- Added support for kube-proxy iptables mode to track packets that were wrongfully marked invalid by conntrack and subsequently dropped by introducing `kubeproxy_iptables_ct_state_invalid_dropped_packets_total` metric. ([#122812](https://github.com/kubernetes/kubernetes/pull/122812), [@aroradaman](https://g...

- Transparent kube-proxy restarts when using IPVS are now allowed. ([#75283](https://github.com/kubernetes/kubernetes/pull/75283), [@lbernail](https://github.com/lbernail))
- Packets considered INVALID by conntrack are now dropped. In particular, this fixes
a problem where spurious retransmits in a long-running TCP connection to a service

* Fix Service Update on LoadBalancerSourceRanges Field ([#37720](https://github.com/kubernetes/kubernetes/pull/37720), [@freehan](https://github.com/freehan))
* Bug fix. Incoming UDP packets not reach newly deployed services ([#32561](https://github.com/kubernetes/kubernetes/pull/32561), [@zreigz](https://github.com/zreigz))

- Fix CVE-2020-8555 for Quobyte client connections. ([#95206](https://github.com/kubernetes/kubernetes/pull/95206), [@misterikkit](https://github.com/misterikkit)) [SIG Storage]
- Fix IP fragmentation of UDP and TCP packets not supported issues on LoadBalancer rules ([#96464](https://github.com/kubernetes/kubernetes/pull/96464), [@nilo19](https://github.com/nilo19)) [SIG Cloud Provider]

- Added CEL runtime cost calculation into CustomerResource...

* Kubernetes version command line parameter in kubeadm has been updated to drop an unnecessary redirection from ci/latest.txt to ci-cross/latest.txt. Users should know exactly where the builds are stored on Google Cloud storage buckets from now on. For example for 1.9 and 1.10, users can specify ci/latest-1.9 and ci/latest-1.10 as the CI build jobs what build images correctly updates those. The CI jobs for master update the ci-cross/latest location, so if you are looking for latest...

pkg syscall (darwin-arm64), type IfData struct, Ierrors uint32
pkg syscall (darwin-arm64), type IfData struct, Imcasts uint32
pkg syscall (darwin-arm64), type IfData struct, Ipackets uint32
pkg syscall (darwin-arm64), type IfData struct, Iqdrops uint32
pkg syscall (darwin-arm64), type IfData struct, Lastchange Timeval32
pkg syscall (darwin-arm64), type IfData struct, Metric uint32

## Changelog since v1.23.16

## Changes by Kind

### Feature

- Kubelet TCP and HTTP probes are more effective using networking resources: conntrack entries, sockets, ... 

pkg syscall (netbsd-arm64-cgo), type IfData struct, Ierrors uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Imcasts uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Ipackets uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Iqdrops uint64
pkg syscall (netbsd-arm64-cgo), type IfData struct, Lastchange Timespec
pkg syscall (netbsd-arm64-cgo), type IfData struct, Link_state int32

* Using ipset doing SNAT and packet filtering in IPVS kube-proxy ([#54219](https://github.com/kubernetes/kubernetes/pull/54219), [@m1093782566](https://github.com/m1093782566))