FYI: Regarding your failing test after the go update.

[Cellebyte]

Hey I think I found the issue, why your tests are failing.

For reference.

telekom@9bbefd9

telekom@2092050

multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	goroutine 106 [running]:
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/apimachinery/pkg/util/runtime.logPanic({0x254c780, 0xc000726870}, {0x1e98d60, 0x251bff0})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/runtime/runtime.go:132 +0xbc
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/apimachinery/pkg/util/runtime.handleCrash({0x254c780, 0xc000726840}, {0x1e98d60, 0x251bff0}, {0x0, 0x0, 0x38?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/runtime/runtime.go:107 +0x116
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/apimachinery/pkg/util/runtime.HandleCrashWithLogger({{0x25518a8?, 0xc0001a1440?}, 0xc000681b68?}, {0x0, 0x0, 0x0})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/runtime/runtime.go:91 +0x115
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	panic({0x1e98d60?, 0x251bff0?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/local/go/src/runtime/panic.go:792 +0x132
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/kubernetes/pkg/proxy/runner.(*BoundedFrequencyRunner).Run(...)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/kubernetes/pkg/proxy/runner/bounded_frequency_runner.go:152
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	github.com/telekom/multi-networkpolicy-nftables/pkg/server.(*Server).Sync(0xc000154400)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/pkg/server/server.go:302 +0x66
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	github.com/telekom/multi-networkpolicy-nftables/pkg/server.(*Server).OnPodUpdate(0xc000154400, 0xc0000f1688, 0xc0000f2908)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/pkg/server/server.go:321 +0x1a5
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	github.com/telekom/multi-networkpolicy-nftables/pkg/controllers.(*PodConfig).handleUpdatePod(0xc000298a40, {0x2202dc0?, 0xc0000f1688?}, {0x2202dc0?, 0xc0000f2908?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/pkg/controllers/pod.go:163 +0x111
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/client-go/tools/cache.ResourceEventHandlerFuncs.OnUpdate(...)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/client-go/tools/cache/controller.go:266
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/client-go/tools/cache.(*processorListener).run.func1(0xc000681f5f, 0xc00048d9a0, {0x1fb1ea0?, 0xc0005b3140?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/client-go/tools/cache/shared_informer.go:1074 +0x17d
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/client-go/tools/cache.(*processorListener).run(0xc00048d9a0)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/client-go/tools/cache/shared_informer.go:1086 +0x3c
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	k8s.io/apimachinery/pkg/util/wait.(*Group).Start.func1()
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:72 +0x4c
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	created by k8s.io/apimachinery/pkg/util/wait.(*Group).Start in goroutine 177
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 		/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:70 +0x73
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy  >
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy panic: send on closed channel [recovered]
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	panic: send on closed channel
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy goroutine 106 [running]:
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/apimachinery/pkg/util/runtime.handleCrash({0x254c780, 0xc000726840}, {0x1e98d60, 0x251bff0}, {0x0, 0x0, 0x38?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/runtime/runtime.go:114 +0x1a9
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/apimachinery/pkg/util/runtime.HandleCrashWithLogger({{0x25518a8?, 0xc0001a1440?}, 0xc000681b68?}, {0x0, 0x0, 0x0})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/runtime/runtime.go:91 +0x115
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy panic({0x1e98d60?, 0x251bff0?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/local/go/src/runtime/panic.go:792 +0x132
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/kubernetes/pkg/proxy/runner.(*BoundedFrequencyRunner).Run(...)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/kubernetes/pkg/proxy/runner/bounded_frequency_runner.go:152
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy github.com/telekom/multi-networkpolicy-nftables/pkg/server.(*Server).Sync(0xc000154400)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/pkg/server/server.go:302 +0x66
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy github.com/telekom/multi-networkpolicy-nftables/pkg/server.(*Server).OnPodUpdate(0xc000154400, 0xc0000f1688, 0xc0000f2908)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/pkg/server/server.go:321 +0x1a5
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy github.com/telekom/multi-networkpolicy-nftables/pkg/controllers.(*PodConfig).handleUpdatePod(0xc000298a40, {0x2202dc0?, 0xc0000f1688?}, {0x2202dc0?, 0xc0000f2908?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/pkg/controllers/pod.go:163 +0x111
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/client-go/tools/cache.ResourceEventHandlerFuncs.OnUpdate(...)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/client-go/tools/cache/controller.go:266
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/client-go/tools/cache.(*processorListener).run.func1(0xc000681f5f, 0xc00048d9a0, {0x1fb1ea0?, 0xc0005b3140?})
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/client-go/tools/cache/shared_informer.go:1074 +0x17d
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/client-go/tools/cache.(*processorListener).run(0xc00048d9a0)
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/client-go/tools/cache/shared_informer.go:1086 +0x3c
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy k8s.io/apimachinery/pkg/util/wait.(*Group).Start.func1()
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:72 +0x4c
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy created by k8s.io/apimachinery/pkg/util/wait.(*Group).Start in goroutine 177
multi-networkpolicy-ds-amd64-9r9h2 multi-networkpolicy 	/usr/src/multi-networkpolicy-nftables/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:70 +0x73

[zeeke]

@Cellebyte thanks for reporting.
I'll take a look.

Also, I see your fork is steering from iptables to nftables implementation. Please, consider using and/or contributing to this new project

• https://github.com/k8snetworkplumbingwg/multi-networkpolicy-nftables

[Cellebyte]

Hmm as this is very new. I can consider it.
But when we started it was not existing. I think the only relevant part ist in netfilterrules.go.

I will check if the current netfilter rules in the project work as expected.

[Cellebyte]

What we observed in the last 2 years:

When we created Issues or Pull Requests on projects in the networkplumbingwg org, we did not receive feedback.
We also saw very relevant Pull Request on you projects which never got merged.

Especially on whereabouts and multus.

Thats why we decided to fork multus and this project currently as these issues break our production.
As far as I know these are still not merged or were closed.

For this project I agree, the responsiveness is much higher than I expected initially from my previous experience with the working group.