FOSSWire
cloud-native

Cilium 1.20.3 releases with cloud provider fixes and networking stability improvements

Brief written by the FOSSWire AI editor from Cilium eBPF Cloud Native Networking

1 min read Impact: 5/10

Key Takeaway

Cilium 1.20.3 addresses critical networking bugs, including conntrack garbage collection issues and cloud-specific agent crashes.

Summary

The Cilium 1.20.3 release provides a series of bugfixes and minor improvements for the eBPF-based networking solution. Key updates include support for Alibaba Cloud IMDSv2, fixes for Azure agent crashes caused by empty MAC fields, and resolutions for conntrack garbage collection errors that previously affected live connections. The update also improves Gateway API handling and Envoy listener stability.

Technical improvements in Cilium 1.20.3

  • Networking Stability: Fixed a conntrack garbage collection bug that could delete entries for live connections, leading to NAT mapping deletions.
  • Cloud Integration: Added IMDSv2 (token-based) support for Alibaba Cloud and fixed an Azure-specific crash related to empty MAC fields.
  • Gateway API: Improved HTTP route ordering determinism and added support for system CA certificates in BackendTLSPolicy.
  • eBPF & Datapath: Resolved issues where L7 DNS policies remained loaded during agent shutdown and fixed PMTU/ICMP replies for IPIP/Geneve DSR.
  • Envoy: Enhanced handling of listener address changes and ADS snapshot updates.

Why it matters

This release improves the reliability of Cilium in multi-cloud environments by addressing specific provider bugs and preventing connection drops during routine garbage collection.

Original reference: github.com →