fix(shelly-manager): keep firmware traffic off the IoT macvlan #1516

Merged

k.renner merged 1 commits from shelly-manager-net1-no-ra into main

2026-10-28 15:38:04 +00:00

Author	SHA1	Message	Date
claude-botandClaude Opus 5.5	a8c1710cab	fix(shelly-manager): no IPv6 router advertisements on the IoT NIC ci/woodpecker/pr/ci-manifests-test Pipeline was successful Details ci/woodpecker/pr/ci-scripts-test Pipeline was successful Details Captured on k8s-1 (cilium-dbg monitor, endpoint 1708): an IPv6 SYN from edge-1 (fd02:30::/64) to fd99::8a reached the pod on 8082, but no reply left via eth0; the pod has on-link and default IPv6 routes on net1 from RAs. sbr only confines IPv4. Turn RA processing off on net1 with the tuning plugin (as matter-server already uses it) and roll the pod. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-28 16:27:32 +01:00

Author

SHA1

Message

Date

claude-botandClaude Opus 5.5

a8c1710cab

fix(shelly-manager): no IPv6 router advertisements on the IoT NIC

ci/woodpecker/pr/ci-manifests-test Pipeline was successful

Details

ci/woodpecker/pr/ci-scripts-test Pipeline was successful

Details

Captured on k8s-1 (cilium-dbg monitor, endpoint 1708): an IPv6 SYN from
edge-1 (fd02:30::/64) to fd99::8a reached the pod on 8082, but no reply
left via eth0; the pod has on-link and default IPv6 routes on net1 from
RAs. sbr only confines IPv4. Turn RA processing off on net1 with the
tuning plugin (as matter-server already uses it) and roll the pod.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-28 16:27:32 +01:00