Project: Antrea (Runtime / Cloud Native Network)
File: CHANGELOG-1.4.md

The NodePortLocal feature is graduated from Alpha to Beta. Support for proxying all Service traffic by Antrea Proxy, including NodePort, LoadBalancer, and ClusterIP traffic. Therefore, running kube-proxy is no longer required. ( , [@hongliangl] [@lzhecheng]) The feature works for both Linux and Windows The feature is experimental and therefore disabled by default. Use the `antreaProxy.proxyAll` configuration parameter for the Antrea Agent to enable it If kube-proxy is removed, the `kubeAPIServerOverride` configuration parameter for the Antrea Agent must be set to access kube-apiserver directly Add , [@gran-vmv] [@annakhm]) Add new IPPool API to define ranges of IP addresses which can be used as Pod IPs; the IPs in the IPPools must be in the same "underlay" subnet as the Node IP A Pod's IP will be allocated from the IPPool specified by the `ipam.antrea.io/ippools` annotation of the Pod's Namespace if there is one When the feature is enabled, the Node's network interface will be connected to the OVS bridge, in order to forward cross-Node traffic of AntreaIPAM Pods through the underlay network Refer to the for more information Add , [@ksamoray]) Refer to the for instructions on how to configure it Support for configurable transport interface CIDRs for Pod traffic. (, [@Jexf]) Use the `transportInterfaceCIDRs` configuration parameter for the Antrea Agent to choose an interface by network CIDRs Add UDP support for NodePortLocal. (, [@chauhanshubham]) Add the `nodePortLocal.enable` configuration parameter for the Antrea Agent to enable NodePortLocal. (, [@antoninbas]) Add more visibility metrics to report the connection status of the Antrea Agent to the Flow Aggregator. (, [@zyiou]) Add the `antreaProxy.skipServices` configuration parameter for the Antrea Agent to specify Services which should be ignored by AntreaProxy. (, [@luolanzone]) A typical use case is setting `antreaProxy.skipServices` to `["kube-system/kube-dns"]` to make [NodeLocal DNSCache] work when AntreaProxy is enabled Add support for `ToServices` in the rules of Antrea-native policies to allow matching traffic intended for Services. (, [@GraysonWu]) Add the `egress.exceptCIDRs` configuration parameter for the Antrea Agent, to specify IP destinations for which SNAT should not be performed on outgoing traffic. (, [@leonstack]) Add user documentation for , [@jianjuns]) Add user documentation for , [@jianjuns]) Remove chmod for OVSDB file from start_ovs, as the permissions are set correctly by OVS

(, [@antoninbas]) Reduce memory usage of antctl when collecting supportbundle. (, [@tnqn]) Do not perform SNAT for egress traffic to Kubernetes Node IPs. (, [@leonstack]) Send gratuitous ARP for EgressIP via the transport interface, as opposed to the interface with Node IP (if they are different). (, [@Jexf]) Ignore hostNetwork Pods selected by Egress, as they are not supported. (, [@Jexf]) Avoid duplicate processing of Egress. (, [@Jexf]) Ignore the IPs of kube-ipvs0 for Egress as they cannot be used for SNAT. (, [@Jexf]) Change flow exporter export expiry mechanism to priority queue based, to reduce CPU usage and memory footprint. (, [@heanlan]) Make Pod labels optional in the flow records. By default, they will not be included in the flow records. Use the `recordContents.podLabels` configuration parameter for the Flow Aggregator to include them. (, [@yanjunz97]) Wait for AntreaProxy to be ready before accessing any K8s Service if `antreaProxy.proxyAll` is enabled, to avoid connection issues on Agent startup. (, [@tnqn]) Update , [@hongliangl]) Remove offensive words from scripts and documentation. (, [@xiaoxiaobaba]) Use readable names for OpenFlow tables. (, [@wenyingd]) Improve the OpenAPI schema for CRDs to validate the `matchExpressions` field. (, [@wenqiq]) Fail fast if the source Pod for non-live-traffic Traceflow is invalid. (, [@gran-vmv]) Use the `RenewIPConfig` parameter to indicate whether to renew ipconfig on the host for `Clean-AntreaNetwork.ps1`. It defaults to false. (, [@wenyingd]) [Windows] Add Windows task delay up to 30s to improve job resiliency of `Prepare-AntreaAgent.ps1`, to avoid a failure in initialization after Windows startup. (, [@perithompson]) [Windows] Fix nil pointer error when antrea-agent updates OpenFlow priorities of Antrea-native policies without Service ports. (, [@wenyingd]) Fix panic in the Antrea Controller when it processes ClusterGroups that are used by multiple ClusterNetworkPolicies. (, [@tnqn]) Fix an issue with NodePortLocal when a given Pod port needs to be exposed for both TCP and UDP. (, [@antoninbas]) Fix handling of the "Reject" action of Antrea-native policies when the traffic is intended for Services. (, [@GraysonWu]) Fix Agent crash when removing the existing NetNat on Windows Nodes. (, [@wenyingd]) [Windows] Fix container network interface MTU configuration error when using containerd as the runtime on Windows. (, [@wenyingd]) [Windows] Fix path to Prepare-AntreaAgent.ps1 in Windows docs. (, [@perithompson]) [Windows] Fix NetNeighbor Powershell error handling. (, [@lzhecheng]) [Windows]