Merge pull request #9629 from tomastigera/auto-pick-of-#9569-upstream…

…-release-v3.29

[release-v3.29] Auto pick #9569: fixe routing from outide the cluster in EKS

felix/bpf-gpl/fib.h

@@ -356,6 +356,12 @@ static CALI_BPF_INLINE int forward_or_drop(struct cali_tc_ctx *ctx)
 		if (ctx->state->ct_result.flags & CALI_CT_FLAG_EXT_LOCAL) {
 			CALI_DEBUG("To host marked with FLAG_EXT_LOCAL\n");
 			ctx->fwd.mark |= EXT_TO_SVC_MARK;
+			if (CALI_F_FROM_WEP && EXT_TO_SVC_MARK) {
+				/* needs to go via normal routing unless we have access
+				 * to BPF_FIB_LOOKUP_MARK in kernel 6.10+
+				 */
+				rc = TC_ACT_UNSPEC;
+			}
 		}
 
 		if (CALI_F_NAT_IF) {