- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 14 for TPROXY (0.18 sec)
-
cni/pkg/plugin/testdata/tproxy.txt.golden
* mangle -N ISTIO_DIVERT -N ISTIO_TPROXY -N ISTIO_INBOUND -A ISTIO_DIVERT -j MARK --set-mark 1337 -A ISTIO_DIVERT -j ACCEPT -A ISTIO_TPROXY ! -d 127.0.0.1/32 -p tcp -j TPROXY --tproxy-mark 1337/0xffffffff --on-port 15006 -A PREROUTING -p tcp -j ISTIO_INBOUND -A ISTIO_INBOUND -p tcp --dport 15020 -j RETURN -A ISTIO_INBOUND -p tcp --dport 15021 -j RETURN -A ISTIO_INBOUND -p tcp --dport 15090 -j RETURN
Plain Text - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Thu Feb 16 22:54:20 GMT 2023 - 1.9K bytes - Viewed (0) -
cni/pkg/plugin/testdata/custom-uid-tproxy.txt.golden
* mangle -N ISTIO_DIVERT -N ISTIO_TPROXY -N ISTIO_INBOUND -A ISTIO_DIVERT -j MARK --set-mark 1337 -A ISTIO_DIVERT -j ACCEPT -A ISTIO_TPROXY ! -d 127.0.0.1/32 -p tcp -j TPROXY --tproxy-mark 1337/0xffffffff --on-port 15006 -A PREROUTING -p tcp -j ISTIO_INBOUND -A ISTIO_INBOUND -p tcp --dport 15020 -j RETURN -A ISTIO_INBOUND -p tcp --dport 15021 -j RETURN -A ISTIO_INBOUND -p tcp --dport 15090 -j RETURN
Plain Text - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Wed Apr 26 16:39:28 GMT 2023 - 2K bytes - Viewed (0) -
cni/pkg/iptables/testdata/default_ipv6.golden
iptables -t mangle -A ISTIO_PRERT -p tcp -m tcp --dport 15008 -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15008 --tproxy-mark 0x111/0xfff iptables -t mangle -A ISTIO_PRERT -p tcp -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT iptables -t mangle -A ISTIO_PRERT ! -d 127.0.0.1/32 -p tcp -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15006 --tproxy-mark 0x111/0xfff
Plain Text - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 2.9K bytes - Viewed (0) -
cni/pkg/plugin/plugin_dryrun_test.go
Go - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Sat Feb 10 00:31:55 GMT 2024 - 8.4K bytes - Viewed (0) -
istioctl/pkg/kubeinject/testdata/mesh-config.yaml
# If "TPROXY", use iptables TPROXY to redirect to Envoy. # The "TPROXY" mode preserves both the source and destination IP # addresses and ports, so that they can be used for advanced filtering # and manipulation. # The "TPROXY" mode also configures the sidecar to run with the # CAP_NET_ADMIN capability, which is required to use TPROXY. #interceptionMode: REDIRECT #
Others - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Thu Jun 15 15:02:17 GMT 2023 - 2.2K bytes - Viewed (0) -
cni/pkg/iptables/testdata/default.golden
iptables -t mangle -A ISTIO_PRERT -p tcp -m tcp --dport 15008 -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15008 --tproxy-mark 0x111/0xfff iptables -t mangle -A ISTIO_PRERT -p tcp -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT iptables -t mangle -A ISTIO_PRERT ! -d 127.0.0.1/32 -p tcp -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15006 --tproxy-mark 0x111/0xfff
Plain Text - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 1.4K bytes - Viewed (0) -
manifests/charts/ztunnel/templates/daemonset.yaml
- ALL add: # See https://man7.org/linux/man-pages/man7/capabilities.7.html - NET_ADMIN # Required for TPROXY and setsockopt - SYS_ADMIN # Required for `setns` - doing things in other netns - NET_RAW # Required for RAW/PACKET sockets, TPROXY readOnlyRootFilesystem: true runAsGroup: 1337 runAsNonRoot: false runAsUser: 0
Others - Registered: Wed Mar 20 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 5K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
"-p", iptablesconstants.TCP, "-i", "lo", "-j", "ACCEPT") // CLI: -A ISTIO_PRERT -p tcp -m tcp --dport <INPORT> -m mark ! --mark 0x539/0xfff -j TPROXY --on-port <INPORT> --on-ip 127.0.0.1 --tproxy-mark 0x111/0xfff // // DESC: Anything heading to <INPORT> that does not have the mark, TPROXY to ztunnel inbound port <INPORT> iptablesBuilder.AppendRule( iptableslog.UndefinedCommand, ChainInpodPrerouting, iptablesconstants.MANGLE,
Go - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Fri Apr 12 01:42:30 GMT 2024 - 19.2K bytes - Viewed (0) -
cni/pkg/iptables/iptables_linux.go
} for _, family := range families { // Equiv: // ip rule add fwmark 0x111/0xfff pref 32764 lookup 100 // // Adds in-pod rules for marking packets with the istio-specific TPROXY mark. // A very similar mechanism is used for sidecar TPROXY. // // TODO largely identical/copied from tools/istio-iptables/pkg/capture/run_linux.go inpodMarkRule := netlink.NewRule() inpodMarkRule.Family = family
Go - Registered: Wed Apr 24 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 3.4K bytes - Viewed (0) -
manifests/charts/istiod-remote/files/injection-template.yaml
{{ if or (eq (annotation .ObjectMeta `sidecar.istio.io/interceptionMode` .ProxyConfig.InterceptionMode) `TPROXY`) (eq (annotation .ObjectMeta `sidecar.istio.io/capNetBindService` .Values.global.proxy.capNetBindService) `true`) -}} add: {{ if eq (annotation .ObjectMeta `sidecar.istio.io/interceptionMode` .ProxyConfig.InterceptionMode) `TPROXY` -}} - NET_ADMIN {{- end }}
Others - Registered: Wed Mar 20 22:53:08 GMT 2024 - Last Modified: Tue Feb 27 16:55:16 GMT 2024 - 23.7K bytes - Viewed (0)