (#1025)
53d66eb adding missing vendor files
ca2008e feat: simple CRI implementation in addition to Docker, required for DSR functionality. CRI compliant runtimes support (e.g. containerd, cri-o, etc.) (#1027)
2ba6f40 It appears as though this line is no longer relevant (#1029)
ee9f6d8 Update dependencies (go-iptables, cni) (#996)
c4eba17 Makefile: Drop outdated glide command (#1018)
c145885 resolving merge conflicts of PR-964
54b921f Merge remote-tracking branch 'iamakulov/master'
4e13a1d Update RBAC apiVersion from v1beta1 to v1 (#1016)
e16f207 npc code restructuring (#1007)
4c05ef2 Return an error if BatchAdd errors
1a487d2 Remove options passed to .Refresh()
a79eded Improve ipset performance with large sets