getMagicMark returns the magic marker with which each packet must be marked.

IPsecKeyDeleteDelay is the time to wait before removing old keys when the IPsec key is changing.

IPsecMarkMask is the mask required for the IPsec SPI and encrypt/decrypt bits.

IPsecMarkMaskIn is the mask required for IPsec to lookup encrypt/decrypt bits.

IPSec offset value for node rules.

MagicMarkEgress determines that the traffic is sourced from the proxy which is applying Egress policy.

MagicMarkHost determines that the traffic is sourced from the local host and not from a proxy.

MagicMarkHostMask can be used to fetch the host/proxy-relevant magic bits from a mark.

MagicMarkIngress determines that the traffic is sourced from the proxy which is applying Ingress policy.

MagicMarkIsProxy can be used in conjunction with MagicMarkProxyMask to determine whether the mark is indicating that traffic is sourced from a proxy.

MagicMarkIsToProxy can be used in conjunction with MagicMarkHostMask to determine whether the mark is indicating that traffic is destined to a proxy.

MagicMarkK8sDrop determines that the traffic should be dropped in kubernetes environments.

MagicMarkK8sMasq determines that the traffic should be masqueraded by kube-proxy in kubernetes environments.

MagicMarkProxyMask can be used to fetch the proxy-relevant magic bits from a mark.

MagicMarkProxyNoIDMask can be used to fetch the proxy-relevant magic bits from a mark for proxy reply traffic.

RouteMarkDecrypt is the default route mark to use to indicate datapath needs to decrypt a packet.

RouteMarkEncrypt is the default route mark to use to indicate datapath needs to encrypt a packet.

RouteMarkMask is the mask required for the route mark value.

IPSecProtocolID IP protocol ID for IPSec defined in RFC4303.

RouteTableIPSec is the default table ID to use for IPSec routing rules.

TunnelDeviceName the default name of the tunnel device when using vxlan.