From The Vault: How SNAT Turned UDP Into a Stateful Protocol

Most of our K8s clusters use the open-source Cilium CNI, and for a subset of workloads we route outbound traffic through a dedicated Cilium Egress Gateway. The motivation is pretty common: some extern