Cilium Ingress Dropped as Martian Source

Tue, 04 Aug 2026 00:00:00 -0500

The symptom

Single-node cluster at home. Cilium as the CNI, doing ingress and L2 load balancing. The goal was mundane: https://api.llama.internal/ should hit a llamacpp pod through Cilium’s ingress.

It didn’t. From any machine on my LAN:

$ curl -k --max-time 15 https://api.llama.internal/
curl: (28) Connection timed out after 15004 milliseconds

The connection never even got to TLS. But here’s the part that sent me down a three-hour rabbit hole: from the node itself, it worked fine.

Kubernetes on Ray Krueger

Cilium Ingress Dropped as Martian Source

The symptom