- Sort Score
- Result 10 results
- Languages All
Results 1 - 4 of 4 for heading (0.19 sec)
-
architecture/ambient/ztunnel.md
This only applies for selector-based policies; namespaced and global policies can be handled without needing to list them out in the Workload API. ## Redirection As ztunnel aims to transparently encrypt and route users traffic, we need a mechanism to capture all traffic entering and leaving "mesh" pods. This is a security critical task: if the ztunnel can be bypassed, authorization policies can be bypassed.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
cni/pkg/iptables/iptables.go
"-i", "lo", "-j", "ACCEPT") // CLI: -A ISTIO_PRERT -p tcp -m tcp --dport <INPORT> -m mark ! --mark 0x539/0xfff -j TPROXY --on-port <INPORT> --on-ip 127.0.0.1 --tproxy-mark 0x111/0xfff // // DESC: Anything heading to <INPORT> that does not have the mark, TPROXY to ztunnel inbound port <INPORT> iptablesBuilder.AppendRule( iptableslog.UndefinedCommand, ChainInpodPrerouting, iptablesconstants.MANGLE, "-p", "tcp", "-m", "tcp",
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue May 07 19:54:50 GMT 2024 - 19.7K bytes - Viewed (0) -
cni/pkg/ipset/nldeps_linux.go
} return nil } // Alpine and some distros struggles with this - ipset CLI utilities support this, but // the kernel can be out of sync with the CLI utility, leading to errors like: // // ipset v7.10: Argument `comment' is supported in the kernel module of the set type hash:ip // starting from the revision 3 and you have installed revision 1 only. // Your kernel is behind your ipset utility.
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.9K bytes - Viewed (0) -
cni/pkg/nodeagent/informers.go
// test flakes with the fake kube client in `pkg/kube/client.go` - // because we are using `List()` in the handler, without this requeue, // the fake client will sometimes drop pod events leading to test flakes. // // WaitForCacheSync *helps*, but does not entirely fix this problem s.namespaces = kclient.New[*corev1.Namespace](kubeClient)
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 9.6K bytes - Viewed (0)