- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 24 for mask (0.15 sec)
-
cni/pkg/iptables/iptables_linux.go
// A very similar mechanism is used for sidecar TPROXY. // // TODO largely identical/copied from tools/istio-iptables/pkg/capture/run_linux.go inpodMarkRule := netlink.NewRule() inpodMarkRule.Family = family inpodMarkRule.Table = RouteTableInbound inpodMarkRule.Mark = InpodTProxyMark inpodMarkRule.Mask = InpodTProxyMask inpodMarkRule.Priority = 32764
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Tue Apr 30 22:24:38 GMT 2024 - 3.3K bytes - Viewed (0) -
cni/pkg/nodeagent/cni-watcher.go
var podIps []netip.Addr for _, configuredPodIPs := range addCmd.IPs { // net.ip is implicitly convertible to netip as slice ip, _ := netip.AddrFromSlice(configuredPodIPs.Address.IP) // We ignore the mask of the IPNet - it's fine if the IPNet defines // a block grant of addresses, we just need one for checking routes. podIps = append(podIps, ip) }
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Thu Feb 08 18:52:24 GMT 2024 - 6.1K bytes - Viewed (0) -
cni/pkg/repair/netns.go
return link.Attrs().NetNsID, nil } func getLinkWithDestinationOf(ip string) (netlink.Link, error) { routes, err := netlink.RouteListFiltered( netlink.FAMILY_V4, &netlink.Route{Dst: &net.IPNet{IP: net.ParseIP(ip), Mask: net.CIDRMask(32, 32)}}, netlink.RT_FILTER_DST) if err != nil { return nil, err } if len(routes) == 0 { return nil, fmt.Errorf("no routes found for %s", ip) } linkIndex := routes[0].LinkIndex
Go - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Wed Dec 20 22:14:13 GMT 2023 - 4.8K bytes - Viewed (0) -
common-protos/k8s.io/api/networking/v1alpha1/generated.proto
// perNodeHostBits defines the number of host bits to be configured per node. // A subnet mask determines how much of the address is used for network bits // and host bits. For example an IPv4 address of 192.168.0.0/24, splits the // address into 24 bits for the network portion and 8 bits for the host portion. // To allocate 256 IPs, set this field to 8 (a /24 mask for IPv4 or a /120 for IPv6). // Minimum value is 4 (16 IPs). // This field is immutable.
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 6K bytes - Viewed (0) -
manifests/charts/istio-cni/templates/daemonset.yaml
affinity: {{- toYaml . | nindent 8 }} {{- end }} tolerations: # Make sure istio-cni-node gets scheduled on all nodes. - effect: NoSchedule operator: Exists # Mark the pod as a critical add-on for rescheduling. - key: CriticalAddonsOnly operator: Exists - effect: NoExecute operator: Exists priorityClassName: system-node-critical
Others - Registered: Wed Mar 20 22:53:08 GMT 2024 - Last Modified: Wed Feb 28 17:29:38 GMT 2024 - 9.4K bytes - Viewed (0) -
cni/pkg/iptables/testdata/default_ipv6.golden
iptables -t mangle -A ISTIO_PRERT -p tcp -m tcp --dport 15008 -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15008 --tproxy-mark 0x111/0xfff iptables -t mangle -A ISTIO_PRERT -p tcp -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT iptables -t mangle -A ISTIO_PRERT ! -d 127.0.0.1/32 -p tcp -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15006 --tproxy-mark 0x111/0xfff
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 2.9K bytes - Viewed (0) -
cni/pkg/plugin/testdata/tproxy.txt.golden
-A PREROUTING -p tcp -m mark --mark 1337 -j CONNMARK --save-mark -A OUTPUT -p tcp -o lo -m mark --mark 1337 -j RETURN -A OUTPUT ! -d 127.0.0.1/32 -p tcp -o lo -m owner --uid-owner 1337 -j MARK --set-mark 1338 -A OUTPUT ! -d 127.0.0.1/32 -p tcp -o lo -m owner --gid-owner 1337 -j MARK --set-mark 1338 -A OUTPUT -p tcp -m connmark --mark 1337 -j CONNMARK --restore-mark -I ISTIO_INBOUND 1 -p tcp -m mark --mark 1337 -j RETURN
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Thu Feb 16 22:54:20 GMT 2023 - 1.9K bytes - Viewed (0) -
cni/pkg/plugin/testdata/custom-uid-tproxy.txt.golden
-A PREROUTING -p tcp -m mark --mark 1337 -j CONNMARK --save-mark -A OUTPUT -p tcp -o lo -m mark --mark 1337 -j RETURN -A OUTPUT ! -d 127.0.0.1/32 -p tcp -o lo -m owner --uid-owner 1000670000 -j MARK --set-mark 1338 -A OUTPUT ! -d 127.0.0.1/32 -p tcp -o lo -m owner --gid-owner 1000670001 -j MARK --set-mark 1338 -A OUTPUT -p tcp -m connmark --mark 1337 -j CONNMARK --restore-mark -I ISTIO_INBOUND 1 -p tcp -m mark --mark 1337 -j RETURN
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Wed Apr 26 16:39:28 GMT 2023 - 2K bytes - Viewed (0) -
cni/pkg/iptables/testdata/default.golden
iptables -t mangle -A ISTIO_PRERT ! -d 127.0.0.1/32 -p tcp -m mark ! --mark 0x539/0xfff -j TPROXY --on-port 15006 --tproxy-mark 0x111/0xfff iptables -t mangle -A ISTIO_OUTPUT -m connmark --mark 0x111/0xfff -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff iptables -t nat -A ISTIO_OUTPUT ! -o lo -p udp -m udp --dport 53 -j REDIRECT --to-port 15053 iptables -t nat -A ISTIO_OUTPUT -p tcp -m mark --mark 0x111/0xfff -j ACCEPT
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 1.4K bytes - Viewed (0) -
common-protos/k8s.io/api/authorization/v1/generated.proto
import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto"; // Package-wide variables from generator "generated". option go_package = "k8s.io/api/authorization/v1"; // ExtraValue masks the value so protobuf can generate // +protobuf.nullable=true // +protobuf.options.(gogoproto.goproto_stringer)=false message ExtraValue { // items, if empty, will result in an empty slice repeated string items = 1;
Plain Text - Registered: Wed May 01 22:53:12 GMT 2024 - Last Modified: Mon Mar 11 18:43:24 GMT 2024 - 11.9K bytes - Viewed (0)