int_dataplane.go 980: Kernel‘s RPF check is set to ‘loose‘.

int_dataplane.go 980: Kernel's RPF check is set to 'loose'.  This would allow endpoints to spoof their IP address.  Calico requires net.ipv4.conf.all.rp_filter to be set to 0 or 1. If you require loose RPF and you are not concerned about spoofing, this check can be disabled by setting the IgnoreLooseRPF configuration parameter to 'true'.

vi /etc/sysctl.d/10-network-security.conf
ubuntu默认为2，改为1
net.ipv4.conf.all.rp_filter = 1

sysctl -p /etc/sysctl.d/10-network-security.conf