conntrack - Code Search

cmd/kube-proxy/app/server_linux.go

				"cannot modify conntrack limits, problems may arise later (If running Docker, see docker issue #24000)"
			s.Recorder.Eventf(s.NodeRef, nil, v1.EventTypeWarning, err.Error(), "StartKubeProxy", message)
		}
	}

	if s.Config.Conntrack.TCPEstablishedTimeout != nil && s.Config.Conntrack.TCPEstablishedTimeout.Duration > 0 {
		timeout := int(s.Config.Conntrack.TCPEstablishedTimeout.Duration / time.Second)

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Sat Jun 08 13:48:54 UTC 2024

- 18.1K bytes

- Viewed (0)

github.com/istio/istio

tools/istio-iptables/pkg/capture/run.go

		}
	}
	// Split UDP DNS traffic to separate conntrack zones
	addConntrackZoneDNSUDP(f.WithTable(constants.RAW), proxyUID, proxyGID, dnsServersV4, dnsServersV6, captureAllDNS)
}

// addConntrackZoneDNSUDP is a helper function to add iptables rules to split DNS traffic
// in two separate conntrack zones to avoid issues with UDP conntrack race conditions.

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Jun 06 03:53:23 UTC 2024

- 35.4K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

pkg/proxy/nftables/proxier.go

		proxier.logger.Error(err, "Error syncing healthcheck endpoints")
	}

	// Finish housekeeping, clear stale conntrack entries for UDP Services
	conntrack.CleanStaleEntries(proxier.conntrack, proxier.svcPortMap, serviceUpdateResult, endpointUpdateResult)
}

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Sat Jun 08 13:48:54 UTC 2024

- 55.5K bytes

- Viewed (0)

github.com/istio/istio

tools/istio-iptables/pkg/capture/testdata/tproxy.golden

iptables -t mangle -A ISTIO_TPROXY ! -d 127.0.0.1/32 -p tcp -j TPROXY --tproxy-mark 1337/0xffffffff --on-port 15006
iptables -t mangle -A PREROUTING -p tcp -j ISTIO_INBOUND
iptables -t mangle -A ISTIO_INBOUND -p tcp -m conntrack --ctstate RELATED,ESTABLISHED -j ISTIO_DIVERT
iptables -t mangle -A ISTIO_INBOUND -p tcp -j ISTIO_TPROXY
iptables -t nat -A OUTPUT -p tcp -j ISTIO_OUTPUT
iptables -t nat -A ISTIO_OUTPUT -o lo -s 127.0.0.6/32 -j RETURN

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Jun 06 03:53:23 UTC 2024

- 6.8K bytes

- Viewed (0)

github.com/istio/istio

go.sum

github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f h1:KUppIJq7/+SVif2QVs3tOP0zanoHgBEVAwHxUSIzRqU=
github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Wed Jun 12 15:32:28 UTC 2024

- 101.6K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

CHANGELOG/CHANGELOG-1.29.md

- `kube-proxy`: Added an option/flag for configuring the `nf_conntrack_tcp_be_liberal` sysctl (in the kernel's netfilter conntrack subsystem).  When enabled, `kube-proxy` will not install the `DROP` rule for invalid conntrack states, which currently breaks users of asymmetric routing. ([#120354](https://github.com/kubernetes/kubernetes/pull/120354), [@aroradaman](https://github.com/aroradaman))

### Feature

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Wed Jun 12 03:42:38 UTC 2024

- 324.5K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

cluster/gce/gci/configure-helper.sh

      ;;
    nftables)
      # Pass --conntrack-tcp-be-liberal so we can test that this makes the
      # "proxy implementation should not be vulnerable to the invalid conntrack state bug"
      # test pass. https://issues.k8s.io/122663#issuecomment-1885024015
      params+=" --proxy-mode=nftables --conntrack-tcp-be-liberal"
      ;;
  esac

  if [[ -n "${KUBEPROXY_TEST_ARGS:-}" ]]; then

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Mon Jun 10 22:07:47 UTC 2024

- 141.1K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

go.sum

github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Wed Jun 12 21:47:11 UTC 2024

- 93.1K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

staging/src/k8s.io/apiextensions-apiserver/go.sum

github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Wed Jun 12 21:47:11 UTC 2024

- 49.3K bytes

- Viewed (0)

github.com/kubernetes/kubernetes

staging/src/k8s.io/apiserver/go.sum

github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f h1:y5//uYreIhSUg3J1GEMiLbxo1LJaP8RfCpH6pymGZus=

Registered: Sat Jun 15 01:39:40 UTC 2024

- Last Modified: Wed Jun 12 21:47:11 UTC 2024

- 49.2K bytes

- Viewed (0)

Search Options