connectivity: Relax flow validation for connection test to google.com…

… further Even a single RST is acceptable. Google.com seems to be pretty minimal at times. Signed-off-by: Thomas Graf <[email protected]>
cilium · Mar 3, 2021 · 475af86 · 475af86
1 parent 800b1b5
commit 475af86
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/connectivity/test_world.go b/connectivity/test_world.go
@@ -43,8 +43,9 @@ func (p *connectivityTestPodToWorld) Run(ctx context.Context, c TestContext) {
 			{Filter: filters.And(filters.IP("", client.Pod.Status.PodIP), filters.UDP(53, 0)), Expect: true, Msg: "DNS response"},
 			{Filter: filters.And(filters.IP(client.Pod.Status.PodIP, ""), filters.TCP(0, 443), filters.SYN()), Expect: true, Msg: "SYN"},
 			{Filter: filters.And(filters.IP("", client.Pod.Status.PodIP), filters.TCP(443, 0), filters.SYNACK()), Expect: true, Msg: "SYN-ACK"},
+			// For the connection termination, we will either see:
+			// a) FIN + FIN b) FIN + RST c) RST
 			{Filter: filters.And(filters.IP(client.Pod.Status.PodIP, ""), filters.TCP(0, 443), filters.Or(filters.FIN(), filters.RST())), Expect: true, Msg: "FIN or RST"},
-			{Filter: filters.And(filters.IP("", client.Pod.Status.PodIP), filters.TCP(443, 0), filters.Or(filters.FIN(), filters.RST())), Expect: true, Msg: "FIN or RST"},
 		})
 
 		run.End()