fix matching loopback addresses (#5402)

zhangzujian · zhangzujian · commit 528fb73ced4e · 2025-06-26T10:27:15.000Z
Signed-off-by: zhangzujian &lt;zhangzujian.7@gmail.com&gt;
diff --git a/pkg/daemon/config.go b/pkg/daemon/config.go
@@ -284,10 +284,9 @@ func (config *Configuration) initNicConfig(nicBridgeMappings map[string]string)
 				continue
 			}
 
-			// exclude link-local and localhost addresses
+			// exclude link-local and loopback addresses
 			ipStr := strings.Split(addr.String(), "/")[0]
-			_, localhost, _ := net.ParseCIDR("127.0.0.0/8")
-			if ip := net.ParseIP(ipStr); ip == nil || ip.IsLinkLocalUnicast() || localhost.Contains(ip) {
+			if ip := net.ParseIP(ipStr); ip == nil || ip.IsLinkLocalUnicast() || ip.IsLoopback() {
 				continue
 			}
 			if len(srcIPs) == 0 || slices.Contains(srcIPs, ipStr) {

Original file line number	Diff line number	Diff line change
`@@ -284,10 +284,9 @@ func (config *Configuration) initNicConfig(nicBridgeMappings map[string]string)`
`284`	`284`	`continue`
`285`	`285`	`}`
`286`	`286`
`287`		`- // exclude link-local and localhost addresses`
	`287`	`+ // exclude link-local and loopback addresses`
`288`	`288`	`ipStr := strings.Split(addr.String(), "/")[0]`
`289`		`- _, localhost, _ := net.ParseCIDR("127.0.0.0/8")`
`290`		`- if ip := net.ParseIP(ipStr); ip == nil \|\| ip.IsLinkLocalUnicast() \|\| localhost.Contains(ip) {`
	`289`	`+ if ip := net.ParseIP(ipStr); ip == nil \|\| ip.IsLinkLocalUnicast() \|\| ip.IsLoopback() {`
`291`	`290`	`continue`
`292`	`291`	`}`
`293`	`292`	`if len(srcIPs) == 0 \|\| slices.Contains(srcIPs, ipStr) {`