and for the rest of the traffic policy routing sets endpoints (dev kube-bridge) as
next hop for external IP's

- add a route to exteranl ip in custom routing table to prevent martian packets
- switch between Masqurade and Tunnel for forwarding when DSR in disabled and enabled

as you annotate and remove DSR annotation, switch the IPVS server
type to tunneling to masqurade mode

also restrict preparing the pod for DSR only to the local pods

Fixes #6

new annotation is added `kube-router.io/service.dsr=tunnel` to enable DSR

Fixes #40

introduces new flag `--advertise-external-ip`

Fixes #161

Fixes #26

Fixes #197

Support for 32 bit ASN numbers specifically the range 4200000000 - 4294967294 as specified by RFC 6996 (#196)

Fixes #194

Network policy: always permit traffic from local node to the pods irrespective of network policies (#195)

fixes #87

Support CIDR in network policy ingress and egress rules

Fixes #144

Also a small cosmetic change, remove trailing space

Network policy egress support

Fixes #103

* Update DaemonSet, etc manifests

- Remove beta annotation versions of init containers
- Add YAML InitContainers spec to all manifests
- Add CNI config ConfigMap to all manifests
- Make indentation, volume names, etc consistent
- Set all kubeconfig volumes to readonly

* Use IfNotPresent image pull policy for vagrant testing

- Avoids an error with busybox init container image fetching

bump up client-go to release-5.0 and vendor kubernetes/api

Fixes #178

* Move getNodeIP logic to utils package

Remove redundant ipset lookups

utils.NewIPSet() does this for us.

* Don't masquerade pod -> nodeAddrsIPSet traffic

Previously with Pod egress enabled, this would get masqueraded.
This change also adds cleanup for said ipset.

* Enhanced cleanup of Pod egress, overlay networking

- Delete old/bad pod egress iptables rule(s) from old versions
- When pod egress or overlay are disabled, cleanup as needed

* Update IPSet.Sets to map type

* ipset enhancements

- Avoid providing method that would delete all ipset sets on a system
- New method DestroyAllWithin() destroys sets tracked by an IPSet
- Create() now handles cases where Sets/System state are not in sync
- Refresh() now handles leftover -temp set gracefully
- Swap() now uses ipset swap
- Delete() improved sync of Sets and system state
- Get() now validates if map element exists before trying
- etc

* Update routes controller to reflect ipset changes

* Cleanup ipset create function + restore. Fix #176

Switch from array to map to simplify set use

* Add sets initialization on create

"kube-router.io/..."
This is in line with convention set by k8s upstream.

Delete ipset dependency + delete unused ipsets

* Add --peer-router-password option
Also:
- Consolodated NRC peer fields into a []config.NeighborConfig
  to store address, asn, and password for each peer.
- BREAKING: --peer-router and --peer-asn flags now take slices
  rather than strings.

* Add password auth node annotation for external peer

* Update documentation

New CLI flags and annotations
Renamed ones as well

* Consistent CLI flags, annotations, and peer config

BGP configs now all accept multiple values and are treated consistently.
Other refactoring was done as well.

* Stop bgpserver on peering errors to avoid listener leak

* Clarify BGP doc sections

Fix some typos

* bgpserver: listen only on enabled address protocols
* tiny typo fix
* Ensure gobgp server listener gets closed

* Fix IPVS persistence flag

* Improve service proxy logging

* Fix Destination string

* Enhanced ipvs ServiceFlags handling

Adding ability to disable IP-in-IP tunnelining

where nodes are in different subnet. With tunneling disabled its expected that default
gateway has learned the pod CIDR's allocated for all the nodes and can route the
pod-to-pod traffic across nodes in different subnets

Fixes #119