Update relevant parts of the CNI/CIlium chapter after I've enabled host-reachable services and ebpf masquerading.