proxy: just hacking on a sunny day

sayboras · sayboras · commit a9b39466a1b6 · 2025-04-17T13:00:01.000+10:00
Just hacking, do not merge.

Signed-off-by: Tam Mach &lt;tam.mach@cilium.io&gt;
diff --git a/cilium/bpf_metadata.cc b/cilium/bpf_metadata.cc
@@ -465,7 +465,8 @@ Config::extractSocketMetadata(Network::ConnectionSocket& socket) {
 
     // Enforce Ingress policy?
     if (enforce_policy_on_l7lb_) {
-      ingress_source_identity = source_identity;
+      ingress_source_identity =
+          l7lb_policy_name_.empty() ? source_identity : policy->getEndpointID();
       ingress_policy_name =
           l7lb_policy_name_.empty() ? ingress_ip->addressAsString() : l7lb_policy_name_;
     }

Original file line number	Diff line number	Diff line change
`@@ -465,7 +465,8 @@ Config::extractSocketMetadata(Network::ConnectionSocket& socket) {`
`465`	`465`
`466`	`466`	`// Enforce Ingress policy?`
`467`	`467`	`if (enforce_policy_on_l7lb_) {`
`468`		`- ingress_source_identity = source_identity;`
	`468`	`+ ingress_source_identity =`
	`469`	`+ l7lb_policy_name_.empty() ? source_identity : policy->getEndpointID();`
`469`	`470`	`ingress_policy_name =`
`470`	`471`	`l7lb_policy_name_.empty() ? ingress_ip->addressAsString() : l7lb_policy_name_;`
`471`	`472`	`}`